Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/bSGb5uF02tbOjdrSh1bjtNrJjuE.roa
File: bSGb5uF02tbOjdrSh1bjtNrJjuE.roa (raw, json)
Hash identifier: lAwN6vNzBd4ncK3Tu/ntqZQQliwHghfg9YdSXdgwSxM=
Subject key identifier: 6D:21:9B:E6:E1:74:DA:D6:CE:8D:DA:D2:87:56:E3:B4:DA:C9:8E:E1
Certificate issuer: /CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Certificate serial: 019CB3026E83C4AC7D9F3152A799D2AF6493
Authority key identifier: 7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/bSGb5uF02tbOjdrSh1bjtNrJjuE.roa
Signing time: Tue 03 Mar 2026 09:23:26 +0000
ROA not before: Tue 03 Mar 2026 09:23:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212087
IP address blocks: 146.255.17.0/24 maxlen: 24
185.57.174.0/23 maxlen: 24
185.104.135.0/24 maxlen: 24
185.105.220.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b3:02:6e:83:c4:ac:7d:9f:31:52:a7:99:d2:af:64:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f168028ec0dab668a67d5bf6f5358caabe337a8
Validity
Not Before: Mar 3 09:23:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d219be6e174dad6ce8ddad28756e3b4dac98ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c2:53:75:f4:dd:0d:52:0c:17:d8:ad:12:0c:
70:9e:e3:86:85:c6:71:fe:6e:aa:f4:ce:1c:07:26:
9e:78:75:16:29:e5:ae:22:37:44:ca:ba:ea:55:16:
8f:b7:2b:92:f0:82:74:0e:bb:a4:2b:d7:23:6e:97:
80:6b:e5:3b:94:8b:44:16:32:1b:92:80:df:6b:57:
4b:85:04:8b:9c:93:af:d7:19:ae:4f:f3:05:ab:d3:
aa:22:e8:1b:8d:11:55:7b:55:73:cb:ca:2d:55:a3:
29:63:79:de:c5:0c:73:4f:7e:e5:24:8d:26:57:5e:
e3:0a:22:be:01:b0:71:5b:63:3a:e3:a2:5e:40:88:
2b:d6:52:60:c4:3d:ae:08:30:b5:0e:1b:5b:ee:77:
5e:95:91:38:c2:68:b6:59:27:68:e9:1b:61:e3:36:
ac:f4:76:29:62:17:ab:91:1c:32:cc:c7:b3:8d:cc:
35:fc:7f:1d:e4:c0:f6:2d:3f:36:a9:19:7a:87:d5:
95:68:f6:a7:f5:c6:15:13:b3:7a:63:1a:fe:c4:55:
8e:eb:aa:55:df:12:bf:af:5c:73:b4:ea:23:80:85:
1e:2c:47:4c:d8:9f:e2:3b:23:66:50:13:90:43:24:
d7:43:fd:d1:d0:85:85:f8:3a:a8:06:bc:8f:2c:c9:
c8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:21:9B:E6:E1:74:DA:D6:CE:8D:DA:D2:87:56:E3:B4:DA:C9:8E:E1
X509v3 Authority Key Identifier:
keyid:7F:16:80:28:EC:0D:AB:66:8A:67:D5:BF:6F:53:58:CA:AB:E3:37:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/bSGb5uF02tbOjdrSh1bjtNrJjuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b15286-fd4d-49fe-a69e-7fadf50a2e37/1/fxaAKOwNq2aKZ9W_b1NYyqvjN6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.255.17.0/24
185.57.174.0/23
185.104.135.0/24
185.105.220.0/23
Signature Algorithm: sha256WithRSAEncryption
