Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/BIlBx7GNQtDXs3rYutuCu_mCEbs.roa
File: BIlBx7GNQtDXs3rYutuCu_mCEbs.roa (raw, json)
Hash identifier: PjkQd4dOSp8nnX9aBaii5mDXPUnbKEUEDpkzwxtH96g=
Subject key identifier: 04:89:41:C7:B1:8D:42:D0:D7:B3:7A:D8:BA:DB:82:BB:F9:82:11:BB
Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Certificate serial: 019E6FD7640CB8D3090D8D532C3BE54AF731
Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/BIlBx7GNQtDXs3rYutuCu_mCEbs.roa
Signing time: Thu 28 May 2026 18:27:27 +0000
ROA not before: Thu 28 May 2026 18:27:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200396
IP address blocks: 185.29.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6f:d7:64:0c:b8:d3:09:0d:8d:53:2c:3b:e5:4a:f7:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Validity
Not Before: May 28 18:27:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=048941c7b18d42d0d7b37ad8badb82bbf98211bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:14:d9:cf:fa:28:09:d4:ee:34:96:6e:6f:9b:
e8:0a:f5:8f:64:39:77:c9:2d:aa:52:0d:2d:2c:ac:
56:3d:9c:5c:4e:1b:0b:2b:f8:8b:7b:74:76:ec:41:
9b:0e:5f:06:38:f3:7c:c3:bf:59:35:5b:a5:5c:61:
10:99:84:4a:3c:44:77:8f:c8:29:5d:9d:54:57:1a:
73:05:ce:6d:06:da:ac:b6:d7:12:ac:59:e3:9f:73:
35:c1:51:bf:47:3f:c1:1b:96:9e:1b:00:ae:d0:76:
9b:36:e9:ab:d8:1d:ba:af:14:63:89:03:a8:4a:6b:
e8:73:44:c8:f3:f3:d2:7f:9e:22:a4:7d:5a:a5:eb:
1a:dc:1f:a6:64:9e:fb:37:5d:d7:6a:90:a8:45:b9:
68:d5:c3:dc:f3:7b:7c:3f:71:d1:a1:81:0b:41:e2:
2f:f3:6a:28:08:df:ee:2a:ef:88:b4:7d:ff:f1:4a:
a2:ee:a0:9a:49:46:43:fb:f1:ed:4e:18:57:c2:4c:
64:41:48:ef:85:2b:cb:6c:01:3d:e4:48:50:65:2d:
e9:10:a8:fa:fd:26:5a:d5:e7:29:5f:56:93:79:be:
86:7b:36:80:b0:e8:e6:9a:f1:61:16:ae:1b:e8:22:
60:54:7e:aa:b5:0e:e9:ce:b0:2a:ef:60:a9:23:ed:
0a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:89:41:C7:B1:8D:42:D0:D7:B3:7A:D8:BA:DB:82:BB:F9:82:11:BB
X509v3 Authority Key Identifier:
keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/BIlBx7GNQtDXs3rYutuCu_mCEbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.255.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:79:25:30:19:d3:f8:50:36:b2:95:0a:7a:e5:af:04:e3:7e:
c1:8a:91:d7:a4:1f:af:3b:45:47:5c:5b:3e:9f:57:6f:c1:3b:
4e:77:25:60:50:4c:c2:fc:e7:1c:2e:4b:c1:b6:fd:03:5b:0a:
5b:d1:03:6a:6b:bf:08:7c:d0:aa:77:e4:94:7a:da:a9:24:22:
1a:68:0d:84:ad:14:e6:39:1d:dd:7a:02:81:28:1d:18:3f:82:
56:fd:2e:a1:84:d5:7f:69:72:97:0d:56:17:62:96:0a:28:17:
f4:fd:31:2a:52:45:38:12:f3:28:b8:28:94:11:ac:56:6e:2e:
f5:47:c1:70:33:34:a9:c3:ed:bd:16:b7:eb:3a:12:1c:16:64:
41:00:da:17:51:71:c6:fc:1e:c7:28:8b:fb:1e:04:0e:6a:67:
e6:80:06:4d:8a:f5:3c:4f:1f:94:b2:4a:8f:6f:b6:ce:de:9a:
85:d5:31:d8:eb:3f:b4:07:e0:6b:18:68:5d:86:52:fe:82:f6:
28:3f:b4:c1:c7:90:f9:06:e4:a9:4c:f1:1d:7e:62:0b:56:9b:
1f:08:63:96:76:dd:71:a1:a1:db:f5:50:eb:5c:c4:02:59:80:
7c:5b:c1:6d:ef:fc:da:7a:27:52:c5:df:ef:36:83:fe:36:c9:
66:08:2b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:23:13 2026 by rpki-client