Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/435975-c45d-429f-8fcd-09d63ac30411/1/pBBBsanOr4leF5bPPtl74nQxq2U.roa
File: pBBBsanOr4leF5bPPtl74nQxq2U.roa (raw, json)
Hash identifier: GThK88f+E0fIkwsyGb/Te2dstzqrMhLm3PX4PsqfIG4=
Subject key identifier: A4:10:41:B1:A9:CE:AF:89:5E:17:96:CF:3E:D9:7B:E2:74:31:AB:65
Certificate issuer: /CN=9f1610259d4f5c4fd5d74f6f25f7026066ddca1a
Certificate serial: 019FFB8AD595D6B4455E90BD2E8EDBD2043C
Authority key identifier: 9F:16:10:25:9D:4F:5C:4F:D5:D7:4F:6F:25:F7:02:60:66:DD:CA:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxYQJZ1PXE_V109vJfcCYGbdyho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/435975-c45d-429f-8fcd-09d63ac30411/1/pBBBsanOr4leF5bPPtl74nQxq2U.roa
Signing time: Thu 13 Aug 2026 14:33:27 +0000
ROA not before: Thu 13 Aug 2026 14:33:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203570
IP address blocks: 185.130.96.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/435975-c45d-429f-8fcd-09d63ac30411/1/nxYQJZ1PXE_V109vJfcCYGbdyho.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/435975-c45d-429f-8fcd-09d63ac30411/1/nxYQJZ1PXE_V109vJfcCYGbdyho.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxYQJZ1PXE_V109vJfcCYGbdyho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:8a:d5:95:d6:b4:45:5e:90:bd:2e:8e:db:d2:04:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1610259d4f5c4fd5d74f6f25f7026066ddca1a
Validity
Not Before: Aug 13 14:33:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a41041b1a9ceaf895e1796cf3ed97be27431ab65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b9:e8:b5:2f:75:2d:6d:db:46:91:1c:94:65:
15:5a:2e:f1:bb:b7:41:45:a0:2a:d8:f5:3a:3a:2d:
17:bf:26:3b:19:6b:fc:24:6b:10:60:f6:c6:31:48:
e4:58:1e:d3:eb:91:29:97:b5:ee:88:30:1c:de:7c:
de:bd:98:dd:08:f3:89:e4:97:65:2e:19:c5:16:9a:
96:86:a6:ef:ad:b7:df:de:41:60:a5:0b:8e:6c:31:
cf:4c:63:17:8f:0a:a8:a7:5c:19:72:be:49:39:cd:
62:63:bd:62:c5:0e:f8:04:22:f6:67:fa:1a:d8:a3:
67:91:18:8d:9f:3b:21:7d:7a:f1:09:d1:41:ba:c4:
6e:04:34:ff:2d:57:4a:d6:72:a1:9b:5b:9e:e9:01:
7e:24:ed:03:28:2a:e7:ad:39:0f:1a:c7:f7:89:a9:
21:cb:39:4b:64:62:93:e3:bb:1f:fc:75:ee:dc:66:
77:fb:a4:0b:6d:12:65:dd:6b:4b:97:39:16:68:7f:
5a:4c:6b:ab:44:be:0e:63:88:ff:16:b6:0b:05:98:
67:e8:d9:da:16:1d:e0:c6:77:6a:8f:8b:ea:87:fa:
e5:06:ee:d6:b1:6d:28:26:c0:5f:44:fa:ce:68:5a:
b4:17:53:b7:0b:ea:28:48:c0:7e:bd:aa:6c:e5:5e:
53:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:10:41:B1:A9:CE:AF:89:5E:17:96:CF:3E:D9:7B:E2:74:31:AB:65
X509v3 Authority Key Identifier:
keyid:9F:16:10:25:9D:4F:5C:4F:D5:D7:4F:6F:25:F7:02:60:66:DD:CA:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxYQJZ1PXE_V109vJfcCYGbdyho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/435975-c45d-429f-8fcd-09d63ac30411/1/pBBBsanOr4leF5bPPtl74nQxq2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/435975-c45d-429f-8fcd-09d63ac30411/1/nxYQJZ1PXE_V109vJfcCYGbdyho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.96.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:25:a4:3c:3f:db:a0:ee:58:d9:81:76:ef:b1:cc:cd:43:83:
5f:d7:41:d0:44:94:38:fa:82:24:31:5e:b7:37:09:8e:fd:e7:
dd:34:68:a2:8c:ff:a1:e0:56:48:60:cf:c2:ec:29:c9:f1:2f:
f4:4a:dc:5d:80:92:7a:c8:ce:69:e9:58:18:f9:c8:2c:cc:ec:
d1:66:ac:16:a1:46:1b:f2:0b:8a:a3:5d:54:9e:1e:f3:a0:cd:
6f:76:c2:88:f0:36:08:ed:3c:2a:a6:7d:1b:14:6a:da:00:d3:
20:47:cd:6d:35:4d:e1:49:62:9b:4b:89:fb:9c:da:4d:57:68:
45:96:f7:c3:59:b3:5d:cb:f6:70:a4:55:b4:b4:fa:b2:75:5f:
bc:63:10:10:c9:6f:df:57:3b:45:10:48:67:8b:91:60:d3:06:
da:51:85:da:75:48:5c:42:9b:fd:67:29:e2:df:c5:31:cb:6e:
bc:bc:e6:34:0e:6d:0d:a6:cc:a5:1c:9a:f6:eb:07:4d:35:13:
82:5c:43:7f:c0:dc:fd:e6:46:a8:50:61:9d:88:25:36:7c:a3:
06:e7:9c:5c:fd:34:87:e4:24:1e:29:3e:db:33:6d:b1:ff:21:
8b:8d:a7:e1:ed:d3:b2:b2:a0:61:33:04:b8:a7:fe:94:b7:74:
cb:b9:0b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:49:46 2026 by rpki-client