Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/v-Rbh3pxcVUKjfTtgX5z8ooyagk.roa
File: v-Rbh3pxcVUKjfTtgX5z8ooyagk.roa (raw, json)
Hash identifier: uuCpdpCqPNt2JovXlEfYgnQ3c+mrQwXOG7tL6P9AQY8=
Subject key identifier: BF:E4:5B:87:7A:71:71:55:0A:8D:F4:ED:81:7E:73:F2:8A:32:6A:09
Certificate issuer: /CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a
Certificate serial: 019D0523904D3AA8D892CF88B316C98B1EEC
Authority key identifier: F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/v-Rbh3pxcVUKjfTtgX5z8ooyagk.roa
Signing time: Thu 19 Mar 2026 08:08:29 +0000
ROA not before: Thu 19 Mar 2026 08:08:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 185.65.116.0/24 maxlen: 24
193.143.16.0/23 maxlen: 24
2a14:b000::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 08:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:23:90:4d:3a:a8:d8:92:cf:88:b3:16:c9:8b:1e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f58e0c3b9333cb6fd4139e455a5abbafd569532a
Validity
Not Before: Mar 19 08:08:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bfe45b877a7171550a8df4ed817e73f28a326a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:89:ae:bb:19:62:df:75:2d:2c:d0:7b:3a:df:
84:ba:cc:61:9f:82:7b:2b:c1:61:de:39:5c:ed:ac:
35:94:0c:46:fe:5d:b4:df:38:b5:45:b4:5d:8f:99:
4d:c0:38:70:72:82:fa:8d:25:6a:11:4f:d6:0b:b3:
02:a5:d5:31:10:63:b8:a5:62:bb:dc:0e:0a:ce:b0:
91:5b:f6:57:f3:48:c6:94:4d:88:ce:12:30:ae:e9:
80:02:12:2b:e1:1d:19:06:a6:bf:eb:ad:37:5c:bd:
73:37:01:1c:24:ab:e7:ad:9a:89:cd:27:62:3a:72:
22:ee:0d:e4:47:5d:a9:fb:71:ba:76:44:82:1f:d4:
1a:45:4e:5f:b7:bf:76:05:10:ca:01:82:96:b1:b9:
95:bb:ac:89:16:3f:d6:fa:a7:6c:b9:ae:83:9a:dc:
57:34:b5:76:cf:1d:02:6e:dd:17:56:70:3b:84:d3:
ff:e9:15:2d:39:96:33:d0:8a:39:d6:1b:a9:92:52:
f7:73:be:00:f8:c3:48:c4:0d:00:02:d6:ea:18:84:
ad:91:4f:df:4b:71:7e:51:68:d1:d7:24:e7:c6:19:
6b:31:9c:65:d7:47:06:b1:de:f0:ba:a7:6a:5d:30:
ac:48:30:26:29:50:32:49:4d:71:bb:2d:b5:2b:db:
f9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E4:5B:87:7A:71:71:55:0A:8D:F4:ED:81:7E:73:F2:8A:32:6A:09
X509v3 Authority Key Identifier:
keyid:F5:8E:0C:3B:93:33:CB:6F:D4:13:9E:45:5A:5A:BB:AF:D5:69:53:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/v-Rbh3pxcVUKjfTtgX5z8ooyagk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b1ca51-75dd-41c9-9484-2bc1ae3dbdbe/1/9Y4MO5Mzy2_UE55FWlq7r9VpUyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.65.116.0/24
193.143.16.0/23
IPv6:
2a14:b000::/29
Signature Algorithm: sha256WithRSAEncryption
6c:80:d3:64:9d:0b:7a:e8:cd:8b:46:f2:9d:e1:bc:8f:43:ad:
15:10:e3:24:60:46:b1:0a:58:dd:56:93:1a:5a:ec:91:bc:9a:
94:20:ce:49:d3:cc:29:03:7a:4c:c2:83:88:bf:d3:f3:aa:e8:
1c:b3:bf:ec:73:7e:49:16:b6:65:01:66:56:12:d7:34:36:97:
c7:ef:e9:77:16:dc:92:c8:52:0e:67:ec:61:77:48:76:29:30:
0a:8b:38:11:aa:f5:dc:5b:5e:e2:a4:40:d2:14:84:e3:6f:a2:
bb:cf:74:df:a2:04:f7:fb:b8:97:4c:05:04:7e:1d:82:15:39:
8c:63:50:ee:49:47:c1:e8:cd:3f:ab:66:49:7b:9f:92:e9:81:
eb:a2:6a:04:4d:4e:52:fa:79:3a:55:8d:b2:57:79:29:d6:39:
d4:7e:0c:d3:33:9a:4b:35:ae:de:be:be:a9:b3:a8:d6:88:7f:
b2:64:dd:5d:6f:9a:72:6a:17:b5:34:d0:21:cf:d8:28:e3:eb:
e8:ff:8d:1a:58:9a:f3:eb:3c:4b:fe:2e:88:26:80:ce:27:75:
20:ce:41:aa:45:96:43:fe:13:d4:27:0e:6f:5a:b0:f1:39:a0:
f6:23:cc:eb:ee:31:98:62:e0:a9:33:19:4c:88:b1:cd:b5:34:
0e:1a:81:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 12:31:14 2026 by rpki-client