Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/331755-9798-4254-8455-4e46791e6d42/1/1bcxGH1cZpyTI4YIKUDBVrfhG8M.roa
File: 1bcxGH1cZpyTI4YIKUDBVrfhG8M.roa (raw, json)
Hash identifier: NC/8TtzYxM2Ha7m2JXk7QATNUCXczyQpVMeqDxeavJg=
Subject key identifier: D5:B7:31:18:7D:5C:66:9C:93:23:86:08:29:40:C1:56:B7:E1:1B:C3
Certificate issuer: /CN=848d0eafefe82fc3b1210e44692b0534591ca6f5
Certificate serial: 019F2368B41B15FA29389A117375923656FC
Authority key identifier: 84:8D:0E:AF:EF:E8:2F:C3:B1:21:0E:44:69:2B:05:34:59:1C:A6:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hI0Or-_oL8OxIQ5EaSsFNFkcpvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/331755-9798-4254-8455-4e46791e6d42/1/1bcxGH1cZpyTI4YIKUDBVrfhG8M.roa
Signing time: Thu 02 Jul 2026 15:18:11 +0000
ROA not before: Thu 02 Jul 2026 15:18:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204711
IP address blocks: 95.142.151.0/24 maxlen: 24
2a05:8740::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/331755-9798-4254-8455-4e46791e6d42/1/hI0Or-_oL8OxIQ5EaSsFNFkcpvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/331755-9798-4254-8455-4e46791e6d42/1/hI0Or-_oL8OxIQ5EaSsFNFkcpvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hI0Or-_oL8OxIQ5EaSsFNFkcpvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b4:1b:15:fa:29:38:9a:11:73:75:92:36:56:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=848d0eafefe82fc3b1210e44692b0534591ca6f5
Validity
Not Before: Jul 2 15:18:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d5b731187d5c669c932386082940c156b7e11bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fa:86:4c:dd:30:94:17:c3:ec:a1:e7:c8:ee:
b5:88:d9:78:2f:45:20:5f:38:7a:bf:1e:78:33:c5:
63:1f:9d:06:77:66:9f:95:d3:00:05:d0:82:82:39:
c3:ed:6a:7f:25:ad:e1:c5:3b:fe:9f:82:e3:20:c5:
22:19:cd:ea:b1:e6:29:10:fe:11:c8:27:cf:cf:21:
7a:b7:60:28:ba:56:8c:d3:1b:41:20:68:6d:54:d8:
6c:f8:63:33:02:7e:c8:58:8e:b0:59:58:41:c1:1e:
a7:f5:92:6f:f2:5b:01:a7:69:3f:c3:a6:81:f4:75:
03:97:8b:ce:d6:95:c6:47:01:fd:3d:e1:d8:ea:1a:
66:d8:a6:8f:d9:55:d0:63:6c:66:91:15:74:d0:66:
50:10:c4:e3:f4:e1:56:a5:a0:2b:f1:d7:d6:c5:8d:
a4:36:9a:99:74:0b:aa:1d:d1:b6:0e:8c:81:f3:0e:
ed:98:86:7c:39:e0:76:fd:c2:68:82:c4:65:17:9a:
a5:3c:91:b6:20:04:c0:ae:65:0a:1e:e1:c3:02:8a:
13:bb:e4:30:55:4b:3c:b8:d2:5a:a2:e9:8d:9b:7f:
71:1b:51:2e:37:be:c0:58:27:f8:ce:b2:b5:f9:62:
a0:77:e7:e6:5f:27:e5:15:de:6f:35:1a:03:a0:4f:
7f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B7:31:18:7D:5C:66:9C:93:23:86:08:29:40:C1:56:B7:E1:1B:C3
X509v3 Authority Key Identifier:
keyid:84:8D:0E:AF:EF:E8:2F:C3:B1:21:0E:44:69:2B:05:34:59:1C:A6:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hI0Or-_oL8OxIQ5EaSsFNFkcpvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/331755-9798-4254-8455-4e46791e6d42/1/1bcxGH1cZpyTI4YIKUDBVrfhG8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/331755-9798-4254-8455-4e46791e6d42/1/hI0Or-_oL8OxIQ5EaSsFNFkcpvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.142.151.0/24
IPv6:
2a05:8740::/32
Signature Algorithm: sha256WithRSAEncryption
0b:0b:8d:06:36:83:7c:8b:4b:eb:d4:e5:41:72:3c:ed:9c:9d:
3a:a1:65:aa:8b:06:67:25:59:57:31:6e:a5:30:85:e1:ab:8f:
c8:a9:57:28:92:05:40:30:ff:2f:2d:ad:fe:2a:3a:71:7e:1c:
29:49:5d:ac:fc:25:10:70:4e:a9:26:e5:6f:47:fb:95:ce:e6:
41:0e:63:61:6e:7b:cc:54:bc:97:be:45:9f:f8:84:69:43:ba:
f3:c3:2a:cd:20:08:42:b1:a9:e1:b7:4c:19:7c:af:9c:12:b5:
83:b6:7d:7c:87:52:96:90:ba:36:92:8d:95:fc:13:81:c8:13:
d1:cb:7b:ca:b3:b9:19:85:37:d1:a0:c5:c9:90:26:41:6d:a3:
3b:b4:31:d2:6a:6e:88:c6:9e:f1:ad:3e:4a:1e:0c:cf:6d:5a:
e7:48:69:4f:3f:01:00:68:df:ac:2f:aa:6f:72:96:43:c8:0d:
0a:b7:a9:19:6c:c2:19:02:31:2d:86:60:0b:34:cd:52:1c:39:
34:6c:db:ed:04:4b:99:ed:69:00:31:26:a1:f1:23:c1:f6:01:
71:2c:2f:66:58:19:dc:93:0b:05:31:b9:ba:c2:9c:fc:a1:f5:
69:18:cc:51:df:66:5d:b5:df:8f:0e:01:ce:73:1a:59:4e:74:
19:91:af:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:27:26 2026 by rpki-client