Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/B-lpjug3i_155H5tpNIeEGANaS0.roa
File: B-lpjug3i_155H5tpNIeEGANaS0.roa (raw, json)
Hash identifier: 7zDbZ5lI1xUzRK1GHHiuYdnbXCkm2Trf9mO4U6u4Yxw=
Subject key identifier: 07:E9:69:8E:E8:37:8B:FD:79:E4:7E:6D:A4:D2:1E:10:60:0D:69:2D
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019CB3C0DC9386F09E1EE3B4DB8AEDF6C8F3
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/B-lpjug3i_155H5tpNIeEGANaS0.roa
Signing time: Tue 03 Mar 2026 12:51:26 +0000
ROA not before: Tue 03 Mar 2026 12:51:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8315
IP address blocks: 185.116.72.0/22 maxlen: 24
2a0d:5040::/29 maxlen: 29
2a0d:5040::/32 maxlen: 32
2a0d:5041::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b3:c0:dc:93:86:f0:9e:1e:e3:b4:db:8a:ed:f6:c8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Mar 3 12:51:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=07e9698ee8378bfd79e47e6da4d21e10600d692d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:70:6f:72:0d:22:6e:1c:8f:1c:51:94:3e:48:
5d:c8:f7:9f:41:7b:34:85:4d:a4:49:e5:be:37:b7:
ef:26:f6:87:3c:af:b6:71:fa:d7:8c:f8:e1:0e:0e:
78:58:1d:35:3b:30:76:da:fb:6c:a2:2e:90:74:24:
88:0e:a3:24:64:a5:2b:20:49:ee:27:05:02:81:8c:
f8:58:cd:27:42:0e:66:8e:e0:aa:ee:7b:63:f4:74:
0e:57:92:84:4e:49:2e:f0:8b:5b:27:b2:34:90:4f:
95:34:3c:ca:e7:56:32:84:68:25:6f:e2:87:fc:d9:
51:4e:5a:8d:2d:13:59:8d:96:78:b4:86:5a:bf:41:
ed:a7:0c:9f:8a:91:13:d1:f9:46:20:c5:55:aa:64:
d1:0d:bb:10:32:7f:a2:02:2b:7f:98:7b:07:a8:0d:
99:4e:bc:84:bc:b1:77:09:6c:bf:a2:af:17:cb:1c:
49:01:b6:93:a4:bc:ef:45:34:4b:5a:ed:5c:3e:09:
96:6a:e9:9a:d4:cc:53:b0:5c:21:07:85:ba:26:87:
e9:1c:67:5b:19:60:52:ef:77:42:f8:18:24:05:a5:
41:ec:67:93:34:14:25:5a:f5:17:22:6f:15:4a:fb:
d7:21:5a:1f:c7:dd:56:94:6e:8c:31:0c:03:a2:1f:
f3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E9:69:8E:E8:37:8B:FD:79:E4:7E:6D:A4:D2:1E:10:60:0D:69:2D
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/B-lpjug3i_155H5tpNIeEGANaS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.116.72.0/22
IPv6:
2a0d:5040::/29
Signature Algorithm: sha256WithRSAEncryption
02:88:c0:9a:c8:10:9f:d1:97:d6:aa:8c:c1:af:8f:f4:f9:33:
f3:cd:44:7e:70:8a:1d:e9:6d:54:26:9b:dc:e5:2b:8c:66:13:
60:9f:9e:4b:cf:9b:0d:ce:5b:98:66:f3:24:c9:aa:99:09:59:
e3:4b:cd:b1:42:d3:f8:c0:52:cc:d3:1a:9e:6e:0a:8a:f2:a1:
a1:6a:52:c6:4a:79:fe:1c:b9:0d:65:66:54:25:ad:b2:b8:ac:
ea:e7:7f:16:23:88:78:67:4d:7f:fc:da:6a:c6:31:cc:2d:f1:
09:45:21:8d:d8:53:26:96:01:d7:b2:69:78:c4:01:6e:8c:b1:
72:c1:eb:fd:59:f7:80:71:21:9b:bf:d3:6c:04:c1:f5:b2:cb:
4f:00:4f:e6:17:c8:c2:74:7e:e8:2a:6f:74:69:28:b7:77:4d:
87:d5:02:43:b2:8d:9c:c5:e8:3c:1c:c5:24:49:a1:d1:28:70:
c1:19:e9:f1:b8:eb:0a:92:57:27:26:5c:8c:33:b1:d8:47:9d:
2a:5d:71:aa:47:94:ea:8d:69:f3:af:0d:dc:77:52:aa:71:7a:
e2:a1:c3:f6:44:eb:20:a1:27:f7:12:73:b0:73:08:8d:a6:a3:
9f:71:d4:77:14:65:70:e8:e1:48:7e:f3:b6:8d:e1:a9:c2:ca:
85:e1:b4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 23:39:04 2026 by rpki-client