Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/bd2_haPLBRYi9ES34EvG-zee_fI.roa
File: bd2_haPLBRYi9ES34EvG-zee_fI.roa (raw, json)
Hash identifier: zv3v3Yxo4I1/H7/mLZQ/IjI9COcfhoJxeb//tFFD0cU=
Subject key identifier: 6D:DD:BF:85:A3:CB:05:16:22:F4:44:B7:E0:4B:C6:FB:37:9E:FD:F2
Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Certificate serial: 019F1D0D607D0F3FEA04ABD68CA50B757FFD
Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/bd2_haPLBRYi9ES34EvG-zee_fI.roa
Signing time: Wed 01 Jul 2026 09:40:43 +0000
ROA not before: Wed 01 Jul 2026 09:40:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 32043
IP address blocks: 195.216.165.0/24 maxlen: 24
195.216.166.0/24 maxlen: 24
195.216.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:0d:60:7d:0f:3f:ea:04:ab:d6:8c:a5:0b:75:7f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7
Validity
Not Before: Jul 1 09:40:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6dddbf85a3cb051622f444b7e04bc6fb379efdf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:59:1c:3a:60:1c:5e:c2:2a:5b:da:f4:a0:ff:
d6:fe:82:e6:ae:e4:ec:86:f5:9f:88:8a:fa:5c:ef:
0b:eb:06:98:09:e9:8d:1d:78:38:8e:63:ae:f3:b4:
ef:a2:ff:92:d1:ef:6b:57:f5:52:e1:34:a8:e3:d0:
64:0d:ca:f5:88:3f:25:08:8c:c2:ea:27:79:e6:19:
2c:e4:bb:cf:0c:1b:48:8f:8c:14:bd:83:5d:27:a1:
33:63:67:0d:e5:d0:0d:82:a7:44:a2:e0:f8:cf:be:
d6:ee:2c:e8:54:ee:f7:8c:6b:af:47:09:0f:b7:2a:
13:75:09:e1:4c:e2:45:e9:04:fa:02:57:81:25:2c:
d8:28:61:14:5a:c9:d3:34:2d:5c:78:6c:19:93:10:
c0:42:ee:6d:74:d7:f7:ee:fd:6b:96:87:cb:70:0c:
e6:56:94:c2:ef:7e:b7:f8:11:97:32:c9:94:0c:eb:
e2:25:7e:c1:2c:a4:dd:3f:1c:9c:bb:b9:9b:20:d6:
58:f7:46:fd:65:bd:77:8d:e9:9a:ea:51:f7:b8:f3:
d3:8d:84:a8:8c:e7:ad:7e:54:ac:72:0a:69:b8:bf:
ba:5e:fb:eb:3c:e9:73:9b:81:6e:9d:ea:c5:47:76:
e3:61:eb:cc:d5:aa:a6:e9:1a:23:92:d8:6c:3a:ed:
d0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:DD:BF:85:A3:CB:05:16:22:F4:44:B7:E0:4B:C6:FB:37:9E:FD:F2
X509v3 Authority Key Identifier:
keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/bd2_haPLBRYi9ES34EvG-zee_fI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.216.165.0-195.216.167.255
Signature Algorithm: sha256WithRSAEncryption
04:f8:4f:97:4e:f1:14:67:f9:b4:ed:1e:9b:62:69:0a:a2:73:
d7:73:a7:94:da:fb:30:97:ba:04:10:d7:16:90:cb:2a:8e:af:
28:a4:6f:14:cb:c4:0e:84:f3:11:e5:13:60:f5:16:8d:25:8d:
95:a3:73:c1:df:25:05:89:93:86:df:74:f3:c4:80:de:59:00:
58:fc:b7:bc:ad:2a:c2:28:ae:e4:d0:34:64:d8:c5:1e:cb:71:
85:f8:f0:a0:cf:8c:f7:db:f8:9f:b3:92:5a:1d:06:5d:18:a7:
d1:db:eb:e9:90:19:7d:7f:81:8a:52:c4:7d:68:b6:f7:74:15:
a4:a3:cb:08:3a:2e:67:79:ec:ef:55:90:24:ef:52:a2:89:1a:
fe:7b:00:a6:8b:c3:1f:3b:e6:af:e4:eb:a6:45:ce:f2:dc:d0:
83:2d:66:b6:2d:ae:ea:d9:bb:83:81:93:d4:18:f5:08:c3:c6:
2e:6d:ac:bf:41:f6:55:60:2c:11:e8:0b:de:ec:00:23:40:c6:
1c:35:cd:eb:73:d2:93:25:36:6a:f5:be:2e:7a:eb:a8:45:f3:
75:2b:a3:ce:05:71:25:5f:a3:c9:e3:cb:5b:f4:e0:b4:38:bd:
ac:e7:37:59:88:c1:6b:a9:14:49:aa:56:da:03:b8:8d:e1:37:
39:35:dd:61
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZ8dDWB9Dz/qBKvWjKULdX/9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy
MTVkYTcwHhcNMjYwNzAxMDk0MDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZGRkYmY4NWEzY2IwNTE2MjJmNDQ0YjdlMDRiYzZmYjM3OWVmZGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslkcOmAcXsIqW9r0oP/W/oLmruTs
hvWfiIr6XO8L6waYCemNHXg4jmOu87Tvov+S0e9rV/VS4TSo49BkDcr1iD8lCIzC
6id55hks5LvPDBtIj4wUvYNdJ6EzY2cN5dANgqdEouD4z77W7izoVO73jGuvRwkP
tyoTdQnhTOJF6QT6AleBJSzYKGEUWsnTNC1ceGwZkxDAQu5tdNf37v1rlofLcAzm
VpTC7363+BGXMsmUDOviJX7BLKTdPxycu7mbINZY90b9Zb13jema6lH3uPPTjYSo
jOetflSscgppuL+6XvvrPOlzm4FunerFR3bjYevM1aqm6RojkthsOu3Q9wIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFG3dv4WjywUWIvREt+BLxvs3nv3yMB8GA1UdIwQY
MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct
OWU0MTNlYmY0MmYzLzEvYmQyX2hhUExCUllpOUVTMzRFdkctemVlX2ZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz
LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADD2KUD
BAPD2KAwDQYJKoZIhvcNAQELBQADggEBAAT4T5dO8RRn+bTtHptiaQqic9dzp5Ta
+zCXugQQ1xaQyyqOryikbxTLxA6E8xHlE2D1Fo0ljZWjc8HfJQWJk4bfdPPEgN5Z
AFj8t7ytKsIoruTQNGTYxR7LcYX48KDPjPfb+J+zklodBl0Yp9Hb6+mQGX1/gYpS
xH1otvd0FaSjywg6Lmd57O9VkCTvUqKJGv57AKaLwx875q/k66ZFzvLc0IMtZrYt
rurZu4OBk9QY9QjDxi5trL9B9lVgLBHoC97sACNAxhw1zetz0pMlNmr1vi5666hF
83Uro84FcSVfo8njy1v04LQ4vaznN1mIwWupFEmqVtoDuI3hNzk13WE=
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:15:22 2026 by rpki-client