Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/b2_DHYSaODpmfcbOmhD4xTQAKU0.roa
File: b2_DHYSaODpmfcbOmhD4xTQAKU0.roa (raw, json)
Hash identifier: 6K++GSYYOJ1D7KUYBKCJ4zwcQ+zsyJg3dihGQxKCb34=
Subject key identifier: 6F:6F:C3:1D:84:9A:38:3A:66:7D:C6:CE:9A:10:F8:C5:34:00:29:4D
Certificate issuer: /CN=b4bc09baebcbaf63f5e9a82c0a1d9d7b3ea77a65
Certificate serial: 019F23684E12632718DE73D0019F0BD2A32F
Authority key identifier: B4:BC:09:BA:EB:CB:AF:63:F5:E9:A8:2C:0A:1D:9D:7B:3E:A7:7A:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLwJuuvLr2P16agsCh2dez6nemU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/b2_DHYSaODpmfcbOmhD4xTQAKU0.roa
Signing time: Thu 02 Jul 2026 15:17:45 +0000
ROA not before: Thu 02 Jul 2026 15:17:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1299
IP address blocks: 82.99.128.0/18 maxlen: 24
84.244.64.0/18 maxlen: 24
85.207.0.0/16 maxlen: 24
212.158.128.0/19 maxlen: 24
2a02:a40::/32 maxlen: 48
2a02:a41::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLwJuuvLr2P16agsCh2dez6nemU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:4e:12:63:27:18:de:73:d0:01:9f:0b:d2:a3:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bc09baebcbaf63f5e9a82c0a1d9d7b3ea77a65
Validity
Not Before: Jul 2 15:17:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f6fc31d849a383a667dc6ce9a10f8c53400294d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:95:2e:8c:b4:81:c3:d0:9f:bc:c2:67:fa:d8:
dc:f4:5d:45:63:2c:53:b6:33:61:b0:e3:bb:13:96:
50:65:1f:62:43:19:85:8b:03:fb:b6:db:03:90:e4:
e9:d3:2a:8d:1d:8e:bc:92:23:e6:aa:0c:64:d4:5a:
b6:f8:26:8a:36:95:96:bd:b8:e6:bd:1f:53:6f:37:
d8:71:d1:d9:3f:e9:47:e8:bb:b4:ba:71:23:b1:c8:
43:af:16:4c:d7:35:dc:10:1a:30:d6:fc:ca:7e:ea:
f3:99:a7:d8:db:4f:ff:e6:49:e1:36:89:83:f2:eb:
e7:a6:58:42:93:a3:0d:85:3f:04:36:61:51:8a:78:
d0:9d:c2:9d:a2:29:71:d1:7a:16:70:90:10:84:4b:
53:50:e0:d0:ad:90:da:6d:d2:53:54:33:95:05:33:
7c:67:8c:ad:4e:12:35:6d:06:07:cc:ab:ee:4f:f0:
3c:7d:86:63:9d:a8:79:ab:55:24:20:a4:ec:60:0b:
e2:9b:f0:66:eb:47:00:ae:84:41:1d:99:b8:0d:9a:
d5:05:bd:ff:5f:23:0c:62:3b:fc:1b:42:f0:d6:17:
bf:ab:ef:a3:11:b5:27:8a:78:2e:b4:da:46:89:05:
a3:bf:26:b7:45:98:15:8c:43:3c:9a:ca:c4:4a:ac:
7f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6F:C3:1D:84:9A:38:3A:66:7D:C6:CE:9A:10:F8:C5:34:00:29:4D
X509v3 Authority Key Identifier:
keyid:B4:BC:09:BA:EB:CB:AF:63:F5:E9:A8:2C:0A:1D:9D:7B:3E:A7:7A:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLwJuuvLr2P16agsCh2dez6nemU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/b2_DHYSaODpmfcbOmhD4xTQAKU0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/tLwJuuvLr2P16agsCh2dez6nemU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.99.128.0/18
84.244.64.0/18
85.207.0.0/16
212.158.128.0/19
IPv6:
2a02:a40::/31
Signature Algorithm: sha256WithRSAEncryption
51:ae:cc:ba:ca:20:9f:12:91:bf:af:e0:9f:ae:f5:6d:bf:0c:
c8:f3:d8:0f:79:77:a1:88:aa:55:5e:48:4e:0c:13:b8:d3:52:
a2:93:0c:34:33:08:15:18:e2:e5:2f:ce:fe:07:30:3e:20:10:
36:89:95:bb:82:ab:b6:b2:8d:c7:72:0e:cc:9e:e9:d5:ce:66:
a8:34:6a:e9:f2:0b:2f:71:36:e1:27:8e:4d:25:0c:20:e0:0c:
3b:9f:1d:76:95:90:95:55:2b:c5:38:3e:12:f7:1a:78:e4:84:
47:6e:0a:93:2b:fc:81:2a:c2:fb:b0:14:83:37:f6:ab:c8:53:
3a:b0:ae:fd:33:d8:53:ba:06:82:51:8e:f4:68:53:c3:8b:6c:
62:0a:ba:df:6f:9e:19:ae:5a:f0:4d:a4:07:5e:26:6d:82:4b:
a7:6f:ea:46:30:00:88:eb:e6:c2:36:11:ed:0b:d9:62:c8:c7:
d8:36:fe:3b:32:ae:1e:cc:4d:cf:01:07:96:1a:e9:30:2a:c2:
41:3b:03:92:87:27:68:e4:af:82:27:55:a6:e8:ac:12:a6:f9:
6f:41:72:e0:f5:01:75:45:10:14:06:72:e4:b8:b9:31:d2:40:
f8:a5:b1:cd:87:7b:d7:e1:78:ad:ff:5a:1d:ca:12:01:75:64:
db:1c:cd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:02:51 2026 by rpki-client