Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/e4WdAxYOOZhI1HUnTBJUvTzFLcc.roa
File: e4WdAxYOOZhI1HUnTBJUvTzFLcc.roa (raw, json)
Hash identifier: BxWMVdjBecDx+1X50nR2tWLJ9Ko6bUO8kFQ40XFyRn4=
Subject key identifier: 7B:85:9D:03:16:0E:39:98:48:D4:75:27:4C:12:54:BD:3C:C5:2D:C7
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 019D005F2A607D9B7BB200226254DEA8A07E
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/e4WdAxYOOZhI1HUnTBJUvTzFLcc.roa
Signing time: Wed 18 Mar 2026 09:55:29 +0000
ROA not before: Wed 18 Mar 2026 09:55:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201337
IP address blocks: 86.106.184.0/22 maxlen: 24
185.77.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:00:5f:2a:60:7d:9b:7b:b2:00:22:62:54:de:a8:a0:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Mar 18 09:55:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b859d03160e399848d475274c1254bd3cc52dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ca:47:6f:1f:3d:2e:06:38:bf:e1:d7:b2:8e:
a3:7d:f0:eb:ce:b4:a8:61:2c:1a:cf:4d:e4:fd:ff:
c6:4e:80:56:1e:a5:f6:46:37:83:e3:94:4b:e0:26:
e3:25:7d:2c:2d:5f:3c:e5:c8:1b:6b:90:f5:03:f6:
3d:8e:7e:9e:51:c0:f2:91:9f:d4:34:50:30:42:a6:
c8:62:10:05:58:13:77:19:ca:c5:d1:94:99:a4:95:
9b:cb:31:66:ae:37:06:da:ec:d4:f1:36:62:b5:45:
e4:4d:d0:84:f9:2e:80:27:c2:5f:b1:1e:fa:e5:9c:
cc:1f:10:d5:63:1f:04:55:c3:45:2b:7a:be:26:30:
6c:32:49:0e:9e:6a:39:ad:25:15:80:5f:c9:3f:ea:
eb:77:f7:6a:ec:d8:5e:54:ec:eb:83:bb:3c:29:72:
55:b5:3f:72:d8:44:16:68:77:d3:1d:0d:d0:48:0d:
b2:c0:4d:f9:75:5d:38:bc:41:ad:b7:86:9e:fd:79:
ac:a9:9f:43:47:a4:4a:8f:60:78:38:e2:6c:e5:fa:
2a:cb:a1:a1:0d:8f:a1:d5:d6:16:05:4d:21:0f:b4:
61:85:35:b4:a8:a6:7d:a7:b4:a0:7e:74:61:30:6c:
a7:e1:31:de:18:21:f9:62:a0:38:8d:18:9c:67:c7:
7d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:85:9D:03:16:0E:39:98:48:D4:75:27:4C:12:54:BD:3C:C5:2D:C7
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/e4WdAxYOOZhI1HUnTBJUvTzFLcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.184.0/22
185.77.168.0/22
Signature Algorithm: sha256WithRSAEncryption
18:68:8a:54:2e:fb:1f:37:06:18:66:65:12:bd:88:82:18:51:
b8:ae:fc:8b:ee:da:29:2d:08:bf:4e:e7:cd:d0:87:84:2d:19:
c5:3b:71:31:53:38:3a:79:a0:2c:04:5b:bb:bf:d9:ca:7d:12:
b3:e9:da:66:c4:26:bd:af:94:b9:26:4b:5a:ac:ef:8c:f2:32:
78:8d:1a:a2:3c:6b:ac:5d:8c:a0:b4:49:5a:a6:83:d4:88:fa:
99:db:fc:72:5f:3b:2c:e9:31:9e:2d:3c:49:0e:59:4d:08:65:
df:6a:89:57:b1:9c:06:86:c4:6c:7d:2c:03:ad:7d:2e:01:5f:
84:65:45:ef:3f:25:6a:0b:c1:75:c2:0b:04:c0:8d:49:1a:bd:
11:ab:11:68:68:fa:b6:15:d0:0e:b5:ef:5c:a7:0a:84:cb:d6:
63:b3:71:0e:86:fc:e4:8f:3b:1b:56:69:d5:b9:5c:59:91:2f:
92:59:96:3f:43:8f:b9:8f:e9:71:64:65:6b:7c:48:73:08:62:
1d:3e:75:25:70:15:85:0a:d1:a9:8f:f9:8a:84:cb:2a:1f:af:
00:1d:73:b3:83:de:a8:c4:4f:ed:4e:f3:00:21:88:f6:54:84:
30:bd:00:15:77:4a:ee:a2:c3:cd:3e:da:d7:0a:09:c2:fd:2b:
d2:60:ca:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:06:59 2026 by rpki-client