Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/brFnh3rq3SaqASoxymZGHF7hvHQ.roa
File: brFnh3rq3SaqASoxymZGHF7hvHQ.roa (raw, json)
Hash identifier: lmozdC2cR8kjC76avAg5K/NKcOEBFp0Tuc3TVnelJ0g=
Subject key identifier: 6E:B1:67:87:7A:EA:DD:26:AA:01:2A:31:CA:66:46:1C:5E:E1:BC:74
Certificate issuer: /CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Certificate serial: 019B7F157FFE5AA198F8347F1D6045852187
Authority key identifier: 50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/brFnh3rq3SaqASoxymZGHF7hvHQ.roa
Signing time: Fri 02 Jan 2026 14:21:13 +0000
ROA not before: Fri 02 Jan 2026 14:21:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200404
IP address blocks: 194.37.92.0/24 maxlen: 24
194.37.93.0/24 maxlen: 24
194.37.94.0/24 maxlen: 24
194.37.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:7f:fe:5a:a1:98:f8:34:7f:1d:60:45:85:21:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Validity
Not Before: Jan 2 14:21:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6eb167877aeadd26aa012a31ca66461c5ee1bc74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3c:a7:72:13:b3:cb:63:9a:07:ef:25:c4:9c:
09:63:13:88:19:ab:6d:e1:29:d2:36:f1:35:e4:87:
b4:38:86:6b:7a:9a:7e:f6:98:bb:e1:53:11:f5:96:
52:95:55:b1:71:b1:83:4b:d7:64:f5:14:04:c5:f7:
4b:7a:9b:6b:86:13:27:e3:55:53:53:3a:18:38:54:
96:e3:18:24:52:2a:ac:bb:05:c5:45:30:71:a0:07:
83:a3:eb:5b:1c:7d:a7:11:08:39:12:76:c2:a2:8f:
62:3e:09:fd:ba:ed:bf:63:16:32:e4:25:6a:bb:4e:
7e:0a:1a:9f:f4:85:2e:fb:96:bd:f2:d5:81:49:8e:
27:49:ae:e5:02:99:1f:48:74:dc:bd:8f:1c:d9:03:
1d:f9:20:c6:55:eb:47:33:0e:86:8c:57:5b:14:e2:
d3:64:ff:be:57:a6:13:08:bf:11:46:29:70:d5:f9:
57:ce:dc:3b:0d:ae:f9:c2:ae:7b:65:71:1d:4b:a2:
28:fd:9a:92:2a:c0:96:88:bb:fb:a3:68:b1:62:d6:
e8:80:60:ea:8f:04:95:8d:00:b3:0e:d4:44:77:cf:
e3:1f:e2:30:11:29:b8:2f:34:3e:26:ab:69:e2:fd:
d0:27:de:b1:4b:0e:9b:9b:ea:1c:0c:35:10:67:88:
56:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B1:67:87:7A:EA:DD:26:AA:01:2A:31:CA:66:46:1C:5E:E1:BC:74
X509v3 Authority Key Identifier:
keyid:50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/brFnh3rq3SaqASoxymZGHF7hvHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.37.92.0/22
Signature Algorithm: sha256WithRSAEncryption
67:48:43:22:30:77:24:3b:5f:6b:72:2b:99:85:63:6c:a2:81:
55:e3:4c:99:b3:c6:0f:de:1d:b1:64:0c:ac:db:4f:3e:d1:3b:
e2:b2:64:4a:37:87:10:83:3b:9f:b8:b7:c6:5d:a1:59:08:92:
6e:24:f7:bc:e8:52:a4:c0:06:04:63:8c:85:21:ea:69:08:b1:
98:e0:bb:93:d2:34:d1:37:e2:a3:2e:4e:3f:d4:d1:6b:f9:98:
03:3a:b4:16:b8:d7:c4:0a:f5:b8:b6:81:ec:30:5a:f2:56:d8:
ae:89:2f:14:5c:fe:73:64:68:96:09:fe:7e:db:4b:39:f9:e0:
92:55:25:69:c3:d3:7f:8d:d5:f6:c5:ba:e8:76:19:2a:28:ec:
e9:d1:44:a4:30:9b:ae:68:ba:59:fa:eb:bf:50:e5:fb:1b:1b:
2f:b2:11:3c:1b:8e:0b:34:00:07:b8:63:d8:17:2a:48:31:e2:
72:35:2b:1a:cb:9c:35:d3:5d:b2:ff:a9:da:d7:da:24:e5:8c:
c7:65:a5:9d:50:00:42:1e:b4:45:6f:69:4b:23:b5:2e:0c:51:
12:a8:19:1a:38:3d:09:ac:e1:cf:8d:8d:31:90:b3:af:81:00:
6c:0e:e0:d5:ca:07:64:c4:24:20:91:c5:98:e0:36:35:29:35:
63:1a:bc:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:42:21 2026 by rpki-client