Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/i4s5l9_wFVaFafOSJYHgsyCNn1A.roa
File: i4s5l9_wFVaFafOSJYHgsyCNn1A.roa (raw, json)
Hash identifier: bF82/1YCZggtDC3lHHda/rosOkpNsVefBaIOjLK+Oc4=
Subject key identifier: 8B:8B:39:97:DF:F0:15:56:85:69:F3:92:25:81:E0:B3:20:8D:9F:50
Certificate issuer: /CN=b52f5a410b1577591a780cdb3eacc26da2dffdf1
Certificate serial: 019D8E7FE7A75E206F55B2BD65006C379E96
Authority key identifier: B5:2F:5A:41:0B:15:77:59:1A:78:0C:DB:3E:AC:C2:6D:A2:DF:FD:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tS9aQQsVd1kaeAzbPqzCbaLf_fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/i4s5l9_wFVaFafOSJYHgsyCNn1A.roa
Signing time: Wed 15 Apr 2026 00:17:20 +0000
ROA not before: Wed 15 Apr 2026 00:17:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 167.254.162.0/24 maxlen: 24
167.254.163.0/24 maxlen: 24
167.254.164.0/24 maxlen: 24
167.254.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tS9aQQsVd1kaeAzbPqzCbaLf_fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8e:7f:e7:a7:5e:20:6f:55:b2:bd:65:00:6c:37:9e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b52f5a410b1577591a780cdb3eacc26da2dffdf1
Validity
Not Before: Apr 15 00:17:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b8b3997dff015568569f3922581e0b3208d9f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6c:94:87:8e:60:f5:03:8c:f0:94:53:bc:23:
55:af:8d:fc:5f:c9:4a:62:9d:41:b2:81:0d:c7:66:
2d:dd:84:21:87:24:c5:27:b7:44:48:07:aa:c2:da:
ba:cd:8e:a5:4c:bc:8f:25:97:04:e3:cc:99:1a:a0:
8a:bd:0c:f5:a3:d5:c5:e0:61:ad:b7:f3:53:54:4c:
0a:19:51:6d:6c:89:33:66:33:0b:d2:06:bd:99:b0:
69:81:d1:2d:e1:9a:3d:7d:c1:6d:af:65:c8:e6:56:
bb:ef:d4:1d:33:69:b6:27:92:07:3f:6b:d7:bc:e7:
33:bd:04:62:4c:e2:15:a3:ac:76:50:d9:04:4e:91:
14:53:bd:2c:58:77:d1:dd:c5:74:78:51:fb:13:d9:
b2:39:3b:45:4e:86:3d:e8:ad:44:b3:03:9b:6f:40:
48:dc:68:10:91:a7:c1:e2:e6:ed:ef:c6:ca:e9:bc:
40:7b:d4:78:7b:09:08:49:97:42:14:ca:03:4f:dd:
b9:72:66:67:fc:f8:39:6e:de:2d:0d:70:d3:6d:dc:
21:b7:86:6d:60:9f:3c:d5:77:1f:c7:f7:d4:38:ef:
83:c6:05:d7:b9:fd:02:b7:ef:a4:a0:0d:fb:2f:e7:
0e:04:6c:f4:d0:9e:71:60:32:29:86:9c:1a:48:74:
e0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8B:39:97:DF:F0:15:56:85:69:F3:92:25:81:E0:B3:20:8D:9F:50
X509v3 Authority Key Identifier:
keyid:B5:2F:5A:41:0B:15:77:59:1A:78:0C:DB:3E:AC:C2:6D:A2:DF:FD:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tS9aQQsVd1kaeAzbPqzCbaLf_fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/i4s5l9_wFVaFafOSJYHgsyCNn1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/bb0482-44b4-4e83-8196-02e6bdcdb3ec/1/tS9aQQsVd1kaeAzbPqzCbaLf_fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.254.162.0-167.254.165.255
Signature Algorithm: sha256WithRSAEncryption
82:15:22:d3:66:e6:6a:90:58:c1:d6:84:cf:28:b8:66:ae:63:
42:fc:71:4f:3d:1a:4d:43:e3:00:8d:45:e6:3d:03:14:84:bc:
af:c5:c2:80:eb:77:b4:bd:93:ec:1c:b3:b1:1c:97:62:89:0b:
ce:6f:94:01:2f:76:0f:6b:ff:d8:7b:b1:2f:5d:76:cc:0f:54:
e0:65:b1:d4:bb:16:44:c7:d4:68:74:16:82:54:a6:be:87:c0:
cd:67:d2:2d:d8:92:27:59:ee:fa:c7:fc:e0:30:1c:32:66:d4:
86:1d:02:fa:cf:74:33:cb:5a:18:10:c7:c9:13:58:30:6e:21:
7c:3a:ce:09:26:4a:3e:e0:bb:4b:56:31:01:4d:b9:81:99:87:
0f:9d:4e:9e:c9:95:0f:ec:24:d0:0b:af:4b:c1:35:2b:8d:9f:
80:d2:8a:46:1a:a0:f6:f7:12:59:91:fa:0d:5e:07:71:f7:70:
72:19:15:fb:bb:72:b0:9d:08:36:f2:16:df:09:46:a7:83:02:
4e:60:14:51:80:a3:7a:36:15:c9:bf:28:ce:67:61:c2:72:2b:
38:ea:3e:29:04:fc:46:bb:98:ea:a0:10:8c:cc:5a:ba:02:5e:
e7:ab:14:78:8e:4c:db:e0:40:f5:50:8d:9f:1f:0d:3d:40:53:
3b:15:a5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:35:17 2026 by rpki-client