Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/vJ7BACarktQZPbgtcKZRm0Tfb78.roa
File: vJ7BACarktQZPbgtcKZRm0Tfb78.roa (raw, json)
Hash identifier: wC72pQDaNa5TsneYQqiJVvGl4X1LmKRupGx9AuzClbs=
Subject key identifier: BC:9E:C1:00:26:AB:92:D4:19:3D:B8:2D:70:A6:51:9B:44:DF:6F:BF
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 019F1D3BB7A90931C4A9D51A732476729BF7
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/vJ7BACarktQZPbgtcKZRm0Tfb78.roa
Signing time: Wed 01 Jul 2026 10:31:20 +0000
ROA not before: Wed 01 Jul 2026 10:31:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154602
IP address blocks: 89.167.167.0/24 maxlen: 24
89.167.172.0/24 maxlen: 24
89.167.212.0/24 maxlen: 24
89.167.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:3b:b7:a9:09:31:c4:a9:d5:1a:73:24:76:72:9b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jul 1 10:31:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc9ec10026ab92d4193db82d70a6519b44df6fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4c:c2:b7:6a:74:7f:4b:68:aa:f0:ab:b6:fc:
9a:37:13:83:7a:65:94:54:78:52:7d:28:55:1d:6a:
3f:5c:a4:ce:01:31:26:f9:a1:14:45:43:31:39:89:
24:89:fa:e9:61:e9:54:1a:ca:aa:5d:88:8b:44:f9:
7d:dc:50:95:35:d0:33:f7:3b:65:8f:11:b9:67:9f:
53:57:e2:42:e3:48:82:8b:ac:a3:32:06:ba:c6:b1:
ac:83:03:65:5c:6d:34:2f:4c:c1:5e:93:9d:da:9e:
3d:fa:aa:9c:e4:9a:4c:c1:b3:e5:a9:97:db:67:b2:
00:3a:6d:b4:b5:3c:ba:6b:d4:5d:c0:d1:22:a7:c3:
11:39:db:55:73:e7:b3:2b:4a:79:6e:e9:97:1e:dc:
8e:09:0f:4c:0b:c8:7e:34:f2:b1:a5:c9:3d:4a:b0:
f5:a3:b5:b5:93:5e:93:c1:1c:c2:4f:49:d3:93:89:
62:f7:bd:bb:83:eb:5b:31:64:7e:db:95:d1:43:d3:
4f:67:a3:f1:d8:dc:90:ab:3c:e5:3b:e2:a9:be:f4:
ef:1e:e7:14:7c:83:23:f8:9b:76:17:da:97:53:18:
55:99:39:d2:dd:73:f1:f9:41:a9:39:a1:e0:e1:ab:
55:ed:71:47:05:d5:21:8a:ca:20:bd:6f:e0:b6:b3:
3d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9E:C1:00:26:AB:92:D4:19:3D:B8:2D:70:A6:51:9B:44:DF:6F:BF
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/vJ7BACarktQZPbgtcKZRm0Tfb78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.167.167.0/24
89.167.172.0/24
89.167.212.0/24
89.167.221.0/24
Signature Algorithm: sha256WithRSAEncryption
62:29:12:34:0f:0e:5b:ae:ae:d6:a5:9d:f0:22:b9:dc:3b:9d:
a4:84:12:30:05:bb:c1:d1:b4:03:2a:f8:ca:5b:07:c2:e1:97:
19:f7:35:34:37:07:7f:eb:54:a0:25:67:4c:3d:54:db:0d:7d:
5a:bf:9a:4c:4f:e6:ad:43:58:36:c7:b5:ba:d5:4e:06:41:7a:
b7:a8:5d:0f:42:91:ac:20:f6:01:79:2e:53:ae:45:ee:73:5f:
29:9c:7f:15:ea:41:73:44:91:cd:83:2a:6c:ec:ee:d8:ad:dd:
9d:52:07:34:f5:58:1b:3d:59:52:63:cf:5a:c9:cf:b3:af:59:
cf:f5:57:19:eb:e9:46:61:c6:a4:52:b9:77:c0:bf:14:40:a5:
a3:fe:31:a7:af:43:05:0b:76:e4:c5:86:c8:98:94:43:bf:f8:
3b:b3:5e:67:9c:25:e7:25:3b:cc:5e:32:02:9b:0f:65:c0:35:
44:cd:95:73:ae:e1:a6:dd:e2:8e:d7:28:76:c1:13:36:a2:17:
60:7e:80:b8:f5:5f:eb:75:9e:d4:9d:f5:41:03:08:fb:26:c3:
d5:e3:cd:99:af:d2:16:5b:27:2b:88:c6:9c:b6:a4:3b:e8:6b:
0f:80:23:0b:a2:e1:80:2f:a0:d9:18:5e:2b:98:5c:62:54:1b:
29:e4:ce:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:41:50 2026 by rpki-client