Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/BiIxak7JbOt20SzozxgiHGcbNEQ.roa
File: BiIxak7JbOt20SzozxgiHGcbNEQ.roa (raw, json)
Hash identifier: jUfVq8oZJF0wgHpw/N5YRITcsParD1qz3PJ8xl6Ux/w=
Subject key identifier: 06:22:31:6A:4E:C9:6C:EB:76:D1:2C:E8:CF:18:22:1C:67:1B:34:44
Certificate issuer: /CN=ffb2627672877d0f6de9bc4e7e186eedd1356110
Certificate serial: 019CAEE3BE1B5AE51EBB02565E7A16758EBC
Authority key identifier: FF:B2:62:76:72:87:7D:0F:6D:E9:BC:4E:7E:18:6E:ED:D1:35:61:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/BiIxak7JbOt20SzozxgiHGcbNEQ.roa
Signing time: Mon 02 Mar 2026 14:11:26 +0000
ROA not before: Mon 02 Mar 2026 14:11:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202656
IP address blocks: 155.254.192.0/24 maxlen: 24
155.254.193.0/24 maxlen: 24
155.254.194.0/24 maxlen: 24
155.254.195.0/24 maxlen: 24
185.147.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:e3:be:1b:5a:e5:1e:bb:02:56:5e:7a:16:75:8e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb2627672877d0f6de9bc4e7e186eedd1356110
Validity
Not Before: Mar 2 14:11:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0622316a4ec96ceb76d12ce8cf18221c671b3444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:62:05:f0:4d:4b:e3:dc:35:52:4b:87:68:e9:
35:ce:69:42:d6:b6:5c:4b:91:77:dd:4b:0f:4b:60:
7f:a6:31:7e:9f:11:18:c0:7f:3c:15:3a:08:ca:cd:
fa:65:1b:06:da:51:3e:37:7d:69:76:60:cc:eb:fe:
ad:d0:62:25:8b:eb:f9:df:44:28:a5:51:5a:f9:b8:
7c:98:ca:ce:93:77:c8:a0:da:41:93:93:d3:6f:d5:
86:1b:04:a1:14:de:76:9c:5f:50:0f:84:54:78:72:
46:10:b1:a1:20:67:05:8a:13:a4:97:e8:7b:62:e7:
e3:33:98:34:cf:1f:2c:b3:b8:ed:6e:36:b7:55:1a:
d7:f0:b0:42:9e:ed:5c:4d:ce:6d:b4:ae:52:5b:a0:
f1:3f:dc:4f:e9:5e:ef:13:46:26:8b:4a:a9:a8:b0:
37:0f:5d:7e:3f:1b:32:86:54:40:09:9f:62:6c:1d:
55:21:a1:b2:ab:ef:8f:31:2c:03:f8:22:0f:17:e3:
0c:78:a0:1b:47:11:ff:76:a4:49:83:9a:2f:4c:c0:
6e:f5:d5:bc:2b:83:9a:45:62:8e:a7:ec:92:95:70:
e8:d1:47:6f:9c:b9:c0:b2:c4:f1:d8:92:fa:8c:dd:
be:91:72:4c:69:49:b8:76:e4:ce:d1:04:6d:76:6c:
c0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:22:31:6A:4E:C9:6C:EB:76:D1:2C:E8:CF:18:22:1C:67:1B:34:44
X509v3 Authority Key Identifier:
keyid:FF:B2:62:76:72:87:7D:0F:6D:E9:BC:4E:7E:18:6E:ED:D1:35:61:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/BiIxak7JbOt20SzozxgiHGcbNEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.254.192.0/22
185.147.126.0/24
Signature Algorithm: sha256WithRSAEncryption
22:9e:99:3c:a1:17:59:f9:92:82:38:d0:73:b9:1b:0b:20:fa:
f7:9f:bf:7e:75:13:e4:ad:7b:6b:fc:03:24:6c:d7:9b:f7:69:
14:6d:d8:3e:d0:58:38:03:97:b1:43:f6:96:22:8c:8f:04:74:
7a:38:fd:d5:9e:0d:be:6e:1b:5c:c5:74:1a:4a:b1:d7:5a:5f:
d0:fd:bf:85:49:87:89:50:d2:a0:80:82:55:85:38:e5:09:78:
58:89:d7:74:5f:3e:81:d8:a7:64:57:e9:5a:a2:c9:41:45:5f:
de:bf:f2:de:15:5a:ab:da:90:89:86:b5:a9:c3:7b:a6:03:d2:
5e:a8:06:42:d8:a5:f7:cd:84:ef:a5:df:c2:21:9b:d2:24:6a:
02:b9:37:18:6d:51:4f:a1:07:e2:dc:dc:5b:e9:50:22:57:05:
22:e7:c9:96:87:8a:9b:38:5f:ef:5b:40:4d:3b:1c:4e:ed:7a:
af:1e:85:4f:04:97:f9:8f:cc:60:f4:d4:32:e1:81:04:5e:fa:
dc:5e:c6:c7:97:44:34:91:02:96:82:e8:81:d9:62:6e:91:7f:
0c:78:40:12:87:10:18:db:cd:53:9f:d1:17:0e:52:f5:0d:00:
5b:92:7d:7b:30:ec:b3:d0:89:9d:7c:cd:1c:ab:6a:c9:90:83:
4e:0d:b3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 02:02:13 2026 by rpki-client