Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/b1KrSMtgQ3wtC7LRVXqRaRG-Kyo.roa
File: b1KrSMtgQ3wtC7LRVXqRaRG-Kyo.roa (raw, json)
Hash identifier: 1Mhz+jZ0j26sgAjplNt7YLlv8U2oEM5WHSOMuFm4FJo=
Subject key identifier: 6F:52:AB:48:CB:60:43:7C:2D:0B:B2:D1:55:7A:91:69:11:BE:2B:2A
Certificate issuer: /CN=839b7e1615a001a5bcb96e154a71af9a0b45b5d7
Certificate serial: 019D42ABF00889C4092CBE9233BE57A8CA0E
Authority key identifier: 83:9B:7E:16:15:A0:01:A5:BC:B9:6E:15:4A:71:AF:9A:0B:45:B5:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/b1KrSMtgQ3wtC7LRVXqRaRG-Kyo.roa
Signing time: Tue 31 Mar 2026 06:54:17 +0000
ROA not before: Tue 31 Mar 2026 06:54:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41959
IP address blocks: 84.234.113.0/24 maxlen: 24
84.234.122.0/24 maxlen: 24
84.234.123.0/24 maxlen: 24
91.206.96.0/23 maxlen: 23
185.79.32.0/22 maxlen: 22
193.242.146.0/23 maxlen: 23
194.126.229.0/24 maxlen: 24
194.140.250.0/24 maxlen: 24
195.80.229.0/24 maxlen: 24
195.93.142.0/23 maxlen: 23
195.226.207.0/24 maxlen: 24
195.245.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.mft
rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:42:ab:f0:08:89:c4:09:2c:be:92:33:be:57:a8:ca:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=839b7e1615a001a5bcb96e154a71af9a0b45b5d7
Validity
Not Before: Mar 31 06:54:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f52ab48cb60437c2d0bb2d1557a916911be2b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:04:bb:26:45:6a:40:84:95:47:09:a2:57:48:
25:cd:08:c7:56:84:ba:bb:f0:7a:97:e9:71:4a:e5:
8c:9b:c8:bc:b7:3b:5c:a2:63:55:bb:72:3a:7c:f2:
1f:1a:3c:2e:19:03:b2:36:fa:db:27:1e:14:95:ac:
f9:00:2b:97:17:af:41:38:54:29:be:04:08:dd:34:
da:dc:f2:10:40:cf:2f:20:c9:8a:3e:e7:c9:5c:ec:
47:56:79:6a:df:4c:2e:54:91:b1:e3:c4:ed:5a:3c:
9f:6b:96:a0:b1:a8:6f:98:71:2c:fa:90:e5:7a:5a:
75:21:0e:56:f7:ce:56:50:cc:59:5f:8e:14:7d:4c:
76:ea:fb:4e:d2:a8:56:6e:04:24:25:a8:56:8c:1c:
05:89:39:69:4b:72:52:58:be:3f:bc:b1:f1:5c:61:
e1:38:83:8d:d7:ab:87:51:90:06:c8:0f:3a:d6:94:
3a:ff:94:83:db:4a:21:3b:93:8a:cc:83:23:c2:35:
ba:fa:47:79:46:d1:b8:5a:48:14:2c:14:fb:31:00:
c3:8e:c6:d8:29:2c:9c:a1:53:5f:af:68:5d:96:af:
99:a8:da:7c:6e:3e:a5:5c:d1:6e:77:ea:92:8a:ca:
c4:96:71:32:67:a9:6a:79:82:93:35:45:c2:49:69:
b9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:52:AB:48:CB:60:43:7C:2D:0B:B2:D1:55:7A:91:69:11:BE:2B:2A
X509v3 Authority Key Identifier:
keyid:83:9B:7E:16:15:A0:01:A5:BC:B9:6E:15:4A:71:AF:9A:0B:45:B5:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5t-FhWgAaW8uW4VSnGvmgtFtdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/b1KrSMtgQ3wtC7LRVXqRaRG-Kyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/42f275-68b7-448d-b956-35bb2e6d0606/1/g5t-FhWgAaW8uW4VSnGvmgtFtdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.234.113.0/24
84.234.122.0/23
91.206.96.0/23
185.79.32.0/22
193.242.146.0/23
194.126.229.0/24
194.140.250.0/24
195.80.229.0/24
195.93.142.0/23
195.226.207.0/24
195.245.204.0/24
Signature Algorithm: sha256WithRSAEncryption
97:bb:af:16:e0:fa:00:ee:fe:57:ff:8a:7c:68:cf:2e:23:50:
13:b9:28:a3:4a:3f:c6:a8:9c:00:ab:46:08:b2:06:bf:53:e0:
95:19:98:bb:71:58:63:98:75:21:3b:80:56:90:ab:99:1c:41:
d4:f0:db:dc:e8:b7:ec:74:c5:21:fb:bc:0a:73:51:6c:6f:30:
01:b7:32:3c:ee:cd:00:02:5f:2a:13:73:f5:fa:d0:1d:0a:9e:
46:06:ae:44:15:b9:cb:a4:bb:62:14:eb:3b:dc:02:af:5f:e5:
b3:94:49:fc:6d:50:12:b6:dd:16:1c:82:f7:64:ca:be:03:60:
85:51:b9:0e:e4:1f:8c:97:57:84:c6:ba:e9:65:8c:69:65:1c:
e2:22:80:17:87:61:b5:0e:87:3b:f0:0a:56:ab:c0:d1:87:96:
39:55:14:ce:a0:4f:4a:5d:6b:f9:61:57:91:c9:36:54:e8:ce:
43:bf:a7:7e:1e:b8:2f:57:e6:38:65:f7:17:1c:d6:a0:2d:ac:
68:68:4d:e4:73:a9:9d:02:fb:83:08:03:79:a4:85:15:22:c0:
e0:8d:45:52:f7:f9:e0:d3:e7:18:8c:ec:41:15:17:05:20:b1:
55:5d:b6:6a:c6:56:9b:0d:5c:cc:45:65:cf:0c:e1:b7:96:01:
68:57:5d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:58:25 2026 by rpki-client