Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/17dec5-8e95-48c4-bcac-ce1821686f07/1/bHRaZ9nc6lvy4ugCQfo2KU-VRLQ.roa
File: bHRaZ9nc6lvy4ugCQfo2KU-VRLQ.roa (raw, json)
Hash identifier: jtS0VBZ+35EsSgv6r1Jl+QawUhDOAnrzyb4seEopgyk=
Subject key identifier: 6C:74:5A:67:D9:DC:EA:5B:F2:E2:E8:02:41:FA:36:29:4F:95:44:B4
Certificate issuer: /CN=6dbefbbc474d428359a3f7f75f814f5679b0f182
Certificate serial: 019FD7C6221C3367019B42E7BD9DC07EFD6B
Authority key identifier: 6D:BE:FB:BC:47:4D:42:83:59:A3:F7:F7:5F:81:4F:56:79:B0:F1:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb77vEdNQoNZo_f3X4FPVnmw8YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/17dec5-8e95-48c4-bcac-ce1821686f07/1/bHRaZ9nc6lvy4ugCQfo2KU-VRLQ.roa
Signing time: Thu 06 Aug 2026 15:51:54 +0000
ROA not before: Thu 06 Aug 2026 15:51:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36692
IP address blocks: 80.254.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/17dec5-8e95-48c4-bcac-ce1821686f07/1/bb77vEdNQoNZo_f3X4FPVnmw8YI.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/17dec5-8e95-48c4-bcac-ce1821686f07/1/bb77vEdNQoNZo_f3X4FPVnmw8YI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bb77vEdNQoNZo_f3X4FPVnmw8YI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d7:c6:22:1c:33:67:01:9b:42:e7:bd:9d:c0:7e:fd:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbefbbc474d428359a3f7f75f814f5679b0f182
Validity
Not Before: Aug 6 15:51:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c745a67d9dcea5bf2e2e80241fa36294f9544b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3c:cc:7f:c1:72:1d:c1:a7:f5:41:82:fb:17:
e9:34:5a:5c:7a:4a:cc:73:94:f1:d9:8f:97:f5:ac:
a0:3f:6b:98:18:e2:b2:1f:83:06:4e:b9:01:75:fe:
8c:e1:38:29:d8:22:48:b1:cf:69:a5:2d:7c:77:6b:
4b:f1:34:01:42:45:f6:ea:d5:fc:6a:3d:a4:86:38:
9b:b9:28:9c:36:99:4d:9b:c6:68:f2:17:85:7c:53:
cd:e5:84:56:a5:2d:fc:54:59:df:32:17:54:3f:69:
f7:98:31:b4:59:1f:50:58:ea:29:0c:b2:e1:cb:b1:
e5:2e:5b:ea:61:10:52:25:7a:4f:9c:ed:d9:6d:81:
59:ec:10:0a:ed:04:8b:5a:23:d6:c7:88:6d:3f:64:
5a:ba:9f:bf:23:ae:7a:11:b9:11:14:fe:e1:43:48:
f0:dd:7c:42:9a:a5:8f:6c:88:e0:d7:d9:e0:83:24:
7b:06:84:83:39:f3:9c:c6:14:c0:93:70:3f:6e:f3:
16:2f:e9:35:a2:b1:7d:0a:4a:92:41:39:a9:ab:5f:
a3:dd:38:cd:a8:7f:9a:5b:42:22:15:ea:b2:9e:89:
6c:94:95:e8:df:79:4f:68:91:75:86:cb:bb:69:57:
ff:66:cc:c0:33:60:e2:a3:1d:10:03:71:b8:0a:c2:
bb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:74:5A:67:D9:DC:EA:5B:F2:E2:E8:02:41:FA:36:29:4F:95:44:B4
X509v3 Authority Key Identifier:
keyid:6D:BE:FB:BC:47:4D:42:83:59:A3:F7:F7:5F:81:4F:56:79:B0:F1:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb77vEdNQoNZo_f3X4FPVnmw8YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/17dec5-8e95-48c4-bcac-ce1821686f07/1/bHRaZ9nc6lvy4ugCQfo2KU-VRLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/17dec5-8e95-48c4-bcac-ce1821686f07/1/bb77vEdNQoNZo_f3X4FPVnmw8YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.254.144.0/24
Signature Algorithm: sha256WithRSAEncryption
37:1d:22:3c:fd:78:1d:30:5c:28:95:fb:4b:3a:0f:5e:f3:80:
ac:07:cc:a3:ca:eb:36:f0:83:21:a6:d9:af:c5:19:d4:be:9e:
38:f1:02:3c:63:dc:ce:37:fe:29:92:65:d2:59:d4:f6:fb:a9:
b8:7b:f8:f3:de:2b:c2:81:a0:04:37:8e:24:40:de:a6:2b:45:
9b:e9:a9:6c:7c:ba:8a:83:db:e6:96:f1:f9:1a:c3:e0:19:39:
15:63:18:36:ec:8b:e5:64:26:b4:96:08:57:7d:b3:de:1f:cc:
d2:1c:b4:ce:36:31:b4:33:42:86:f7:95:14:15:9e:27:d6:e2:
3f:ad:66:c9:a7:72:5d:d8:34:53:ad:5d:1a:ec:90:e2:0d:f2:
b6:d0:78:28:d7:c1:5a:1e:1d:1f:d4:0a:e9:96:92:b7:32:c8:
ca:28:b6:26:8b:21:9a:34:1d:88:cd:95:e6:0d:ff:85:91:f3:
63:d3:db:09:be:eb:4c:e8:16:de:d1:e2:af:58:71:31:f3:9a:
ca:75:8b:41:a2:62:28:12:60:cf:b9:a8:a6:a0:29:19:b8:17:
7e:23:43:70:54:93:0a:e7:00:11:e0:34:2f:42:b7:b7:80:b9:
f9:c7:c0:12:a4:e4:b6:1b:80:71:4a:20:2d:cc:68:6c:62:c4:
ac:04:7b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:00:03 2026 by rpki-client