Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/Bo1w0lPI8Zz_e1rRQmIhlcO1HkU.roa
File: Bo1w0lPI8Zz_e1rRQmIhlcO1HkU.roa (raw, json)
Hash identifier: cAz0BXExpLFECormHh+BtGBygCZH+t51hrNKrPat5QE=
Subject key identifier: 06:8D:70:D2:53:C8:F1:9C:FF:7B:5A:D1:42:62:21:95:C3:B5:1E:45
Certificate issuer: /CN=7f7113febddba1e06b953083b6648efaa031f1f5
Certificate serial: 019F23693142A5D9A45028608BED7A2C72AA
Authority key identifier: 7F:71:13:FE:BD:DB:A1:E0:6B:95:30:83:B6:64:8E:FA:A0:31:F1:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f3ET_r3boeBrlTCDtmSO-qAx8fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/Bo1w0lPI8Zz_e1rRQmIhlcO1HkU.roa
Signing time: Thu 02 Jul 2026 15:18:44 +0000
ROA not before: Thu 02 Jul 2026 15:18:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56687
IP address blocks: 185.154.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/f3ET_r3boeBrlTCDtmSO-qAx8fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/f3ET_r3boeBrlTCDtmSO-qAx8fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/f3ET_r3boeBrlTCDtmSO-qAx8fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:31:42:a5:d9:a4:50:28:60:8b:ed:7a:2c:72:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f7113febddba1e06b953083b6648efaa031f1f5
Validity
Not Before: Jul 2 15:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=068d70d253c8f19cff7b5ad142622195c3b51e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:24:49:4a:61:c6:52:57:2c:f6:7d:5c:12:cc:
08:32:7f:56:cc:69:35:11:92:5b:1a:5d:77:4d:bf:
e2:7e:a2:f5:60:85:fd:24:9f:a7:4a:46:17:57:a4:
ad:36:0f:cc:02:93:5f:05:f4:3c:d7:4a:2f:aa:06:
df:d7:44:ec:77:4e:01:a4:a6:cd:b9:60:05:b4:66:
a2:1f:4e:a4:ad:56:0d:f3:79:42:a1:cf:45:87:a6:
45:8f:5e:53:39:d9:97:36:e2:8c:ee:0c:59:46:6d:
74:c0:ed:c6:fe:3a:0c:e1:5e:9d:ab:c9:68:72:11:
c4:89:cf:aa:0f:a2:d8:c3:b9:5d:f2:52:dc:39:42:
61:f1:f7:39:b3:19:3c:f4:56:56:30:3f:3e:fb:c0:
e9:f7:b2:5a:c2:d4:ea:7c:2d:13:81:de:f4:23:94:
a7:d9:d0:34:2c:57:25:ce:96:7c:94:34:a3:70:d3:
8a:62:d3:b2:fd:a3:7c:56:35:08:fc:8e:01:a6:fc:
54:c0:d9:15:7f:cd:57:b7:e0:44:8e:a3:9b:b5:d2:
60:76:35:96:c1:52:1a:ce:3d:23:ca:8c:d2:29:f9:
4a:4d:6d:39:09:94:4b:64:50:70:59:84:a4:57:46:
32:9e:c4:0c:3e:6d:f2:fe:83:bf:23:fd:b6:61:1d:
d3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8D:70:D2:53:C8:F1:9C:FF:7B:5A:D1:42:62:21:95:C3:B5:1E:45
X509v3 Authority Key Identifier:
keyid:7F:71:13:FE:BD:DB:A1:E0:6B:95:30:83:B6:64:8E:FA:A0:31:F1:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3ET_r3boeBrlTCDtmSO-qAx8fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/Bo1w0lPI8Zz_e1rRQmIhlcO1HkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/f3ET_r3boeBrlTCDtmSO-qAx8fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.190.0/24
Signature Algorithm: sha256WithRSAEncryption
af:0a:77:12:45:f9:3c:83:00:54:13:52:cb:16:a7:3a:0e:9e:
a9:bc:4e:68:ea:53:ba:ba:c7:0c:e9:38:8e:c9:0a:42:98:d5:
05:a2:1c:85:79:13:73:e2:e4:ad:45:88:2b:a9:0f:3e:b5:bf:
88:8f:42:5f:c8:2c:e4:f8:7d:1d:35:30:6d:ea:7a:d4:ad:6c:
e7:41:f1:d0:12:1a:f9:2e:92:8f:0f:c2:b0:0b:81:c6:79:3d:
5d:31:7f:2a:56:6c:65:54:d3:11:f6:36:9c:d4:e6:91:99:7d:
50:e2:26:9c:ef:0b:8d:2b:8a:58:8c:b2:2e:f7:fb:ce:c0:87:
6a:d7:f8:f3:9e:85:a2:b1:50:98:19:bf:ce:14:0e:b9:55:be:
78:0d:c7:31:e4:84:7a:f0:6a:9d:35:5a:8b:e3:e3:45:58:54:
73:94:94:79:2a:ec:92:87:ce:d1:9c:3b:4e:3c:14:28:2c:a6:
6c:b6:63:68:2d:31:28:a4:f8:2e:91:42:b5:df:63:ae:00:51:
85:23:29:2d:3e:8a:dc:f9:71:d0:5e:f1:ab:42:9a:3e:f2:fa:
2d:ab:6b:2f:6e:ef:57:75:7c:1b:ba:58:30:6c:26:5a:84:41:
28:0d:a1:c0:99:7c:e7:f2:f4:b8:20:2a:cd:7e:1f:8b:a3:70:
62:79:da:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:06:12 2026 by rpki-client