Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/b2OvrwS5fdlnhd8jiScteBrMJzo.roa
File: b2OvrwS5fdlnhd8jiScteBrMJzo.roa (raw, json)
Hash identifier: 2y9dXhwloiTIsuknPn5cIK/PWnisQw1xqs5MGBYxLGI=
Subject key identifier: 6F:63:AF:AF:04:B9:7D:D9:67:85:DF:23:89:27:2D:78:1A:CC:27:3A
Certificate issuer: /CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Certificate serial: 01A01A399BE96616B62A58C7D75A9B385B9E
Authority key identifier: C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/b2OvrwS5fdlnhd8jiScteBrMJzo.roa
Signing time: Wed 19 Aug 2026 13:32:58 +0000
ROA not before: Wed 19 Aug 2026 13:32:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 32613
IP address blocks: 45.148.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1a:39:9b:e9:66:16:b6:2a:58:c7:d7:5a:9b:38:5b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4fbe8422432727d3874b1564baeac8a80557b2d
Validity
Not Before: Aug 19 13:32:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f63afaf04b97dd96785df2389272d781acc273a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d4:70:7f:1f:ca:7b:93:89:33:09:9f:1a:49:
0a:3a:74:06:db:66:fd:e7:a4:6e:ca:09:4d:08:77:
73:56:6c:e0:fc:1b:b7:5e:76:8c:51:70:1d:38:32:
0b:64:ae:3c:9a:4c:e5:4a:54:6c:00:1b:b1:82:c8:
50:ad:18:b6:23:d6:0e:be:f6:03:f7:b9:2d:7d:7a:
e2:0c:9f:ce:6c:d9:ef:c8:2d:f0:04:1d:f7:0f:53:
28:8d:97:3d:46:5d:c4:f2:9b:c7:33:c2:2c:3c:5b:
13:cd:71:30:bf:03:4e:7b:18:90:51:41:d1:41:4e:
92:03:0a:b6:77:5e:da:df:98:c7:fd:dd:30:1b:53:
8f:fe:18:0a:d9:11:ff:32:83:d4:d0:fc:f2:58:87:
52:f8:b5:51:83:af:bb:22:57:e7:66:c4:1e:01:b8:
f2:87:4d:60:a3:ce:29:53:4f:2e:a4:89:d6:0a:db:
97:ab:6d:e1:ac:c4:e2:81:17:90:be:46:67:07:93:
4a:29:31:db:36:8d:41:b6:d6:70:9a:ab:59:46:e3:
24:24:cb:a1:41:d0:af:64:42:e8:9d:d2:11:00:8a:
23:18:35:3c:89:a0:c8:ee:bf:b3:bb:de:8e:15:69:
66:1e:7a:57:72:33:24:04:6b:39:ab:50:65:2e:d8:
5b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:63:AF:AF:04:B9:7D:D9:67:85:DF:23:89:27:2D:78:1A:CC:27:3A
X509v3 Authority Key Identifier:
keyid:C4:FB:E8:42:24:32:72:7D:38:74:B1:56:4B:AE:AC:8A:80:55:7B:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPvoQiQycn04dLFWS66sioBVey0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/b2OvrwS5fdlnhd8jiScteBrMJzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/bf2d8c-e38b-463a-b26b-ecf2217f9867/1/xPvoQiQycn04dLFWS66sioBVey0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.7.0/24
Signature Algorithm: sha256WithRSAEncryption
48:05:9c:d7:1d:fd:fb:0b:b2:0a:1c:08:8c:28:a9:87:4e:7b:
9d:36:0d:44:f7:1a:11:e4:ca:6e:12:0e:16:d8:98:6b:01:2b:
bf:c9:1a:9a:f1:72:7d:f9:6c:ad:db:00:2d:f5:74:b1:8d:53:
be:22:b2:de:ac:69:d3:ae:f1:88:ef:62:df:00:fb:64:d2:a5:
06:32:0d:66:42:b2:8d:df:e5:f5:f4:cd:5d:d1:7f:05:24:c6:
12:76:e2:7e:be:0e:a2:bc:d1:01:5e:d7:d8:23:7c:03:3a:43:
3d:a7:8d:eb:e1:d5:43:3f:7c:44:7b:d6:11:bc:79:c9:52:cc:
f7:42:ff:8f:36:fe:9f:04:9c:89:de:48:7f:ec:09:5b:e7:ae:
44:d5:9d:9b:df:dc:6a:0f:db:c2:10:93:a9:40:34:68:91:25:
e9:f5:3e:de:1a:e6:35:f8:37:75:c6:3e:f3:7b:74:3e:6d:98:
97:75:ad:07:b3:6e:27:71:67:a0:ae:2b:78:eb:7f:4a:37:07:
c0:60:8e:e0:69:47:5e:2f:75:4a:a7:4e:ff:40:cb:46:81:ee:
fa:49:79:89:93:70:be:33:27:91:86:6a:71:37:ae:ed:e7:3e:
95:c9:de:81:20:7d:b8:46:68:6a:39:bc:01:73:96:39:7b:dd:
3f:a9:55:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:07:16 2026 by rpki-client