Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/B_batMFoojKCvDB6Zh9h3nvTL0o.roa
File: B_batMFoojKCvDB6Zh9h3nvTL0o.roa (raw, json)
Hash identifier: Ow3IRH45ZfoJN9jiWcPYjd3e5IKQJ2aH4dqXqL4yzCs=
Subject key identifier: 07:F6:DA:B4:C1:68:A2:32:82:BC:30:7A:66:1F:61:DE:7B:D3:2F:4A
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019FD3D53A380B9CB55919F7F69294CA875A
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/B_batMFoojKCvDB6Zh9h3nvTL0o.roa
Signing time: Wed 05 Aug 2026 21:29:54 +0000
ROA not before: Wed 05 Aug 2026 21:29:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213812
IP address blocks: 87.232.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d3:d5:3a:38:0b:9c:b5:59:19:f7:f6:92:94:ca:87:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Aug 5 21:29:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=07f6dab4c168a23282bc307a661f61de7bd32f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:db:dc:0a:a6:ec:57:b1:12:20:8d:34:c9:bb:
dc:5a:f0:e0:c0:19:96:54:96:40:2b:ae:23:ac:1f:
bd:ba:3c:61:63:6a:6f:f5:9b:dc:f7:de:09:1c:cd:
48:98:f2:47:e5:19:db:56:73:bc:59:bc:d2:d4:a8:
6f:e1:4a:e3:e5:83:4b:1e:32:29:93:5c:8d:88:e1:
45:d5:c9:74:3b:40:45:19:76:38:71:18:1b:de:67:
37:eb:5f:ea:90:2b:5c:70:86:e9:be:42:5e:22:bd:
29:3b:2b:e8:d5:68:3e:2d:a3:75:cf:60:ab:47:c9:
4c:3b:d1:1a:42:2b:11:d7:93:80:b8:4e:ad:45:66:
73:9e:c9:4e:b4:65:29:7d:e4:a5:69:7c:52:dc:43:
ee:39:39:3e:9c:ca:53:fc:53:87:5d:dd:fa:80:54:
a9:d0:d1:9b:a2:97:15:f2:56:95:19:6d:af:79:8b:
3d:60:3e:bc:08:d3:e6:0d:f9:f0:37:68:ba:aa:b8:
b5:f5:1b:c3:46:3b:d9:82:fa:27:be:e8:00:ba:a4:
4c:0f:4f:da:ee:aa:2f:71:42:8e:1f:2a:06:61:f7:
24:fa:d2:8b:d5:dc:bf:a6:f6:2b:18:0b:ab:23:7e:
8c:91:60:d1:84:8f:0e:4e:06:e0:45:58:50:a9:88:
23:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F6:DA:B4:C1:68:A2:32:82:BC:30:7A:66:1F:61:DE:7B:D3:2F:4A
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/B_batMFoojKCvDB6Zh9h3nvTL0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.124.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:67:c8:fa:de:1b:c0:20:70:9b:47:82:11:65:03:e7:b8:01:
8a:8b:2f:5c:19:99:0b:6f:06:46:a5:b6:34:fe:c7:92:77:3d:
1b:37:35:81:77:37:f7:27:5e:91:f8:26:f2:0b:1c:e7:89:4f:
5a:af:45:98:e1:cc:d0:c3:ba:7a:86:89:47:f6:06:c1:b1:79:
21:10:64:ad:b6:41:82:95:0c:a4:a4:06:df:95:b7:b8:b2:f7:
c5:f0:d0:cf:f0:e4:23:e8:e6:65:e4:6b:83:71:a5:82:c3:0b:
6e:f8:e2:f5:3b:20:d5:50:a7:a6:1e:af:29:5d:e5:f9:7e:aa:
26:c2:f6:81:d4:d9:2a:d5:3d:11:e5:34:aa:2c:fe:8b:40:bf:
12:7d:35:bf:4c:6d:8c:5f:27:37:da:38:f1:6b:b2:1a:f0:44:
02:7a:af:2b:54:7b:00:16:0e:f6:c7:47:85:be:fb:69:dc:be:
e5:e4:74:b1:e0:39:22:d6:cc:b6:ee:fc:61:3d:6b:da:6b:91:
4d:93:99:3a:d4:9c:c1:6a:a6:24:91:81:be:5f:88:cc:28:30:
f8:ce:13:59:fe:fa:05:cd:0e:78:05:da:d2:0c:36:7f:02:58:
8c:8d:b5:b6:df:9a:58:92:e8:ce:28:20:f0:b0:b0:2a:16:34:
7e:4e:07:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:02:57 2026 by rpki-client