Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/v0-fLq7negAhOxwEgDhoPOHeG9o.roa
File: v0-fLq7negAhOxwEgDhoPOHeG9o.roa (raw, json)
Hash identifier: EBydHJ/OXZPDZzeMRpvFYpJykiI0rJugSXaURotlegc=
Subject key identifier: BF:4F:9F:2E:AE:E7:7A:00:21:3B:1C:04:80:38:68:3C:E1:DE:1B:DA
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019CF555D913EABE3520162C85388BA716FF
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/v0-fLq7negAhOxwEgDhoPOHeG9o.roa
Signing time: Mon 16 Mar 2026 06:29:29 +0000
ROA not before: Mon 16 Mar 2026 06:29:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401819
IP address blocks: 87.101.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f5:55:d9:13:ea:be:35:20:16:2c:85:38:8b:a7:16:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Mar 16 06:29:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf4f9f2eaee77a00213b1c048038683ce1de1bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:77:d5:83:df:d3:98:a6:90:e3:18:5c:b1:30:
26:f4:1f:dd:1e:fe:f9:ae:b5:1d:e2:39:3f:be:43:
89:7c:63:14:24:a0:e3:d9:ef:ea:fd:6b:0d:ce:40:
83:55:de:e3:ca:55:29:43:81:17:3c:77:5c:c4:d0:
ca:75:a3:3d:d5:bf:cb:e4:60:a9:10:12:9a:2b:5b:
38:8c:46:97:69:eb:e5:b7:e9:fd:3d:9e:af:82:9c:
5c:b5:57:cf:40:ac:c6:23:3e:ca:da:83:6a:89:c2:
35:95:ed:6b:9c:b9:4d:bc:05:09:e9:90:6e:8a:06:
d7:23:47:0b:5f:b9:89:77:e0:6b:e1:44:c7:68:69:
26:e5:fa:14:e0:83:f6:ce:42:8a:21:96:dc:07:bd:
b0:f4:1a:87:4f:b3:29:95:33:5f:09:5f:15:b2:a0:
62:f5:a9:95:e5:5f:40:4c:e3:c2:c1:ec:e1:02:f6:
92:0b:61:7b:ea:21:02:bb:15:9d:b3:34:39:3f:bd:
09:0f:37:5a:c8:bd:3a:37:3c:bc:b1:17:b2:62:04:
61:a1:09:e7:67:fa:af:4d:12:21:2c:15:73:0f:37:
f7:6a:23:ee:15:9d:88:2e:9c:e1:21:44:c5:93:ce:
11:9a:8b:a8:99:52:5d:23:dd:b0:dc:01:b6:dc:bb:
7a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4F:9F:2E:AE:E7:7A:00:21:3B:1C:04:80:38:68:3C:E1:DE:1B:DA
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/v0-fLq7negAhOxwEgDhoPOHeG9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.101.1.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:fd:53:65:d4:bb:92:56:06:82:be:df:a2:ae:91:16:bb:54:
37:a0:1f:6a:79:fc:61:8b:75:3b:0e:4d:ce:7b:89:58:4e:54:
52:a8:6a:0f:de:b3:b6:23:b4:0c:95:98:92:45:fd:41:8f:0c:
ad:95:b8:62:49:c8:24:7b:de:b7:f0:96:a0:80:d8:92:c5:8e:
7a:26:f4:3b:99:a6:05:88:cd:72:1e:19:db:da:ab:c0:90:9b:
ff:fa:d3:8c:ab:50:30:e7:63:45:3c:32:19:05:f7:77:97:80:
2c:a1:23:28:96:6a:8c:9c:7b:60:08:90:45:54:c1:3c:70:48:
be:39:a7:5c:23:bb:84:7c:b2:b3:3b:3a:b1:fb:e5:b4:93:5c:
93:f0:af:d2:a6:fd:6c:a1:0f:51:21:fc:00:95:1c:ed:14:bb:
4c:c2:cb:da:f0:a9:c6:79:82:94:df:f0:d6:6e:e7:a9:5d:0c:
f5:4e:b7:3a:41:99:7f:d3:53:67:fc:9b:6a:ca:3e:3b:2b:c7:
79:22:03:56:85:ec:0a:96:06:89:f4:4d:de:78:e4:12:f6:47:
85:7d:55:d2:39:36:68:ea:bc:21:fa:4d:b0:f6:80:6b:c3:70:
c7:62:ed:11:19:78:df:d8:07:cd:87:0a:b1:8f:a2:90:44:86:
bd:d6:b5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:08:54 2026 by rpki-client