Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/bVQxxdG6H9tNOWT8a5T2RYz22dI.roa
File: bVQxxdG6H9tNOWT8a5T2RYz22dI.roa (raw, json)
Hash identifier: AkUS+45GMxHs7aqixPE49s6nSPa9IkOPjsLfAfFJqz4=
Subject key identifier: 6D:54:31:C5:D1:BA:1F:DB:4D:39:64:FC:6B:94:F6:45:8C:F6:D9:D2
Certificate issuer: /CN=8053abc3d49f565b94878ed8f220ce327f974a32
Certificate serial: 01A1BA7D7DCFA04FD594D7FAF38A9A1CDBCE
Authority key identifier: 80:53:AB:C3:D4:9F:56:5B:94:87:8E:D8:F2:20:CE:32:7F:97:4A:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFOrw9SfVluUh47Y8iDOMn-XSjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/bVQxxdG6H9tNOWT8a5T2RYz22dI.roa
Signing time: Sun 08 Nov 2026 09:29:08 +0000
ROA not before: Sun 08 Nov 2026 09:29:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212720
IP address blocks: 193.148.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFOrw9SfVluUh47Y8iDOMn-XSjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ba:7d:7d:cf:a0:4f:d5:94:d7:fa:f3:8a:9a:1c:db:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8053abc3d49f565b94878ed8f220ce327f974a32
Validity
Not Before: Nov 8 09:29:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d5431c5d1ba1fdb4d3964fc6b94f6458cf6d9d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ca:98:bf:36:8a:c5:76:9f:41:13:46:f1:11:
ff:95:2b:8e:86:05:20:68:9a:11:99:c5:6c:f9:b2:
ef:2d:5a:5c:a0:eb:a7:95:4f:04:e9:98:ed:65:63:
1c:9d:d4:e3:11:d5:b5:9f:f9:45:a2:3d:6f:81:0b:
fb:f9:b8:0e:48:90:b9:c5:a0:25:46:62:11:1a:4c:
e4:86:47:4e:55:61:44:d7:48:f5:8d:b3:c9:5b:23:
3a:c1:71:b8:1b:49:e3:34:4f:50:cb:b2:e6:00:e4:
88:9f:31:ce:34:2c:a6:69:37:20:fe:35:db:3d:bc:
b0:56:7d:30:5d:eb:ba:d6:40:27:ca:70:b9:2c:a7:
07:fe:ae:18:50:a5:0f:f5:57:81:54:4e:51:6b:24:
dd:da:4c:f3:d1:cf:0b:7b:c6:a7:bc:4c:9c:96:8b:
ae:6f:08:0d:5d:89:b8:5d:47:b0:d5:56:33:dc:eb:
cd:30:97:ef:59:ac:4b:5b:10:dd:a9:a8:7a:05:b3:
84:5a:86:08:af:3c:1f:51:54:2f:f1:cf:35:37:cf:
45:47:ba:ef:7c:e6:a0:49:22:ac:fa:8f:06:31:e3:
bf:b7:b9:3e:23:4a:6a:dd:3e:cf:24:90:d2:b6:59:
ab:07:d6:73:ab:24:66:53:38:eb:33:12:8b:72:8f:
84:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:54:31:C5:D1:BA:1F:DB:4D:39:64:FC:6B:94:F6:45:8C:F6:D9:D2
X509v3 Authority Key Identifier:
keyid:80:53:AB:C3:D4:9F:56:5B:94:87:8E:D8:F2:20:CE:32:7F:97:4A:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFOrw9SfVluUh47Y8iDOMn-XSjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/bVQxxdG6H9tNOWT8a5T2RYz22dI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/9aad6c-e01d-4133-a63f-0530a6cffa3c/1/gFOrw9SfVluUh47Y8iDOMn-XSjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.45.0/24
Signature Algorithm: sha256WithRSAEncryption
13:c5:36:2b:81:fd:79:a5:bd:3e:c1:ab:39:27:d1:0f:57:9f:
3a:36:4f:e5:de:ce:79:11:67:69:b6:80:a1:60:ad:f5:2a:91:
e7:d2:fe:4d:c9:72:5c:74:d6:ec:65:3c:05:5f:5b:88:6f:84:
9b:b1:85:8e:43:5f:4f:01:ef:67:cc:a6:e0:d8:0c:7b:cf:aa:
1b:60:79:0b:b8:ca:a5:3d:44:36:69:f1:90:ae:f9:6f:99:fc:
10:98:3b:40:cc:68:23:fd:8d:db:9d:a5:a5:36:be:33:b4:a2:
ff:4c:e0:35:5a:b2:37:33:82:71:ab:8c:21:9f:97:24:31:14:
38:de:6f:5f:21:dc:e0:fd:95:cb:f2:7a:25:fa:29:d3:a1:51:
da:1c:43:2b:9d:7c:fe:70:04:4c:94:03:97:ba:8c:77:b8:0e:
b3:24:ba:50:a1:ad:de:0b:46:42:74:52:3d:d5:33:0a:cb:ae:
14:fe:fe:9c:88:1a:09:0c:70:66:f1:3d:74:51:8e:ac:6d:15:
02:56:03:f6:7b:b2:4b:b2:68:51:5f:24:db:9c:b0:97:0b:e1:
77:5f:ac:4a:9a:4f:0c:64:7b:48:43:44:68:99:da:b3:67:91:
6e:37:aa:f7:f8:00:1b:71:51:db:a1:17:cf:e3:40:cf:13:ef:
96:f7:3e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:20:00 2026 by rpki-client