Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/Bx-vAb6JcdMAkqoFkx5QchgWBPw.roa
File: Bx-vAb6JcdMAkqoFkx5QchgWBPw.roa (raw, json)
Hash identifier: tXWgzC52m15bMpTie/nAe4jMMYYoA58oLlL3abiDdMc=
Subject key identifier: 07:1F:AF:01:BE:89:71:D3:00:92:AA:05:93:1E:50:72:18:16:04:FC
Certificate issuer: /CN=745e690b65dd2b62dafd3eae5309defa4cb5c7c4
Certificate serial: 019F23682AF9261C4128C07D1452136E2710
Authority key identifier: 74:5E:69:0B:65:DD:2B:62:DA:FD:3E:AE:53:09:DE:FA:4C:B5:C7:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dF5pC2XdK2La_T6uUwne-ky1x8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/Bx-vAb6JcdMAkqoFkx5QchgWBPw.roa
Signing time: Thu 02 Jul 2026 15:17:36 +0000
ROA not before: Thu 02 Jul 2026 15:17:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1724
IP address blocks: 161.3.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/dF5pC2XdK2La_T6uUwne-ky1x8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/dF5pC2XdK2La_T6uUwne-ky1x8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/dF5pC2XdK2La_T6uUwne-ky1x8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:2a:f9:26:1c:41:28:c0:7d:14:52:13:6e:27:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745e690b65dd2b62dafd3eae5309defa4cb5c7c4
Validity
Not Before: Jul 2 15:17:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=071faf01be8971d30092aa05931e5072181604fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6b:5c:91:4a:8c:17:a6:9d:2b:30:45:85:31:
60:16:af:96:dd:ff:03:df:e9:e8:77:58:ac:56:82:
54:e8:13:cf:ab:5a:d7:9b:8a:a7:25:20:ed:18:0c:
5c:af:f4:9e:f4:82:61:13:5d:3f:8a:c9:0c:bf:d9:
ee:b9:0b:28:98:a6:9e:fa:95:36:97:00:03:a8:ff:
cb:f5:cd:de:cf:65:35:3e:ef:10:15:48:93:b0:b5:
36:18:8c:bc:bd:76:f6:1c:ce:d9:46:bc:4b:49:d2:
df:00:43:4a:3a:bf:fe:d7:90:2d:8b:ca:5c:ae:13:
d3:52:d8:d2:96:3c:cf:96:c5:b9:11:62:36:98:70:
bd:74:16:15:c7:fe:08:ac:59:f0:72:d9:14:f2:cc:
b3:04:47:e4:78:db:5c:da:83:1a:7e:02:47:61:f8:
cc:c9:57:68:27:77:4e:e3:95:f1:da:3f:36:6b:3b:
7b:56:93:c2:da:d3:57:ac:1e:c6:a2:c1:20:7d:b6:
15:4a:89:47:b8:b7:b0:77:c2:2c:fc:5c:96:f8:99:
ac:f1:2f:9a:6f:bf:25:dc:42:f0:c9:4f:f3:af:a9:
21:7f:7d:29:06:0a:2a:ba:ae:7b:93:c3:00:ba:74:
57:10:ae:1c:a9:47:73:41:25:f1:ea:ff:76:9c:55:
ee:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1F:AF:01:BE:89:71:D3:00:92:AA:05:93:1E:50:72:18:16:04:FC
X509v3 Authority Key Identifier:
keyid:74:5E:69:0B:65:DD:2B:62:DA:FD:3E:AE:53:09:DE:FA:4C:B5:C7:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dF5pC2XdK2La_T6uUwne-ky1x8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/Bx-vAb6JcdMAkqoFkx5QchgWBPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c42b37-d448-4cf3-bfec-1692fc8bba15/1/dF5pC2XdK2La_T6uUwne-ky1x8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.3.0.0/16
Signature Algorithm: sha256WithRSAEncryption
35:c5:9f:fe:27:ec:88:8a:c2:92:4c:63:41:23:24:74:ea:06:
4f:b3:37:12:68:6a:f9:ab:eb:0c:87:7c:17:c6:a6:a7:56:f1:
6c:f9:cf:46:0d:1e:99:fd:3d:7b:c4:bd:d6:9e:ff:82:31:3f:
10:dc:bf:92:f1:6d:7f:43:84:91:46:eb:99:b7:f2:85:c7:a8:
34:69:f3:40:44:17:79:64:cb:f2:9e:eb:d1:ed:fa:39:51:94:
dc:f9:7b:3f:f4:18:25:b9:a9:c4:59:35:57:9e:9e:1a:86:37:
99:c2:ef:7c:f3:5e:c1:51:22:d4:43:22:f7:38:22:5e:fd:f7:
fa:56:2d:2b:c6:b6:fa:e9:c1:f9:b8:5b:f0:58:42:ea:49:d3:
57:ed:65:fc:24:ef:80:af:51:6a:5f:25:0b:80:06:98:52:d9:
7a:39:0a:9b:8b:26:49:8d:c3:92:0a:1c:8b:97:e6:f2:a8:d1:
39:04:e0:bb:f6:12:4f:57:e3:bb:19:38:9e:69:6c:40:63:a1:
7f:ac:e0:bd:d3:40:2a:b2:35:36:cd:e6:88:c8:78:e2:d6:3e:
5a:52:54:a1:4d:70:88:7e:be:46:67:96:b8:f6:40:19:d4:ec:
d0:13:96:df:5f:1a:f0:5a:9b:06:dd:56:7f:19:92:93:f0:9f:
fe:27:67:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:05:43 2026 by rpki-client