Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/i-bHAV7rAWsDa-yPXZF4r2j1SiE.roa
File: i-bHAV7rAWsDa-yPXZF4r2j1SiE.roa (raw, json)
Hash identifier: ZYcfcqPm8N5o+Ss1WfcUL1JVzc63P9edxulk5VhlC3c=
Subject key identifier: 8B:E6:C7:01:5E:EB:01:6B:03:6B:EC:8F:5D:91:78:AF:68:F5:4A:21
Certificate issuer: /CN=62d190b238d97af7900bdcbd02304b782ffcaf2a
Certificate serial: 019CA086121EB586B573A73D89C7678FCDB3
Authority key identifier: 62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/i-bHAV7rAWsDa-yPXZF4r2j1SiE.roa
Signing time: Fri 27 Feb 2026 19:14:26 +0000
ROA not before: Fri 27 Feb 2026 19:14:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40513
IP address blocks: 84.45.50.0/24 maxlen: 24
84.45.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a0:86:12:1e:b5:86:b5:73:a7:3d:89:c7:67:8f:cd:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62d190b238d97af7900bdcbd02304b782ffcaf2a
Validity
Not Before: Feb 27 19:14:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8be6c7015eeb016b036bec8f5d9178af68f54a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a1:4f:f6:87:b9:8f:5a:5b:30:f2:27:9e:67:
0d:21:96:20:d1:b3:f0:23:a3:07:26:b1:73:29:44:
dc:6e:22:a3:25:19:9d:a3:b3:99:aa:28:dc:2b:ee:
60:50:4b:96:7b:84:47:70:84:4d:3f:98:19:dd:de:
e4:86:b9:a8:ae:32:71:0d:99:11:9e:b4:9a:10:f2:
fe:4f:65:dc:7a:7b:e0:59:0e:e6:76:5b:b8:ba:ae:
15:11:90:a8:73:a0:8f:02:ee:30:fa:cb:89:f4:20:
7a:e6:4a:54:3d:7a:e6:94:2a:72:86:0c:c5:2f:57:
ad:67:1f:ac:c6:58:90:6d:db:b1:ec:ab:d2:95:d4:
a7:ea:d4:f2:8a:cb:b0:d6:33:58:9e:47:de:79:cd:
af:e0:c7:f1:46:f6:64:f7:94:3e:c5:74:bb:a3:85:
6d:c3:5b:69:bf:df:45:ea:3c:9d:ba:ce:e0:8c:e4:
b5:75:96:aa:f4:97:d7:77:2d:71:ce:52:52:83:f1:
5b:21:6c:00:63:62:0a:b7:7d:29:eb:76:b0:79:f1:
8e:37:a0:7a:86:76:98:24:b1:41:55:a4:2d:91:e3:
2c:c7:2c:b4:06:99:11:57:99:19:bc:db:c4:03:fd:
d9:1f:5a:8d:d9:6d:bd:cf:e9:a9:13:fb:d4:1b:fc:
b7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E6:C7:01:5E:EB:01:6B:03:6B:EC:8F:5D:91:78:AF:68:F5:4A:21
X509v3 Authority Key Identifier:
keyid:62:D1:90:B2:38:D9:7A:F7:90:0B:DC:BD:02:30:4B:78:2F:FC:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YtGQsjjZeveQC9y9AjBLeC_8ryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/i-bHAV7rAWsDa-yPXZF4r2j1SiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/5a337f-c843-45f4-8d99-163fb7003e5d/1/YtGQsjjZeveQC9y9AjBLeC_8ryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.45.50.0/24
84.45.70.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:1d:b5:33:d2:ca:a1:ed:c4:dd:94:29:24:34:6c:59:65:19:
c1:50:53:3e:fb:26:a3:d3:f1:83:f8:8e:ff:fe:da:ba:26:d1:
4c:96:81:68:94:40:04:d6:0d:0d:a0:08:71:2e:fe:30:c0:a3:
3a:40:b5:6c:64:ec:8a:d7:c8:c7:a9:01:b5:60:3a:4d:82:ed:
20:bc:89:d1:46:3f:9b:0d:e4:84:e7:f7:5e:4b:4f:0c:22:db:
05:af:c2:12:19:a6:aa:d8:d4:49:ac:b7:0f:a3:83:80:bb:c0:
d6:d5:e3:c4:e6:ef:5f:8b:5d:a4:27:41:50:aa:e9:db:73:d8:
c0:3a:6b:d1:07:03:6c:52:56:be:ae:1e:c7:0a:c1:9b:b6:c0:
09:f7:d2:bf:2e:b9:c0:27:aa:5e:e9:c6:b2:de:ae:b3:47:85:
2e:02:98:dd:e5:df:1f:e9:71:39:99:79:22:91:e1:c8:3a:67:
ae:6f:eb:23:d9:76:a7:dd:8f:b1:6b:8b:86:6c:af:d8:54:e3:
d9:39:df:f3:da:e6:e7:e5:f4:51:d4:29:55:a1:f7:52:8f:c2:
c9:ba:e9:47:1f:a6:1e:f9:62:64:1f:ea:32:4e:a8:c0:31:7d:
47:f2:60:d6:56:56:f2:31:6c:c9:c5:dd:bf:32:7b:38:3f:e6:
64:3f:f4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:57:14 2026 by rpki-client