Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/bh4Pmw18slKWLhnSX_PcBESTOHw.roa
File: bh4Pmw18slKWLhnSX_PcBESTOHw.roa (raw, json)
Hash identifier: 915ogctH2Olw0+aKLiHMhiQG4T9CRG1V1FcBU0YQuk4=
Subject key identifier: 6E:1E:0F:9B:0D:7C:B2:52:96:2E:19:D2:5F:F3:DC:04:44:93:38:7C
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019F080C61361B1DD01D17FAE23D305D0A95
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/bh4Pmw18slKWLhnSX_PcBESTOHw.roa
Signing time: Sat 27 Jun 2026 07:47:36 +0000
ROA not before: Sat 27 Jun 2026 07:47:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215826
IP address blocks: 147.45.45.0/24 maxlen: 24
193.233.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:08:0c:61:36:1b:1d:d0:1d:17:fa:e2:3d:30:5d:0a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jun 27 07:47:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e1e0f9b0d7cb252962e19d25ff3dc044493387c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e9:d8:fb:09:6e:e7:45:b1:c1:3f:7d:19:97:
84:0e:30:76:a7:c0:6f:71:7d:0c:4e:be:5a:5e:b7:
70:a8:44:c4:04:fa:c2:87:89:48:7d:3b:51:99:ea:
0d:7f:db:1f:6d:81:4b:f2:b8:5d:13:e6:eb:31:08:
62:2a:bd:58:05:29:82:33:8d:3d:30:73:84:3e:9f:
fa:65:96:7b:8d:4f:44:fc:4d:16:24:b2:1b:45:51:
b4:7f:c0:0f:99:fb:43:4a:35:35:05:70:03:0c:df:
d8:af:69:64:2c:67:8c:96:d6:68:d6:0d:b9:76:72:
4a:5b:2d:8f:f1:bd:e3:c7:13:f8:a6:b2:93:ce:cd:
24:01:b3:01:c3:6a:7d:90:6a:7b:94:23:3f:5d:20:
1c:79:5e:6b:7f:5c:5f:3e:47:e0:16:97:4d:16:a4:
1f:bd:d9:8c:ad:c3:37:de:81:cc:3b:15:55:5c:60:
48:bd:12:b9:2e:8d:0b:ef:b5:9d:45:aa:07:b5:71:
4e:b6:0e:f3:a2:0d:20:88:0e:de:07:e1:95:08:86:
51:f0:c4:fd:41:73:83:c2:48:b8:62:b4:9d:36:8a:
fa:f9:f8:90:8c:a6:e7:73:af:10:e4:52:84:78:3b:
82:90:66:55:c9:d1:ca:13:d0:2e:b8:5e:1c:ce:ad:
55:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1E:0F:9B:0D:7C:B2:52:96:2E:19:D2:5F:F3:DC:04:44:93:38:7C
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/bh4Pmw18slKWLhnSX_PcBESTOHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.45.0/24
193.233.134.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:2d:a8:5f:15:68:f6:c9:cf:f4:be:24:55:86:f3:16:ba:de:
1b:06:5a:06:be:dd:ae:e5:a3:49:93:d1:e0:22:ab:35:e4:b9:
30:53:9c:1e:20:36:49:3d:53:2b:06:9e:89:ed:36:93:c3:ad:
fd:06:d8:43:c9:39:77:df:c5:3e:bd:8f:89:3a:b6:4c:75:49:
01:63:c8:64:d8:45:9c:29:d1:6a:c4:97:21:a5:d3:8c:b9:be:
e4:03:0a:fe:6d:02:7f:ec:77:67:46:2c:0a:3a:37:a9:8f:70:
5a:13:d7:9f:52:62:fb:81:36:c8:dd:be:bf:ec:55:c2:db:fb:
76:cf:00:91:c3:a6:cb:d8:8f:7e:5f:27:8e:8f:f3:e0:3c:64:
84:05:85:c3:50:a6:0d:3d:f1:04:35:e7:c3:d0:42:b9:3a:91:
9e:b2:59:0c:09:09:14:6e:1c:8c:c4:aa:94:81:3e:ae:90:05:
0e:fe:8f:b3:92:2b:1d:22:d7:55:4a:6c:50:cf:c7:33:4b:f7:
38:10:ec:6d:f7:e6:e6:b4:54:cf:db:ed:3d:53:3d:c5:92:41:
14:e4:ee:2b:e7:5e:66:c4:c6:a2:6a:89:a4:31:ff:fb:eb:3a:
13:75:c3:7a:d7:b3:fa:ca:5c:6e:cf:50:fe:f7:b3:71:0c:4a:
81:dd:89:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:38:25 2026 by rpki-client