Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/Bt944BayBPUs5tY1-40d44HAARE.roa
File: Bt944BayBPUs5tY1-40d44HAARE.roa (raw, json)
Hash identifier: zi5M7iQxvBHgvnNeQP8FWxBFiEPXlMuyXlNAQguQJsE=
Subject key identifier: 06:DF:78:E0:16:B2:04:F5:2C:E6:D6:35:FB:8D:1D:E3:81:C0:01:11
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 019CE6A9268B0A10CE1847288CA768FE38BA
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/Bt944BayBPUs5tY1-40d44HAARE.roa
Signing time: Fri 13 Mar 2026 10:06:10 +0000
ROA not before: Fri 13 Mar 2026 10:06:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212032
IP address blocks: 216.116.185.0/24 maxlen: 24
216.116.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:a9:26:8b:0a:10:ce:18:47:28:8c:a7:68:fe:38:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Mar 13 10:06:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06df78e016b204f52ce6d635fb8d1de381c00111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:62:e0:03:65:0d:b3:ba:80:02:f8:5b:6f:93:
ce:5d:c7:98:30:2c:7a:2f:24:00:72:84:7e:4b:42:
51:af:3f:9c:03:a1:44:93:89:6c:f8:84:eb:85:6a:
57:36:18:d5:9e:51:8b:f9:87:ae:37:59:8b:7b:ee:
3c:85:59:85:f0:39:51:12:13:b7:70:e5:bf:ed:e6:
df:11:2a:bf:4c:52:27:fe:28:e3:74:69:71:41:d6:
9b:ce:ac:ed:ec:02:40:9a:94:48:51:16:0f:33:fa:
b6:5b:a9:36:92:a4:a7:d4:75:7c:8c:37:05:69:6e:
b0:d8:10:c7:33:25:c2:38:7c:28:c0:a7:3a:5a:e5:
40:f8:4a:09:a4:5d:bf:5d:0c:cc:ab:a3:5d:49:5c:
32:ac:ba:49:7d:fc:c7:fe:4b:26:df:d4:c4:d8:4c:
53:6f:5d:b8:dc:fd:45:e9:d4:d7:50:8f:a6:fe:8b:
e2:37:ad:7b:2c:96:1d:dd:18:85:b6:e0:56:9d:c3:
d0:d2:a6:be:52:ea:c8:b2:73:d5:08:d1:7b:e3:df:
a6:67:0d:b2:b0:47:9e:fa:fd:35:d4:c8:8c:02:66:
be:a0:46:98:07:9e:be:9c:f1:fa:00:4e:64:d0:63:
81:c8:4f:f8:8e:1e:8c:0f:13:76:6e:47:b2:36:51:
7b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:DF:78:E0:16:B2:04:F5:2C:E6:D6:35:FB:8D:1D:E3:81:C0:01:11
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/Bt944BayBPUs5tY1-40d44HAARE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.116.185.0-216.116.186.255
Signature Algorithm: sha256WithRSAEncryption
b7:60:3c:4a:68:1d:4a:fc:1a:cd:02:13:1d:41:8b:51:e1:99:
c5:4f:19:60:88:d0:aa:bc:49:2c:56:99:7c:e1:60:da:fc:1c:
f1:e7:4e:95:57:6f:58:bc:0a:d1:84:7e:31:fb:00:ea:ba:88:
a0:ef:a9:23:ad:42:f6:1b:ea:1f:45:af:46:f1:34:72:91:6a:
8e:4e:f7:98:d7:da:c5:99:05:47:25:6d:69:d8:ad:b1:48:d4:
58:a8:6b:f0:d2:0a:88:85:70:86:89:83:46:84:03:da:7f:84:
20:ef:9f:74:6d:19:78:27:bc:01:8a:a6:c8:50:df:50:9d:54:
92:f6:6b:77:01:2f:08:d1:6f:85:98:e0:99:43:d2:b5:0c:ae:
9c:cf:33:dc:8e:3b:c5:41:7d:31:50:d9:f0:e9:66:20:ea:69:
08:a4:a2:f7:1e:2a:f4:74:88:21:a4:e3:49:7e:06:df:d9:7d:
f9:40:f9:31:21:ca:3c:2f:11:b3:9e:45:e4:08:54:8a:21:89:
3c:57:d2:d1:2c:4f:6b:52:17:9f:56:74:aa:0d:33:7c:a5:19:
f0:09:5b:df:c7:79:36:f2:ac:dd:52:3e:62:0e:24:b2:1e:00:
3d:cb:c9:94:af:a3:ef:bc:39:c4:71:14:a7:a9:d2:56:24:dc:
01:c5:31:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:07:33 2026 by rpki-client