Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/bA3yjJwl1AoWb5ZSApplbi62cEo.roa
File: bA3yjJwl1AoWb5ZSApplbi62cEo.roa (raw, json)
Hash identifier: EVY143W/KLkepJyc97USm8u+uCYkV4P9AAFIgzkG+0o=
Subject key identifier: 6C:0D:F2:8C:9C:25:D4:0A:16:6F:96:52:02:9A:65:6E:2E:B6:70:4A
Certificate issuer: /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Certificate serial: 01A1CB7E166B124877C005C29187D341502A
Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/bA3yjJwl1AoWb5ZSApplbi62cEo.roa
Signing time: Wed 11 Nov 2026 16:43:20 +0000
ROA not before: Wed 11 Nov 2026 16:43:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 80.255.192.0/19 maxlen: 19
84.19.104.0/21 maxlen: 21
84.19.122.0/23 maxlen: 23
84.19.124.0/22 maxlen: 22
185.228.252.0/22 maxlen: 22
193.39.32.0/20 maxlen: 20
193.39.65.0/24 maxlen: 24
193.193.96.0/20 maxlen: 20
194.145.148.0/23 maxlen: 23
195.182.160.0/19 maxlen: 19
212.43.160.0/19 maxlen: 19
213.147.224.0/19 maxlen: 19
2a02:8840::/26 maxlen: 26
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft
rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cb:7e:16:6b:12:48:77:c0:05:c2:91:87:d3:41:50:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca
Validity
Not Before: Nov 11 16:43:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c0df28c9c25d40a166f9652029a656e2eb6704a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:99:fa:a1:a5:11:61:be:12:8d:7b:11:00:47:
14:62:51:fd:05:b6:c4:a3:2a:df:7e:13:4a:c7:2f:
17:ed:53:56:37:da:70:0d:ae:71:94:93:0b:2a:72:
3e:a4:01:7f:cf:87:e3:bd:3a:35:1f:54:cd:17:00:
e7:99:5d:28:84:35:36:27:56:64:7a:83:99:96:e7:
a4:44:c5:63:52:9e:b1:0c:68:75:28:bb:64:38:47:
d3:e0:34:6d:2b:0a:ab:dd:40:53:38:5e:0b:ca:33:
c7:55:8a:34:38:19:06:f0:f7:f6:b1:6b:01:a7:4e:
c9:a6:e4:98:4e:4b:42:0b:c8:e7:99:40:27:e0:c2:
bf:27:57:2c:f1:95:28:d6:26:9c:81:f3:67:18:91:
ce:1f:96:62:4c:a2:0b:e3:ff:1d:b6:0d:bd:07:cf:
d7:5a:59:01:e5:bd:52:aa:c3:a6:f9:7d:ef:54:75:
77:c8:89:57:0e:eb:90:5e:05:03:fc:c2:c0:0d:e9:
4c:53:cd:d6:3c:26:de:7d:0c:40:7d:d4:13:f7:6d:
77:89:fa:fb:b5:ce:64:4a:15:69:c5:e1:47:cc:66:
9b:6f:66:fa:10:bf:e0:89:e6:8b:4e:7b:1d:7b:e0:
32:72:00:a8:55:fe:1f:27:f6:f0:23:f0:9f:bf:bf:
df:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:0D:F2:8C:9C:25:D4:0A:16:6F:96:52:02:9A:65:6E:2E:B6:70:4A
X509v3 Authority Key Identifier:
keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/bA3yjJwl1AoWb5ZSApplbi62cEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.255.192.0/19
84.19.104.0/21
84.19.122.0-84.19.127.255
185.228.252.0/22
193.39.32.0/20
193.39.65.0/24
193.193.96.0/20
194.145.148.0/23
195.182.160.0/19
212.43.160.0/19
213.147.224.0/19
IPv6:
2a02:8840::/26
Signature Algorithm: sha256WithRSAEncryption
a9:86:fe:e8:cf:87:d1:dd:35:ae:b9:99:b7:03:f3:2a:ff:7a:
da:cd:3b:bc:f1:27:c1:9f:26:6d:8c:da:b7:bb:4d:ba:2e:e3:
ff:5b:3d:54:63:de:de:e6:75:05:22:b3:59:b1:c8:af:89:50:
0f:6c:c3:f9:91:6d:4f:77:31:25:a5:4b:01:bd:0a:64:7c:b2:
86:10:27:f0:28:e9:f0:6d:07:b9:5d:61:fb:75:5d:d8:e5:23:
48:5f:db:3f:f3:be:c7:49:5e:a4:81:de:ce:a0:80:88:1c:ea:
90:7c:9f:10:da:26:ee:98:be:26:57:e3:9c:68:cc:9e:dc:19:
33:a7:cd:29:e8:54:c5:c3:9c:d9:90:72:fd:24:a1:03:f0:99:
c0:c1:4f:c0:5b:e1:3a:97:ec:88:40:84:30:dd:96:de:7f:8a:
51:d2:05:78:1f:eb:fb:f0:c9:ea:7e:14:28:50:98:da:84:35:
3e:d9:78:a1:a4:a1:29:a9:00:90:84:07:4c:46:26:33:0f:23:
88:ff:94:c4:a4:ed:d1:0e:14:ac:2d:16:b4:1d:cb:7e:0d:93:
3b:3e:77:fe:dc:db:53:40:40:7a:17:75:4d:33:1f:92:d5:cf:
1b:f6:d4:25:8f:17:cb:bf:03:95:98:72:b1:e6:c0:24:9f:2c:
25:97:c7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:47:49 2026 by rpki-client