Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/813a44-bcb2-482c-ab3b-06c847006c86/1/B_M_pSDYnQq_v2dspjpisJOp3eI.roa
File: B_M_pSDYnQq_v2dspjpisJOp3eI.roa (raw, json)
Hash identifier: fnEBYCIgV363yh16vBQAS+8SDA4YNK4W+uJelnRAVc4=
Subject key identifier: 07:F3:3F:A5:20:D8:9D:0A:BF:BF:67:6C:A6:3A:62:B0:93:A9:DD:E2
Certificate issuer: /CN=b549ef86feb429b607bb2373f916fa54d2799752
Certificate serial: 019DD3284BF9A99A1010EE34257D23AD9302
Authority key identifier: B5:49:EF:86:FE:B4:29:B6:07:BB:23:73:F9:16:FA:54:D2:79:97:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/813a44-bcb2-482c-ab3b-06c847006c86/1/B_M_pSDYnQq_v2dspjpisJOp3eI.roa
Signing time: Tue 28 Apr 2026 08:15:26 +0000
ROA not before: Tue 28 Apr 2026 08:15:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199701
IP address blocks: 185.248.160.0/24 maxlen: 24
185.248.161.0/24 maxlen: 24
185.248.162.0/24 maxlen: 24
185.248.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/813a44-bcb2-482c-ab3b-06c847006c86/1/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/813a44-bcb2-482c-ab3b-06c847006c86/1/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 14:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d3:28:4b:f9:a9:9a:10:10:ee:34:25:7d:23:ad:93:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b549ef86feb429b607bb2373f916fa54d2799752
Validity
Not Before: Apr 28 08:15:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=07f33fa520d89d0abfbf676ca63a62b093a9dde2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b2:9e:15:1d:63:db:00:d4:ed:23:53:00:a9:
71:95:dd:ab:ea:68:5a:cc:ab:e4:d7:18:83:d2:1b:
dc:fc:d8:7c:27:0e:07:35:c8:a4:20:55:85:ae:d3:
71:de:20:3a:01:1a:b0:8f:61:29:f7:0b:9b:02:79:
2f:fd:a7:74:47:bd:68:12:ed:f4:4b:e1:c0:0e:87:
b1:2a:31:04:0f:65:97:f8:d6:95:ad:b2:f4:07:ab:
2e:5e:e7:1b:4b:a2:d4:2e:b0:ff:31:f9:22:7f:bc:
a0:40:9c:af:2a:a4:c4:f9:f8:a2:e2:97:82:26:48:
49:a0:db:d8:79:8e:10:4c:67:05:18:be:e9:d0:83:
a1:97:58:87:e1:c7:dd:a3:9e:4a:6b:57:90:25:5c:
cb:04:ea:7e:03:f2:88:a5:e0:de:4b:e6:c5:25:ac:
e1:87:4a:ca:56:7c:a3:13:5e:1b:6a:4d:47:b2:65:
e4:17:72:f9:37:75:1a:38:47:ff:52:ac:27:58:18:
9a:1d:52:76:28:85:8d:2d:c2:9c:45:38:2d:67:cd:
4e:14:02:cf:07:c7:20:b9:61:02:01:9c:8b:92:47:
40:86:c1:5f:d4:b3:85:00:6f:6a:41:6e:27:d3:be:
e8:6b:f5:52:4a:47:58:aa:1d:a0:71:54:6c:cd:ff:
04:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F3:3F:A5:20:D8:9D:0A:BF:BF:67:6C:A6:3A:62:B0:93:A9:DD:E2
X509v3 Authority Key Identifier:
keyid:B5:49:EF:86:FE:B4:29:B6:07:BB:23:73:F9:16:FA:54:D2:79:97:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/813a44-bcb2-482c-ab3b-06c847006c86/1/B_M_pSDYnQq_v2dspjpisJOp3eI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/813a44-bcb2-482c-ab3b-06c847006c86/1/tUnvhv60KbYHuyNz-Rb6VNJ5l1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.160.0/22
Signature Algorithm: sha256WithRSAEncryption
12:2a:11:dd:98:c6:fc:de:b6:a5:00:a8:a4:76:f7:f0:6a:65:
d6:54:dc:a3:af:d6:74:0b:ab:9e:ff:06:6d:57:df:9a:9e:45:
ca:23:0b:98:bc:40:ff:ae:50:b5:e6:58:bd:be:0c:0a:eb:c4:
18:a7:60:c2:5d:12:38:56:d9:bc:1c:63:b1:6f:f5:1e:ff:0b:
64:25:fb:4e:fc:08:98:b1:aa:39:9b:f0:db:7a:d6:00:83:2c:
15:9b:88:75:5b:da:3b:19:e9:23:e0:01:81:55:2b:5c:68:a9:
9e:ca:fe:a7:7b:b1:02:54:fe:84:f2:43:83:e8:9a:03:c5:a3:
50:07:86:eb:40:70:b4:f0:c7:77:14:f8:13:c3:7d:f7:ce:73:
5b:c8:a5:cd:8d:0e:4c:4f:9b:99:1e:01:ad:f1:2d:8e:1a:a3:
e9:9d:a6:49:bd:60:f4:83:2a:38:ff:29:6b:62:15:9f:9e:52:
51:98:cb:46:03:52:95:66:ee:3b:3d:ae:27:f2:ac:83:46:fa:
f2:e9:f7:7b:87:8d:44:d5:61:05:ff:4d:12:ec:05:a5:d9:76:
19:2f:f9:09:c4:d0:f2:6c:08:0e:9e:30:c2:66:4d:fb:f8:1f:
9c:6c:19:80:9f:45:37:1c:fe:50:3e:11:08:fe:31:ed:6f:00:
b6:33:f8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 23:10:00 2026 by rpki-client