Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/9btJARByxb1iHyonPUVBkRTOsVo.roa
File: 9btJARByxb1iHyonPUVBkRTOsVo.roa (raw, json)
Hash identifier: OoaKNkwSuE9swZGc5WUnPf4K5AgnLBPyAFCvevkhF9U=
Subject key identifier: F5:BB:49:01:10:72:C5:BD:62:1F:2A:27:3D:45:41:91:14:CE:B1:5A
Certificate issuer: /CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228
Certificate serial: 019C28449B522BA6669E27D4A7B8593A0A93
Authority key identifier: 2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/9btJARByxb1iHyonPUVBkRTOsVo.roa
Signing time: Wed 04 Feb 2026 10:48:30 +0000
ROA not before: Wed 04 Feb 2026 10:48:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60501
IP address blocks: 45.129.160.0/22 maxlen: 22
81.16.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:28:44:9b:52:2b:a6:66:9e:27:d4:a7:b8:59:3a:0a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228
Validity
Not Before: Feb 4 10:48:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5bb49011072c5bd621f2a273d45419114ceb15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4a:00:6b:ae:b5:54:46:56:37:b8:b2:18:87:
ef:88:74:9e:ed:95:f1:5c:ac:e6:b6:ab:0a:1f:de:
78:f0:c5:c7:18:8c:47:f8:ba:3e:f0:59:ea:77:27:
e6:8a:8b:31:78:c9:86:06:d4:b4:25:0e:c5:f7:d2:
b7:cd:a5:b6:3b:94:61:f3:de:fe:f7:e9:c3:fc:35:
23:28:ad:df:5b:c4:0c:0c:15:05:0b:65:26:f5:58:
54:b5:28:32:6c:3c:24:8a:16:1b:6e:1a:6b:2a:77:
5d:78:44:d2:9f:81:3e:d0:c6:b0:dc:cf:ee:ac:fb:
98:d9:2d:cb:43:89:00:f9:de:7f:1b:9b:f3:6b:7d:
e9:66:4a:e4:c2:72:2c:e9:39:bb:e8:00:f1:97:d2:
36:7c:46:eb:1b:42:b8:f1:59:2e:5b:b8:d6:75:41:
97:0d:d9:37:af:ad:74:82:70:8f:5d:82:a9:3d:0e:
4e:67:d6:c2:0c:e6:86:ac:62:4e:53:43:b7:a8:6c:
f8:62:94:d6:29:64:da:e1:3c:b7:e9:65:06:24:b6:
b9:72:c8:08:db:5b:0b:ff:9c:e7:97:c1:39:9e:2b:
5a:4c:b1:74:32:61:e3:1b:3c:ba:2d:d4:32:65:8e:
e3:c8:1e:d0:87:46:d4:50:ff:cf:94:c6:c0:f8:d7:
6f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BB:49:01:10:72:C5:BD:62:1F:2A:27:3D:45:41:91:14:CE:B1:5A
X509v3 Authority Key Identifier:
keyid:2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/9btJARByxb1iHyonPUVBkRTOsVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.160.0/22
81.16.220.0/22
Signature Algorithm: sha256WithRSAEncryption
30:16:75:48:cf:7c:9e:fa:8f:af:ba:d5:20:d9:5a:4f:d4:bb:
db:e5:6b:6a:cb:b3:a9:96:42:34:be:50:12:ed:61:53:d2:f2:
6d:cf:6a:29:ae:40:76:90:92:9e:21:0c:6c:53:ba:08:b9:3e:
ab:61:fa:c7:df:22:3e:d4:f8:61:5b:af:5d:e7:4d:ad:d7:a7:
e2:d2:cb:ec:bc:c9:d8:0f:79:c3:c0:0b:c0:9a:33:b4:c9:f9:
a0:7c:a6:4a:77:28:c2:1c:3c:62:25:82:8e:cc:8f:23:8e:98:
38:2f:da:95:0d:4a:be:a8:f9:4a:54:5c:94:7d:cc:f2:05:89:
ce:4a:78:73:83:d8:4b:af:73:39:74:3c:58:42:6e:b2:ba:a3:
6a:29:a1:2d:e0:6a:bb:72:fd:59:f8:f5:76:cf:71:6e:2c:34:
45:7d:0f:fb:4e:4d:74:05:fa:ab:f7:7b:44:fa:63:1b:18:03:
cc:8d:8e:57:c2:4b:ac:85:d3:8f:90:b9:45:f1:17:a9:12:1f:
ee:89:05:76:50:a4:da:41:ad:ca:9e:cc:6d:9c:ad:fc:2b:e6:
c2:75:3e:8f:e1:98:b5:c9:0a:3a:72:06:d5:f2:29:1a:24:f6:
78:da:e5:dd:ca:9e:e3:c9:39:7f:c8:3a:46:47:14:bf:7f:c8:
45:41:6a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:26:23 2026 by rpki-client