Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/bdFa7noc5JULgEIUUp2O_nnsfX8.roa
File: bdFa7noc5JULgEIUUp2O_nnsfX8.roa (raw, json)
Hash identifier: oE4E3OOq0qDI/T3VHEtrFh4lpygnjYYLcPsEtbasbyA=
Subject key identifier: 6D:D1:5A:EE:7A:1C:E4:95:0B:80:42:14:52:9D:8E:FE:79:EC:7D:7F
Certificate issuer: /CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Certificate serial: 019D6EAD89D32AE02F09FC4D557C0BE63EE1
Authority key identifier: FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/bdFa7noc5JULgEIUUp2O_nnsfX8.roa
Signing time: Wed 08 Apr 2026 19:59:19 +0000
ROA not before: Wed 08 Apr 2026 19:59:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7029
IP address blocks: 185.165.92.0/24 maxlen: 24
2a13:9240::/30 maxlen: 30
2a13:9244::/30 maxlen: 30
2a14:b80::/29 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6e:ad:89:d3:2a:e0:2f:09:fc:4d:55:7c:0b:e6:3e:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc3ab55d57509cbfae798bd71aaa23b3444d8e5a
Validity
Not Before: Apr 8 19:59:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6dd15aee7a1ce4950b804214529d8efe79ec7d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:62:d6:75:3c:78:2a:1f:54:52:db:1f:00:39:
63:01:36:a2:06:e7:f8:83:e8:df:72:f9:12:13:10:
0d:05:6a:1c:0a:27:f4:bc:37:9e:a7:60:69:ac:04:
70:e8:de:dc:04:91:f4:de:df:bf:a1:b0:2e:0a:2c:
cc:fe:7e:90:4a:93:6b:fb:d1:be:2a:fe:17:9c:29:
cd:9c:cb:ce:2b:bd:74:aa:32:3b:77:d9:aa:10:3c:
df:e0:e7:8b:2a:dc:4b:cd:d4:1b:9e:b9:23:c8:35:
7b:92:d0:b5:2c:ae:00:6d:5e:36:aa:8b:5a:92:94:
df:77:e2:76:e7:24:b7:c7:c6:66:bc:d0:9b:29:88:
76:dd:78:2c:a9:70:af:89:e5:12:f2:44:ed:90:d7:
27:21:48:8e:c5:69:00:09:a0:08:b5:90:d1:67:79:
03:7f:f8:ed:7f:b3:80:31:6a:48:e3:1d:05:83:dd:
de:81:9d:5d:fa:34:05:7a:df:14:ab:db:42:be:ee:
78:fe:63:c6:68:1f:7a:af:c1:0c:1a:1a:a8:ba:3d:
47:1e:61:d4:80:cf:7c:b6:bb:c0:d3:c1:a0:f2:67:
6d:dd:cc:38:f6:a6:36:b1:09:a0:de:39:e8:bf:a1:
e6:15:d5:a2:85:51:97:ae:52:31:da:fd:a3:24:ba:
5e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D1:5A:EE:7A:1C:E4:95:0B:80:42:14:52:9D:8E:FE:79:EC:7D:7F
X509v3 Authority Key Identifier:
keyid:FC:3A:B5:5D:57:50:9C:BF:AE:79:8B:D7:1A:AA:23:B3:44:4D:8E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Dq1XVdQnL-ueYvXGqojs0RNjlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/bdFa7noc5JULgEIUUp2O_nnsfX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/729da9-eb03-451b-bfef-0c45218e7981/1/_Dq1XVdQnL-ueYvXGqojs0RNjlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.92.0/24
IPv6:
2a13:9240::/29
2a14:b80::/29
Signature Algorithm: sha256WithRSAEncryption