d6:31:59:d3:c3:f5:18:cc:c9:04:6b:4c:d6:4a:aa:35:47:f2:
aa:39:85:f8:9a:18:5f:fc:91:b6:24:d4:de:c7:82:1e:c6:2c:
e4:93:7a:d7:41:15:be:0a:92:9a:1e:d4:55:b6:2e:5b:03:d6:
3b:eb:e3:af:66:a8:f1:1d:e8:ba:35:01:65:bf:9b:49:7c:fb:
6d:fa:16:90:8d:29:80:b3:0c:0b:7b:18:3d:a7:11:3a:36:87:
71:90:7d:ef:df:72:7c:0c:cc:b4:a9:76:83:c0:f6:04:af:95:
04:8d:4b:09:1f:17:b4:34:60:d1:4d:dd:26:8e:3e:06:98:5b:
57:d0:40:d2:86:ab:3b:68:15:8a:99:a7:35:fd:7b:8a:b8:b3:
af:84:83:8d:24:21:fd:a2:ad:df:65:3d:93:3b:af:eb:35:38:
3b:4b:ae:97:55:35:c2:ca:6b:d3:99:fb:25:3c:ab:56:8b:dc:
fb:80:3f:f3:49:ed:b8:99:39:6d:f4:13:92:6b:15:56:00:b8:
99:b5:5b:33:34:97:e3:4a:77:bc:b8:07:f5:2b:c6:fc:c5:55:
e3:18:13:ab:7c:3e:96:b3:df:12:45:a6:4e:76:61:6d:c4:9d:
cd:48:f0:14:aa:73:f9:e0:8a:e6:05:18:b7:96:69:21:58:de:
a5:65:d1:6c
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZyzAm6DxKx9nzFSp5nSr2STMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMTY4MDI4ZWMwZGFiNjY4YTY3ZDViZjZmNTM1OGNhYWJl
MzM3YTgwHhcNMjYwMzAzMDkyMzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDIxOWJlNmUxNzRkYWQ2Y2U4ZGRhZDI4NzU2ZTNiNGRhYzk4ZWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8JTdfTdDVIMF9itEgxwnuOGhcZx
/m6q9M4cByaeeHUWKeWuIjdEyrrqVRaPtyuS8IJ0DrukK9cjbpeAa+U7lItEFjIb
koDfa1dLhQSLnJOv1xmuT/MFq9OqIugbjRFVe1Vzy8otVaMpY3nexQxzT37lJI0m
V17jCiK+AbBxW2M646JeQIgr1lJgxD2uCDC1Dhtb7ndelZE4wmi2WSdo6Rth4zas
9HYpYherkRwyzMezjcw1/H8d5MD2LT82qRl6h9WVaPan9cYVE7N6Yxr+xFWO66pV
3xK/r1xztOojgIUeLEdM2J/iOyNmUBOQQyTXQ/3R0IWF+DqoBryPLMnIFQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFG0hm+bhdNrWzo3a0odW47TayY7hMB8GA1UdIwQY
MBaAFH8WgCjsDatmimfVv29TWMqr4zeoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnhhQUtPd05xMmFLWjlXX2IxTll5cXZqTjZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9iMTUyODYtZmQ0ZC00OWZlLWE2OWUt
N2ZhZGY1MGEyZTM3LzEvYlNHYjV1RjAydGJPamRyU2gxYmp0TnJKanVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9iMTUyODYtZmQ0ZC00OWZlLWE2OWUtN2ZhZGY1MGEyZTM3
LzEvZnhhQUtPd05xMmFLWjlXX2IxTll5cXZqTjZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAkv8RAwQB
uTmuAwQAuWiHAwQBuWncMA0GCSqGSIb3DQEBCwUAA4IBAQDWMVnTw/UYzMkEa0zW
Sqo1R/KqOYX4mhhf/JG2JNTex4Iexizkk3rXQRW+CpKaHtRVti5bA9Y76+OvZqjx
Hei6NQFlv5tJfPtt+haQjSmAswwLexg9pxE6NodxkH3v33J8DMy0qXaDwPYEr5UE
jUsJHxe0NGDRTd0mjj4GmFtX0EDShqs7aBWKmac1/XuKuLOvhIONJCH9oq3fZT2T
O6/rNTg7S66XVTXCymvTmfslPKtWi9z7gD/zSe24mTlt9BOSaxVWALiZtVszNJfj
Sne8uAf1K8b8xVXjGBOrfD6Ws98SRaZOdmFtxJ3NSPAUqnP54IrmBRi3lmkhWN6l
ZdFs
-----END CERTIFICATE-----
Generated at Fri Mar 13 15:34:45 2026 by rpki-client