Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/lbvJdX8vGOpaTahOJAPiEyACl7w.roa
File: lbvJdX8vGOpaTahOJAPiEyACl7w.roa (raw, json)
Hash identifier: 0orYn9G5IVROjCboDVwfjh8n823lF/daaJTT0RRwFeA=
Subject key identifier: 95:BB:C9:75:7F:2F:18:EA:5A:4D:A8:4E:24:03:E2:13:20:02:97:BC
Certificate issuer: /CN=b52f5a410b1577591a780cdb3eacc26da2dffdf1
Certificate serial: 019CAE76CC0F9537967964A36E3391FBFC59
Authority key identifier: B5:2F:5A:41:0B:15:77:59:1A:78:0C:DB:3E:AC:C2:6D:A2:DF:FD:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tS9aQQsVd1kaeAzbPqzCbaLf_fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/lbvJdX8vGOpaTahOJAPiEyACl7w.roa
Signing time: Mon 02 Mar 2026 12:12:26 +0000
ROA not before: Mon 02 Mar 2026 12:12:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 167.254.162.0/24 maxlen: 24
167.254.163.0/24 maxlen: 24
167.254.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tS9aQQsVd1kaeAzbPqzCbaLf_fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:76:cc:0f:95:37:96:79:64:a3:6e:33:91:fb:fc:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b52f5a410b1577591a780cdb3eacc26da2dffdf1
Validity
Not Before: Mar 2 12:12:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95bbc9757f2f18ea5a4da84e2403e213200297bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:72:a9:81:40:53:c4:ab:f9:a7:87:66:77:51:
80:7a:32:5d:bf:e4:ec:b1:8a:31:66:9a:72:cd:ab:
17:ac:e3:bb:4f:da:29:a9:7f:1f:ee:b5:f6:e4:03:
74:73:02:24:68:f4:13:e5:28:d0:bf:f2:a3:19:4e:
a7:29:bd:5b:68:ff:e3:a3:19:66:7d:f1:3a:16:24:
ef:4c:61:f1:2c:7a:58:d1:11:a8:5c:e6:9d:ab:51:
74:df:84:0d:0c:47:29:9a:44:40:a7:01:ab:aa:fd:
c5:1e:17:79:f2:a1:8f:aa:96:c6:fe:39:9a:b2:04:
8e:eb:92:9c:25:0d:a6:2f:df:4d:28:a7:33:85:34:
65:38:de:bc:4f:e9:49:20:31:7d:ca:3b:c1:99:d6:
e5:67:15:f6:14:fa:3b:96:05:b8:21:ed:46:ee:b1:
65:fb:b8:1c:03:3d:d5:6d:33:e4:4c:37:7a:fe:95:
e5:9f:5b:eb:9b:24:ef:7f:0f:d4:09:2b:47:75:f0:
ff:28:11:fd:cd:6d:b2:2a:53:74:67:e6:98:f5:c3:
bf:7b:72:a4:f2:63:36:bf:ca:ce:9c:3d:b0:67:75:
c4:e0:8d:fe:4c:20:28:6d:a2:eb:cd:d7:c0:b8:5c:
72:18:39:5b:71:48:6e:05:71:51:e7:c9:87:8a:ff:
69:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:BB:C9:75:7F:2F:18:EA:5A:4D:A8:4E:24:03:E2:13:20:02:97:BC
X509v3 Authority Key Identifier:
keyid:B5:2F:5A:41:0B:15:77:59:1A:78:0C:DB:3E:AC:C2:6D:A2:DF:FD:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tS9aQQsVd1kaeAzbPqzCbaLf_fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/lbvJdX8vGOpaTahOJAPiEyACl7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.254.162.0-167.254.164.255
Signature Algorithm: sha256WithRSAEncryption
a9:12:81:c6:27:d4:aa:25:ce:2c:04:4c:10:0e:7a:d2:ce:ee:
c2:48:0d:70:0e:89:b3:87:50:f5:4b:5a:70:5d:c7:68:7b:3e:
1b:5f:01:0a:92:1f:bf:5a:16:5a:30:fc:a2:32:30:23:c1:1a:
bc:4d:00:ee:aa:01:54:97:f4:bc:24:6e:98:d8:7e:7f:47:68:
3f:01:d9:d3:e1:fe:1a:cf:ea:42:0f:0a:cc:62:10:c9:d3:9f:
c3:58:94:30:12:3b:51:37:cd:3a:ca:64:71:2d:0f:d1:0e:72:
e2:26:8e:b3:5f:c8:16:63:17:b0:67:9d:ae:b3:e9:74:73:5a:
3d:3e:0c:9d:f5:6a:75:8a:63:49:e0:c9:3e:9d:56:6f:0d:7f:
68:14:72:1b:34:e0:ca:80:17:d6:0e:d0:6d:e4:e2:11:bb:60:
b1:b7:a5:de:6e:01:d6:33:e8:f1:08:07:00:64:6d:c5:37:02:
9c:55:fa:cb:b2:fe:75:d9:32:7f:12:13:74:30:d1:91:68:f2:
85:8c:56:36:9c:69:2b:99:7b:2a:05:b9:14:55:a5:e6:0f:6e:
8f:a4:6a:24:38:36:1d:e1:34:23:74:e4:a1:8d:64:71:d4:8c:
4f:2a:56:78:3d:6b:37:f0:7e:0b:87:db:1e:ec:fc:99:15:a5:
5a:b7:b9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 12:31:13 2026 by rpki-client