Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/B2I17pBheusyOC7ocM9qlUDXh-I.roa
File: B2I17pBheusyOC7ocM9qlUDXh-I.roa (raw, json)
Hash identifier: GoFBrOWQVYy+Yfy42b64TQVPz8wmZmZuRwWMVQ1qgcQ=
Subject key identifier: 07:62:35:EE:90:61:7A:EB:32:38:2E:E8:70:CF:6A:95:40:D7:87:E2
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 01A014F7B7E41B64FCCB75A97633DCAE4570
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/B2I17pBheusyOC7ocM9qlUDXh-I.roa
Signing time: Tue 18 Aug 2026 13:02:53 +0000
ROA not before: Tue 18 Aug 2026 13:02:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 195.178.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:14:f7:b7:e4:1b:64:fc:cb:75:a9:76:33:dc:ae:45:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Aug 18 13:02:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=076235ee90617aeb32382ee870cf6a9540d787e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:21:35:5f:55:1c:36:4e:1b:1b:f8:2b:2c:9e:
e7:e4:04:4d:5b:a5:15:8f:b7:f2:85:b7:71:b8:8c:
a6:99:4a:8d:19:9a:83:e0:bc:5c:fb:64:80:86:73:
1b:ac:a6:38:cb:54:ce:a4:a1:73:cc:38:f4:f7:e9:
65:c2:bf:97:3e:d4:6e:1b:47:0a:18:4f:49:4a:07:
4e:22:ce:89:b3:80:77:31:66:d1:53:54:b4:cf:ef:
4f:a4:56:e2:e4:cb:5e:a9:53:04:87:73:c7:45:11:
e5:04:54:c4:01:42:87:13:7c:f7:ba:a7:45:48:09:
1a:29:13:60:3e:3c:e3:70:d9:69:85:8b:0a:01:c4:
a8:b8:dc:87:84:57:1e:a2:85:ad:36:65:56:05:d7:
19:ee:7d:8f:b2:e0:1b:d5:8c:00:d3:5e:3a:5d:f4:
5e:f1:4d:7c:1f:0e:cc:e1:20:a5:09:3a:8e:29:b0:
d9:95:c9:00:37:02:2c:c7:1c:66:e7:d7:86:83:b7:
5e:08:0d:d2:92:bd:e3:72:5d:f9:19:05:1e:19:27:
e4:02:0b:4d:f5:f3:d0:31:b3:ed:56:e6:8b:b4:26:
e9:3e:c1:17:09:a7:1d:01:5d:f2:e3:c8:7d:5d:dd:
0e:7d:ff:3c:72:12:70:f7:99:f7:91:31:96:5e:cb:
e1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:62:35:EE:90:61:7A:EB:32:38:2E:E8:70:CF:6A:95:40:D7:87:E2
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/B2I17pBheusyOC7ocM9qlUDXh-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.159.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:30:e3:47:d0:77:59:ee:ac:6d:91:a3:8c:6b:6d:88:33:6d:
9c:aa:8c:ab:2a:99:dd:dd:5b:60:92:10:bb:bb:a9:81:95:4c:
a4:d9:c2:06:0f:d4:62:c2:25:67:12:67:2f:a4:53:02:87:69:
a0:aa:61:85:d0:23:80:0d:7b:02:7c:df:50:4c:e7:99:3a:ad:
8e:85:2a:6b:9e:2c:9b:5f:14:94:27:14:bd:3f:a6:ac:48:eb:
20:31:10:d0:1f:5b:f2:b0:60:f8:b9:e6:e7:3a:3a:dd:f4:4c:
93:1f:d2:c7:ce:6a:d1:03:fa:c7:80:6a:9d:66:f5:9b:4e:27:
0d:29:71:19:57:34:4c:08:70:95:54:66:d2:25:32:55:24:a1:
98:ac:b1:73:1a:18:c5:ec:1c:4b:52:39:25:42:cc:e8:27:06:
9d:03:d9:fa:b1:92:38:80:de:12:7c:2d:c7:25:85:3c:08:4e:
28:16:72:8e:e0:9f:1b:88:95:0b:bb:21:4f:f7:71:a6:7c:17:
8d:21:58:b4:77:7c:a5:9e:08:a2:dc:9d:d7:fa:25:d0:4f:dc:
33:e1:0d:70:67:5a:1f:3d:83:01:4b:4e:1c:f3:92:5c:0a:75:
ea:86:9a:bd:19:bd:a8:bf:76:a4:70:74:4d:12:89:97:9e:32:
51:42:8d:dc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAU97fkG2T8y3WpdjPcrkVwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5NDI2MzI1YWNiOGNlNjA5YTY4NmZhNjU1YjA1ODk2ODgw
OWIzNDYwHhcNMjYwODE4MTMwMjUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzYyMzVlZTkwNjE3YWViMzIzODJlZTg3MGNmNmE5NTQwZDc4N2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyE1X1UcNk4bG/grLJ7n5ARNW6UV
j7fyhbdxuIymmUqNGZqD4Lxc+2SAhnMbrKY4y1TOpKFzzDj09+llwr+XPtRuG0cK
GE9JSgdOIs6Js4B3MWbRU1S0z+9PpFbi5MteqVMEh3PHRRHlBFTEAUKHE3z3uqdF
SAkaKRNgPjzjcNlphYsKAcSouNyHhFceooWtNmVWBdcZ7n2PsuAb1YwA0146XfRe
8U18Hw7M4SClCTqOKbDZlckANwIsxxxm59eGg7deCA3Skr3jcl35GQUeGSfkAgtN
9fPQMbPtVuaLtCbpPsEXCacdAV3y48h9Xd0Off88chJw95n3kTGWXsvh4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAdiNe6QYXrrMjgu6HDPapVA14fiMB8GA1UdIwQY
MBaAFBlCYyWsuM5gmmhvplWwWJaICbNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQt
MDNmNGM3MTEzYzM0LzEvQjJJMTdwQmhldXN5T0M3b2NNOXFsVURYaC1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS84YjZmYjAtYTg3NS00OTQ3LThhZTQtMDNmNGM3MTEzYzM0
LzEvR1VKakpheTR6bUNhYUctbVZiQllsb2dKczBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7KfMA0G
CSqGSIb3DQEBCwUAA4IBAQCNMONH0HdZ7qxtkaOMa22IM22cqoyrKpnd3VtgkhC7
u6mBlUyk2cIGD9RiwiVnEmcvpFMCh2mgqmGF0COADXsCfN9QTOeZOq2OhSprniyb
XxSUJxS9P6asSOsgMRDQH1vysGD4uebnOjrd9EyTH9LHzmrRA/rHgGqdZvWbTicN
KXEZVzRMCHCVVGbSJTJVJKGYrLFzGhjF7BxLUjklQszoJwadA9n6sZI4gN4SfC3H
JYU8CE4oFnKO4J8biJULuyFP93GmfBeNIVi0d3ylngii3J3X+iXQT9wz4Q1wZ1of
PYMBS04c85JcCnXqhpq9Gb2ov3akcHRNEomXnjJRQo3c
-----END CERTIFICATE-----
Generated at Thu Sep 3 22:27:27 2026 by rpki-client