Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/rrDoPtBcmYrtFsSBQoQOi4LhCEs.roa
File: rrDoPtBcmYrtFsSBQoQOi4LhCEs.roa (raw, json)
Hash identifier: 6GGMw5jhv2E0iY7GXeItoH474mvVadIlFXmHfEnSu/o=
Subject key identifier: AE:B0:E8:3E:D0:5C:99:8A:ED:16:C4:81:42:84:0E:8B:82:E1:08:4B
Certificate issuer: /CN=a16b0d8ab49436550b6abf45b79035aec6aff23c
Certificate serial: 019F64B30CFA413CE013471A4A977C9753CE
Authority key identifier: A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/rrDoPtBcmYrtFsSBQoQOi4LhCEs.roa
Signing time: Wed 15 Jul 2026 07:34:43 +0000
ROA not before: Wed 15 Jul 2026 07:34:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20836
IP address blocks: 95.157.64.0/19 maxlen: 24
95.157.96.0/19 maxlen: 24
178.249.184.0/21 maxlen: 24
178.249.189.0/24 maxlen: 24
185.47.228.0/22 maxlen: 24
217.171.32.0/20 maxlen: 24
2001:b60::/32 maxlen: 32
2001:b61::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:64:b3:0c:fa:41:3c:e0:13:47:1a:4a:97:7c:97:53:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a16b0d8ab49436550b6abf45b79035aec6aff23c
Validity
Not Before: Jul 15 07:34:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aeb0e83ed05c998aed16c48142840e8b82e1084b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0a:79:de:90:71:ff:6b:32:88:b8:89:54:3c:
32:19:f9:ef:28:65:a3:54:fc:74:4a:04:2c:7d:2c:
c8:03:c8:36:0a:73:ed:b4:b0:db:e5:e5:ce:1a:c2:
f1:76:66:bd:d6:c7:2a:25:71:dd:c2:02:8b:7b:4e:
10:60:40:1b:a7:53:b4:75:a2:1f:d5:4f:d3:3b:ba:
5c:9e:ae:e4:6f:4c:75:50:2d:1d:04:d0:3b:51:08:
6f:44:3c:c8:ba:6f:92:50:86:f0:f1:77:12:aa:9a:
e7:89:9f:4e:02:db:f1:66:38:54:ee:16:1d:da:b0:
42:6e:30:d1:2f:91:41:08:e9:aa:ca:f4:ae:f5:1e:
bd:78:30:60:6c:46:76:a6:23:23:14:e5:20:82:6e:
73:0b:5f:13:c5:b5:78:bb:05:1e:c4:38:c1:37:2c:
d5:e5:e2:c6:b0:bb:10:4a:0d:aa:0f:9c:31:85:c9:
93:86:42:d7:be:ff:95:1f:44:7e:24:29:ec:8d:6f:
ec:8e:b2:ff:55:85:80:e3:5a:da:76:93:99:e2:2d:
5f:36:5f:d3:ee:7a:7b:84:3e:57:1c:4d:d1:99:ef:
95:ee:a0:01:bf:20:1c:94:29:77:0b:b4:69:28:bd:
2b:2d:2f:d3:63:e0:05:35:a6:98:54:4a:ef:29:e9:
3c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B0:E8:3E:D0:5C:99:8A:ED:16:C4:81:42:84:0E:8B:82:E1:08:4B
X509v3 Authority Key Identifier:
keyid:A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/rrDoPtBcmYrtFsSBQoQOi4LhCEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.157.64.0/18
178.249.184.0/21
185.47.228.0/22
217.171.32.0/20
IPv6:
2001:b60::/31
Signature Algorithm: sha256WithRSAEncryption
b9:9e:a8:81:02:f4:71:b8:84:e7:40:22:78:f7:ce:dc:49:50:
e0:48:04:ad:63:80:d2:bc:88:88:36:30:8d:6d:74:3b:c5:cb:
fd:9b:35:fc:f6:08:60:a5:e3:e9:14:d8:43:3f:5d:16:29:6f:
46:7f:33:b5:1d:12:02:66:05:82:7b:e4:9b:d6:10:15:2b:54:
dd:f8:68:2a:e5:d4:38:11:64:0b:e3:4f:36:fd:53:5f:6e:fc:
2f:40:33:c4:26:ed:32:94:0d:7e:1e:d7:2b:fe:ab:90:db:2e:
31:d6:2a:b8:69:26:56:39:23:b2:44:0e:43:b5:5b:2b:a9:7f:
7e:b0:2d:cb:b0:2c:72:47:e9:6f:b4:2e:9d:df:b6:93:61:33:
ef:c1:58:3d:f1:e8:a4:16:eb:49:03:e6:16:94:fc:1f:51:35:
9a:e4:9f:17:06:e8:13:95:a3:eb:aa:86:05:43:e0:7b:38:e3:
e6:dd:b3:07:a6:2c:8f:64:b6:ad:1f:9c:c8:81:4a:43:b7:c8:
26:29:b7:88:8e:3c:6d:e8:8e:67:2b:2e:e0:40:00:95:16:b2:
3e:c1:6a:59:57:0a:0d:ac:fc:9a:90:c3:0e:98:e0:4d:35:cb:
81:da:9e:89:06:1c:57:6f:0d:2a:02:eb:0b:30:cd:4e:cc:eb:
84:50:57:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:24:25 2026 by rpki-client