Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/tRavD7X3x-pkyK2-nAiMdbIdqoI.roa
File: tRavD7X3x-pkyK2-nAiMdbIdqoI.roa (raw, json)
Hash identifier: GqJojixsG233I+gLh+j8vr578QE9LBaBDivJpB3UI+k=
Subject key identifier: B5:16:AF:0F:B5:F7:C7:EA:64:C8:AD:BE:9C:08:8C:75:B2:1D:AA:82
Certificate issuer: /CN=bc4354be4f31e518c89b52aebc9b789778a193a6
Certificate serial: 019F2368E328F0A19472C800D998131BE714
Authority key identifier: BC:43:54:BE:4F:31:E5:18:C8:9B:52:AE:BC:9B:78:97:78:A1:93:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vENUvk8x5RjIm1KuvJt4l3ihk6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/tRavD7X3x-pkyK2-nAiMdbIdqoI.roa
Signing time: Thu 02 Jul 2026 15:18:24 +0000
ROA not before: Thu 02 Jul 2026 15:18:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215833
IP address blocks: 185.104.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/vENUvk8x5RjIm1KuvJt4l3ihk6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/vENUvk8x5RjIm1KuvJt4l3ihk6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vENUvk8x5RjIm1KuvJt4l3ihk6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e3:28:f0:a1:94:72:c8:00:d9:98:13:1b:e7:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4354be4f31e518c89b52aebc9b789778a193a6
Validity
Not Before: Jul 2 15:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b516af0fb5f7c7ea64c8adbe9c088c75b21daa82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:38:b9:35:8f:9c:30:ba:df:10:c8:eb:ab:b6:
60:76:b1:1d:7c:ea:15:66:f3:2e:c9:f1:d1:2c:85:
e0:de:85:7d:05:08:41:3d:2c:01:99:58:99:e0:c5:
4d:8f:85:54:0c:5c:8c:53:e8:cc:3b:7e:fa:ab:09:
be:61:40:00:cc:82:ab:71:a2:68:1a:24:dc:07:2e:
00:bd:2b:e5:ae:23:59:92:ce:72:3c:98:48:94:44:
de:8d:1f:7c:bb:42:41:73:74:ef:ff:45:72:a6:75:
98:52:65:3d:14:08:f7:d5:d4:d2:2b:d1:16:6c:d7:
ac:8f:79:4a:2d:40:7f:6f:80:d5:67:a6:57:9d:77:
a1:92:e2:0e:f3:5a:f7:4b:b9:67:22:fa:94:25:6a:
01:d3:ad:47:f4:d8:41:19:a8:f0:38:bc:59:48:98:
ba:f5:39:0d:0b:12:55:cf:fe:88:a0:ca:33:44:ed:
c8:e3:4d:54:58:c3:d9:4f:a5:b0:43:7f:d0:49:4c:
cc:f8:11:6f:3d:a3:33:e7:52:ab:23:3a:de:ea:d0:
46:1f:26:7b:10:2a:71:e6:11:a9:2d:cc:93:4b:36:
d4:e1:86:61:e6:e7:f4:3a:75:37:c6:cf:2a:f4:8b:
8f:6a:ae:c6:f7:53:44:1b:90:87:c2:f7:f2:c2:a3:
b5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:16:AF:0F:B5:F7:C7:EA:64:C8:AD:BE:9C:08:8C:75:B2:1D:AA:82
X509v3 Authority Key Identifier:
keyid:BC:43:54:BE:4F:31:E5:18:C8:9B:52:AE:BC:9B:78:97:78:A1:93:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vENUvk8x5RjIm1KuvJt4l3ihk6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/tRavD7X3x-pkyK2-nAiMdbIdqoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/vENUvk8x5RjIm1KuvJt4l3ihk6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.123.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:88:bc:c5:d5:9d:ad:99:f6:5a:bb:07:b2:0f:90:65:3f:ad:
24:b7:c8:2d:14:fb:b5:27:a4:47:37:b8:f8:12:dd:27:5b:00:
59:f4:7e:d6:a1:1c:79:29:48:5d:b9:a1:58:63:b3:f0:81:71:
33:d5:47:d9:59:04:4c:b4:40:9a:4d:e5:f6:85:0a:9c:3f:f0:
47:55:a9:2e:02:fc:f1:2e:7a:8b:cb:6f:d3:8c:74:b8:b4:a2:
a3:28:23:cc:2b:b4:aa:08:16:3d:55:4e:7a:40:23:d8:5d:c2:
24:46:b1:b3:2f:d0:01:25:7f:6f:0e:9a:55:16:5d:85:30:e0:
3a:c1:e9:ce:c5:c4:0e:30:57:d8:33:89:dd:e6:19:d3:ae:f8:
cd:90:f5:ad:58:3b:a8:36:e6:67:f3:42:63:47:32:7d:d3:54:
32:86:52:7e:71:83:e0:ad:25:23:2d:cb:6d:f6:92:1f:6e:8d:
b8:8d:37:90:72:94:78:09:1c:60:63:3d:56:7f:96:50:bd:66:
bb:70:71:2b:c2:82:41:35:5a:4f:8d:22:8f:f3:f6:75:dc:38:
4b:10:15:ab:4f:31:e3:14:85:83:8d:8a:e2:e4:6d:a7:e7:96:
ac:51:86:3b:13:46:48:00:b1:3a:42:df:44:ea:a6:43:3f:1f:
7c:0f:c5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:19:47 2026 by rpki-client