Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/BXFdN1Z5TwgsjoWnWzPCB_vcA-o.roa
File: BXFdN1Z5TwgsjoWnWzPCB_vcA-o.roa (raw, json)
Hash identifier: 4V056W0njPwGeLmfiU9boZW/Yf0SKKmhujbcJt/lGHw=
Subject key identifier: 05:71:5D:37:56:79:4F:08:2C:8E:85:A7:5B:33:C2:07:FB:DC:03:EA
Certificate issuer: /CN=b52f5a410b1577591a780cdb3eacc26da2dffdf1
Certificate serial: 019CAE76CB8B068769A812E98E8191D6B02C
Authority key identifier: B5:2F:5A:41:0B:15:77:59:1A:78:0C:DB:3E:AC:C2:6D:A2:DF:FD:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tS9aQQsVd1kaeAzbPqzCbaLf_fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/BXFdN1Z5TwgsjoWnWzPCB_vcA-o.roa
Signing time: Mon 02 Mar 2026 12:12:26 +0000
ROA not before: Mon 02 Mar 2026 12:12:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 167.254.162.0/24 maxlen: 24
167.254.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tS9aQQsVd1kaeAzbPqzCbaLf_fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:76:cb:8b:06:87:69:a8:12:e9:8e:81:91:d6:b0:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b52f5a410b1577591a780cdb3eacc26da2dffdf1
Validity
Not Before: Mar 2 12:12:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05715d3756794f082c8e85a75b33c207fbdc03ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:59:3b:b3:6e:71:dd:fe:d2:2f:3e:c4:e6:bf:
63:2e:55:69:df:ae:b3:53:cc:eb:ef:7d:98:ab:4e:
f9:a0:92:a1:49:99:08:65:16:13:85:38:8a:99:ee:
b5:f4:d0:0f:f3:81:3b:f7:d6:07:7c:3d:a7:ea:82:
ba:fc:fe:4e:4e:dc:32:09:13:d5:88:7d:a0:10:60:
6f:1b:fc:32:9b:19:f9:3b:31:64:de:14:e7:f5:d7:
27:74:1b:56:d3:a1:5c:00:70:d2:95:b3:2e:ba:45:
b8:4f:eb:b4:ab:a1:60:ac:41:52:fe:25:f3:22:d7:
47:41:a0:02:c4:97:43:be:ae:68:db:c4:84:37:72:
91:e8:d1:1b:8c:f0:24:dc:31:42:1f:a7:ab:e7:21:
58:70:c9:81:07:3c:64:b5:86:a1:e0:e2:27:2a:82:
58:4d:ab:3b:12:49:31:e3:cd:fc:30:23:f7:55:ac:
49:b2:c4:01:48:66:3e:82:f2:88:a7:58:a2:06:9b:
4f:61:f6:fa:ad:0a:98:6b:76:5a:d0:c0:1e:91:76:
84:a1:5a:24:4a:d8:fd:32:31:de:d3:d9:bf:b8:2a:
87:e1:0f:cc:ab:d4:d4:c0:80:67:ed:94:c7:30:d9:
1b:41:18:af:35:c9:d6:ba:ff:59:8e:ca:63:ee:2a:
05:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:71:5D:37:56:79:4F:08:2C:8E:85:A7:5B:33:C2:07:FB:DC:03:EA
X509v3 Authority Key Identifier:
keyid:B5:2F:5A:41:0B:15:77:59:1A:78:0C:DB:3E:AC:C2:6D:A2:DF:FD:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tS9aQQsVd1kaeAzbPqzCbaLf_fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/BXFdN1Z5TwgsjoWnWzPCB_vcA-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.254.162.0/23
Signature Algorithm: sha256WithRSAEncryption
36:ef:11:cd:e4:2f:4d:a2:49:94:54:8a:b2:69:29:09:59:0b:
35:4f:fd:fe:b7:40:8e:94:84:54:dd:1c:e7:68:72:21:f9:7e:
35:bf:d7:d1:29:66:9b:5c:a0:8d:c1:a8:4e:65:ec:85:bb:7a:
ba:ec:dd:a4:0d:83:c0:8b:7e:bf:f7:ee:ca:65:fd:4f:79:8b:
2d:90:89:51:3b:43:68:14:c8:54:a6:fd:ab:ef:8c:51:02:19:
d9:c9:ba:c8:3f:e2:64:e7:1b:87:cc:9c:6b:be:e4:8c:8c:a3:
16:a1:fc:ee:c2:ba:1c:21:d8:30:53:7c:b6:47:19:c5:f7:af:
4d:d7:06:48:76:10:7a:6b:e6:38:fb:04:f8:29:cc:85:8d:a4:
2c:f0:07:e4:90:04:42:58:e0:27:36:e7:a6:23:c4:d0:e0:73:
a0:01:7e:68:22:f5:c7:40:e8:08:a7:f7:d9:bf:b1:9c:89:58:
da:07:98:cc:89:ab:df:3a:ec:9f:5d:55:e6:2a:4a:b9:d8:ee:
44:1c:b6:fa:e2:bf:ef:0d:d0:e0:82:6c:89:1b:c7:32:bd:f1:
6f:08:f9:cb:a5:ff:4a:7b:2a:c2:72:e5:ba:ba:ac:cb:d7:aa:
09:96:df:1a:d6:80:5d:93:d9:df:49:c9:f3:b4:31:31:b9:a0:
92:9f:b0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 15:29:52 2026 by rpki-client