Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/B4ObdB5-uV4pLu6x9dcbkFq2GrI.roa
File: B4ObdB5-uV4pLu6x9dcbkFq2GrI.roa (raw, json)
Hash identifier: wSwh8QpiS5FR1lWM/wQRbFfUYho9vYOx2FceddMQvps=
Subject key identifier: 07:83:9B:74:1E:7E:B9:5E:29:2E:EE:B1:F5:D7:1B:90:5A:B6:1A:B2
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 019FACCC8D6DFCE8B28B8D2F6C2CDF517CCB
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/B4ObdB5-uV4pLu6x9dcbkFq2GrI.roa
Signing time: Wed 29 Jul 2026 07:35:14 +0000
ROA not before: Wed 29 Jul 2026 07:35:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 92.61.106.0/24 maxlen: 24
185.112.241.0/24 maxlen: 24
185.112.242.0/24 maxlen: 24
185.112.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:cc:8d:6d:fc:e8:b2:8b:8d:2f:6c:2c:df:51:7c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jul 29 07:35:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=07839b741e7eb95e292eeeb1f5d71b905ab61ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3a:4d:35:71:4d:ef:7c:3c:2d:c5:63:3f:9e:
01:3b:81:43:1f:b7:7a:e7:42:14:5f:7a:2f:eb:b5:
24:df:28:ea:f5:d3:26:73:9c:73:a8:a3:5a:cf:4a:
7a:6d:10:27:ff:65:61:75:7b:4e:e0:0e:3c:cd:3a:
3c:86:b7:ec:24:61:32:17:07:64:c7:89:72:e6:c6:
75:86:fd:30:ea:6f:6f:38:73:35:28:83:10:24:c5:
61:98:84:2c:a9:79:9c:e7:dd:39:68:11:9c:64:23:
aa:5d:26:58:f2:de:aa:8c:67:fd:31:e5:2c:3d:31:
08:e1:9b:3a:45:fd:74:12:c8:32:9c:d0:10:f0:00:
05:e3:4f:48:bf:35:0d:e1:5b:f7:c5:cc:1b:b0:a9:
56:7b:f4:a3:0e:f0:c2:8b:d6:68:41:e7:54:c4:8b:
c1:35:c1:2d:5c:f0:ee:ef:da:53:0b:fe:23:49:87:
43:53:11:e7:e2:80:40:e9:ef:6c:b1:81:6a:f6:6d:
b3:c3:79:cd:d5:fa:65:b5:59:32:73:c5:46:3b:d3:
85:50:3a:73:51:9b:13:5b:df:44:66:34:4f:04:c8:
d1:e5:89:12:6c:92:4b:4a:49:5f:d6:bf:7c:2c:1e:
15:a3:d0:0f:07:d9:f0:89:04:85:d1:50:96:8d:f5:
a6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:83:9B:74:1E:7E:B9:5E:29:2E:EE:B1:F5:D7:1B:90:5A:B6:1A:B2
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/B4ObdB5-uV4pLu6x9dcbkFq2GrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.106.0/24
185.112.241.0-185.112.243.255
Signature Algorithm: sha256WithRSAEncryption
ba:7f:59:25:24:68:8d:96:fd:cf:22:b8:53:cb:87:ea:ef:de:
03:d0:87:18:05:9f:60:67:65:25:e1:32:a5:33:af:6b:e0:d2:
1a:70:13:5f:50:b6:70:4f:6c:ec:ba:09:93:47:e0:5f:9d:44:
cf:23:d7:84:34:5a:e9:0e:dc:81:ba:37:b1:83:06:66:7a:c3:
d6:97:e0:64:be:5c:ec:bb:34:37:05:51:84:3e:37:cf:7e:e1:
68:ab:0a:91:72:ef:29:58:e7:06:45:8f:93:21:c1:d9:a3:e4:
38:8d:2d:47:83:5b:68:87:36:7c:74:09:7a:ee:07:99:fb:a2:
93:a8:b8:86:af:3b:66:59:25:40:a5:bf:18:1a:f3:ab:0a:f2:
46:ec:c6:a4:ea:56:2c:7a:e6:46:c1:1f:d6:96:d9:a9:7c:a1:
2d:c3:24:4f:9a:99:f2:67:9f:67:48:f3:ef:8f:a4:03:05:54:
3a:54:11:99:d4:c2:df:50:c9:92:73:6d:db:e6:ae:52:c9:0d:
2e:8f:24:3a:7a:76:c0:37:93:20:9c:81:0c:ee:ac:10:74:4c:
7e:57:37:2a:0e:73:f0:4d:61:20:9d:a4:ce:23:d0:17:a4:11:
74:f9:2e:b8:b1:bc:d4:3a:73:1c:99:42:89:2c:a0:bf:4f:56:
ca:fd:92:12
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Aug 25 14:17:10 2026 by rpki-client