Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/B19k1PitIujJpaB0ZKwK-7amv2k.roa
File: B19k1PitIujJpaB0ZKwK-7amv2k.roa (raw, json)
Hash identifier: 5KywPlZFag+pODjYDKN24Y+tX6ip9dFPHCvilImjUlk=
Subject key identifier: 07:5F:64:D4:F8:AD:22:E8:C9:A5:A0:74:64:AC:0A:FB:B6:A6:BF:69
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 019E378C39DC1D513A22FCB16BB035E8BE27
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/B19k1PitIujJpaB0ZKwK-7amv2k.roa
Signing time: Sun 17 May 2026 20:06:37 +0000
ROA not before: Sun 17 May 2026 20:06:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205104
IP address blocks: 188.191.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:37:8c:39:dc:1d:51:3a:22:fc:b1:6b:b0:35:e8:be:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: May 17 20:06:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=075f64d4f8ad22e8c9a5a07464ac0afbb6a6bf69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f5:49:7b:85:e3:5b:a3:c8:85:75:bc:90:ac:
63:34:b0:5c:d8:f9:83:cc:75:c5:af:89:9d:8e:5a:
09:3e:50:1d:47:f7:2e:4f:c8:7a:b3:f7:2d:d3:7d:
5b:aa:2d:ba:09:61:f1:a0:c4:9d:fd:8c:7a:b5:b3:
21:b9:64:53:e4:2f:24:0b:cc:d1:a8:7f:a7:9d:2f:
f6:b1:f3:34:73:15:9e:0e:31:ae:e0:19:30:ab:ec:
41:3b:22:1a:16:76:96:e6:e5:e6:4d:ad:34:2e:5f:
be:22:ce:ca:90:f8:6f:f6:16:f3:2f:47:6e:39:9b:
cd:ae:8b:a5:7b:46:90:e7:31:4f:6c:e9:c5:66:a7:
69:3f:32:ef:c0:4f:35:4d:be:e1:1c:5a:e1:09:92:
75:17:6d:0e:4d:14:a7:98:fe:b3:a3:73:11:10:8b:
c1:97:3c:d0:99:70:af:5c:fc:32:13:89:1b:58:27:
4f:87:33:57:34:05:47:ea:aa:99:53:e7:08:8a:bc:
91:94:1b:e3:a2:1f:92:b6:2c:6f:c0:91:2c:f1:17:
ed:e1:a0:fd:ec:7d:98:31:ea:75:1c:f5:b4:67:98:
13:0b:34:df:3c:9b:b4:7d:bc:50:14:4d:09:ca:a1:
d0:a9:d1:b2:90:d7:be:99:15:02:03:f7:0e:8b:0e:
aa:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:5F:64:D4:F8:AD:22:E8:C9:A5:A0:74:64:AC:0A:FB:B6:A6:BF:69
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/B19k1PitIujJpaB0ZKwK-7amv2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.97.0/24
Signature Algorithm: sha256WithRSAEncryption
61:dd:a3:ed:39:da:b4:a8:90:08:3a:ae:fe:7b:51:4f:a7:9a:
52:d1:f2:ce:66:6b:db:24:64:1d:f9:6d:0f:cb:4a:12:2c:5b:
8f:35:56:6f:cd:ea:03:5d:47:34:06:ee:70:8d:ea:a8:5a:79:
1a:6b:2d:42:62:16:a5:40:21:2c:01:dd:10:9f:f0:3c:35:db:
8b:4d:0f:52:e3:b9:eb:4d:28:9f:fa:54:aa:24:43:f5:38:87:
8d:bb:28:0c:c7:6e:56:92:12:5e:fc:47:8e:4e:ae:51:fa:cd:
68:a6:60:4b:fd:43:75:5a:20:8a:6c:b8:23:d7:2e:d3:7a:e9:
12:bf:aa:88:d1:f3:df:fc:1e:e3:6d:d4:ad:6b:3e:c7:6e:3e:
59:39:3e:a2:1d:b8:06:e9:6e:e8:50:56:2c:78:54:99:1a:b1:
48:88:9c:c4:68:e4:52:e0:9e:9f:42:3b:e3:d5:63:14:c5:54:
0c:fa:ac:48:70:70:76:39:3d:d2:b6:14:62:70:01:9a:3c:ef:
c8:17:7b:a5:17:4b:6d:f2:0e:11:d8:f2:9e:69:13:9d:87:6e:
ed:e0:91:5b:a5:22:4f:14:41:a2:7d:83:2c:d9:bd:eb:fa:06:
0f:31:eb:18:b9:c0:ca:44:5f:f4:ab:67:f8:84:07:2a:8a:9a:
ae:23:2d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 07:07:34 2026 by rpki-client