88:aa:c4:c2:12:39:7f:ce:ee:8b:2b:4f:4e:e5:a6:8e:9d:5f:
fb:fe:68:df:10:48:eb:7e:42:cd:05:75:37:04:4e:02:53:28:
f1:62:1a:f1:2e:d7:4a:bd:7f:bb:90:45:66:b3:ef:3f:72:59:
19:1e:4a:d1:a7:03:0d:1c:68:39:5e:af:c9:57:45:d7:54:9b:
c1:18:ac:dd:0f:4d:1b:0d:a3:38:ac:c1:c3:2f:ea:8f:8c:9e:
69:28:49:6d:b5:08:1a:eb:77:6a:ec:c1:6c:03:28:3a:a6:f9:
99:e0:c5:a8:7a:ed:f2:d9:17:d4:fa:de:4e:0d:65:b3:b0:a5:
84:f7:bd:46:d6:26:3b:ad:7d:a0:8f:a2:44:4f:9a:fe:cc:c9:
4f:42:b5:a5:67:36:1b:81:08:f6:5c:ad:f7:53:0f:9f:0e:61:
95:a4:75:e9:56:c1:c9:e6:69:a6:2e:aa:45:60:06:51:74:e6:
15:41:ac:58:9c:78:b3:67:05:4d:01:b9:f0:b9:19:6d:01:bc:
e0:0a:14:87:bd:71:63:b3:37:b1:e4:5d:ec:26:e1:9c:fb:ae:
6b:59:7c:1c:e1:17:0c:3e:6d:5b:8b:ab:4f:21:1b:74:47:d5:
ad:ed:6c:f5:00:bc:46:f3:3a:6f:cc:17:49:4a:98:97:de:a4:
0f:d2:ef:29
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZ1urYnTKuAvCfxNVXwL5j7hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjM2FiNTVkNTc1MDljYmZhZTc5OGJkNzFhYWEyM2IzNDQ0
ZDhlNWEwHhcNMjYwNDA4MTk1OTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZGQxNWFlZTdhMWNlNDk1MGI4MDQyMTQ1MjlkOGVmZTc5ZWM3ZDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WLWdTx4Kh9UUtsfADljATaiBuf4
g+jfcvkSExANBWocCif0vDeep2BprARw6N7cBJH03t+/obAuCizM/n6QSpNr+9G+
Kv4XnCnNnMvOK710qjI7d9mqEDzf4OeLKtxLzdQbnrkjyDV7ktC1LK4AbV42qota
kpTfd+J25yS3x8ZmvNCbKYh23XgsqXCvieUS8kTtkNcnIUiOxWkACaAItZDRZ3kD
f/jtf7OAMWpI4x0Fg93egZ1d+jQFet8Uq9tCvu54/mPGaB96r8EMGhqouj1HHmHU
gM98trvA08Gg8mdt3cw49qY2sQmg3jnov6HmFdWihVGXrlIx2v2jJLpejQIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFG3RWu56HOSVC4BCFFKdjv557H1/MB8GA1UdIwQY
MBaAFPw6tV1XUJy/rnmL1xqqI7NETY5aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0RxMVhWZFFuTC11ZVl2WEdxb2pzMFJOamxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC83MjlkYTktZWIwMy00NTFiLWJmZWYt
MGM0NTIxOGU3OTgxLzEvYmRGYTdub2M1SlVMZ0VJVVVwMk9fbm5zZlg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC83MjlkYTktZWIwMy00NTFiLWJmZWYtMGM0NTIxOGU3OTgx
LzEvX0RxMVhWZFFuTC11ZVl2WEdxb2pzMFJOamxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAMBAIAATAGAwQAuaVcMBQE
AgACMA4DBQMqE5JAAwUDKhQLgDANBgkqhkiG9w0BAQsFAAOCAQEAiKrEwhI5f87u
iytPTuWmjp1f+/5o3xBI635CzQV1NwROAlMo8WIa8S7XSr1/u5BFZrPvP3JZGR5K
0acDDRxoOV6vyVdF11SbwRis3Q9NGw2jOKzBwy/qj4yeaShJbbUIGut3auzBbAMo
Oqb5meDFqHrt8tkX1PreTg1ls7ClhPe9RtYmO619oI+iRE+a/szJT0K1pWc2G4EI
9lyt91MPnw5hlaR16VbByeZppi6qRWAGUXTmFUGsWJx4s2cFTQG58LkZbQG84AoU
h71xY7M3seRd7CbhnPuua1l8HOEXDD5tW4urTyEbdEfVre1s9QC8RvM6b8wXSUqY
l96kD9LvKQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:25:17 2026 by rpki-client