Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/B4taF8vxr_BO-k8PmtG33Mlyo9c.roa
File: B4taF8vxr_BO-k8PmtG33Mlyo9c.roa (raw, json)
Hash identifier: kVgCh+cJlUxukfM4sDuKn24NAxWFzvYDZdvUrddUB8g=
Subject key identifier: 07:8B:5A:17:CB:F1:AF:F0:4E:FA:4F:0F:9A:D1:B7:DC:C9:72:A3:D7
Certificate issuer: /CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Certificate serial: 019FEFC631E9B2B0E7BA238C091B9B5A5BDB
Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/B4taF8vxr_BO-k8PmtG33Mlyo9c.roa
Signing time: Tue 11 Aug 2026 07:42:51 +0000
ROA not before: Tue 11 Aug 2026 07:42:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199524
IP address blocks: 87.58.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 13:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ef:c6:31:e9:b2:b0:e7:ba:23:8c:09:1b:9b:5a:5b:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Validity
Not Before: Aug 11 07:42:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=078b5a17cbf1aff04efa4f0f9ad1b7dcc972a3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ee:76:7c:92:06:0e:e6:62:7f:b0:45:1d:b7:
e0:e9:d7:0f:a4:b0:6e:0d:4c:93:d6:09:4e:62:3c:
1e:69:90:25:32:36:a0:b7:75:c2:24:98:47:b9:3b:
28:63:d2:b4:90:f5:c6:82:a9:72:45:2c:95:ca:62:
7c:25:21:6d:27:7a:da:49:c3:5e:cc:f3:aa:77:b2:
45:13:95:35:51:33:60:a0:4c:86:94:11:dd:da:f2:
f6:18:b3:cc:e8:84:0f:2f:ef:b5:65:1d:09:81:63:
ea:4e:bf:01:d1:34:b8:46:ae:b5:55:56:62:d1:f8:
b2:e1:62:89:a6:85:41:7d:c7:23:ea:de:8a:85:64:
ed:af:e4:ff:19:bf:89:b1:e7:50:fc:ca:1c:d0:40:
14:af:bc:9b:be:f3:44:bc:01:f4:50:bd:9d:e3:ac:
2e:8d:f2:49:6c:ad:10:59:80:8e:06:51:b8:34:f8:
af:60:d1:dc:d8:65:2d:22:f2:12:b9:fe:1e:f2:f6:
e9:22:44:7c:3d:8f:71:78:6a:25:ad:82:ea:02:23:
81:c7:7c:ae:cc:71:c3:9c:1b:b2:85:08:1e:04:cb:
29:79:ec:37:b9:05:e5:31:e1:7e:e9:4f:a9:b3:aa:
13:74:93:cd:72:7d:26:25:79:fd:9a:0f:6d:a1:07:
96:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:8B:5A:17:CB:F1:AF:F0:4E:FA:4F:0F:9A:D1:B7:DC:C9:72:A3:D7
X509v3 Authority Key Identifier:
keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/B4taF8vxr_BO-k8PmtG33Mlyo9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.129.0/24
Signature Algorithm: sha256WithRSAEncryption
82:9e:5e:96:74:70:e8:eb:44:5a:94:fa:b3:dc:7a:90:17:5f:
6f:0f:60:65:80:c6:ee:5d:7d:14:6d:e0:67:96:31:72:a0:3e:
2d:60:25:2d:42:48:79:81:a1:c4:21:cd:93:9f:fa:4d:bd:55:
c3:15:df:0e:6c:ab:67:21:b7:f7:86:2a:a6:94:98:4d:3e:17:
47:6c:6b:e7:8f:23:dd:f4:73:03:9b:4d:8e:74:e3:01:62:73:
d7:be:d4:b5:57:67:7d:c9:dc:e3:b0:c8:8e:28:ee:c4:70:59:
b3:b4:dc:a5:c7:5d:71:e8:38:5a:28:67:05:05:ed:de:cf:15:
a3:c3:73:f8:8b:f9:11:c7:c6:fa:97:b6:9a:c4:75:06:2a:87:
ac:7d:c9:ad:29:2b:77:61:3f:81:6e:c3:fd:41:b6:ea:cf:4a:
30:53:b0:0e:d9:8b:32:4f:05:9d:36:c3:01:ef:1b:30:60:7a:
90:f7:26:7b:38:31:8f:8e:59:04:ea:b6:38:f4:11:fc:60:5e:
9d:b8:bd:9f:35:26:77:49:5b:6c:7d:9e:82:a9:ed:52:46:64:
d2:c7:28:e3:65:0e:12:c6:5c:c9:94:3e:f8:bd:f3:e9:a8:0c:
f3:ea:bf:f4:f3:a8:e3:59:51:79:7e:00:51:3f:fe:89:a3:12:
4a:a2:44:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:22:33 2026 by rpki-client