Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/psBFyd0hTNhbvZHPVPCTUfi9Q2o.roa
File: psBFyd0hTNhbvZHPVPCTUfi9Q2o.roa (raw, json)
Hash identifier: /FnOfx1SdD/epfrxbTa7bP0djVz2kffTH1AWAe+LQA8=
Subject key identifier: A6:C0:45:C9:DD:21:4C:D8:5B:BD:91:CF:54:F0:93:51:F8:BD:43:6A
Certificate issuer: /CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Certificate serial: 019C6F9133E6FC8FF6C3BEDD5241280291C2
Authority key identifier: 88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/psBFyd0hTNhbvZHPVPCTUfi9Q2o.roa
Signing time: Wed 18 Feb 2026 07:05:12 +0000
ROA not before: Wed 18 Feb 2026 07:05:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50810
IP address blocks: 37.98.64.0/20 maxlen: 22
37.98.104.0/21 maxlen: 22
37.98.112.0/21 maxlen: 24
93.119.208.0/20 maxlen: 24
178.131.0.0/18 maxlen: 24
178.131.64.0/19 maxlen: 22
178.131.96.0/20 maxlen: 22
178.131.112.0/21 maxlen: 22
178.131.128.0/18 maxlen: 24
188.211.0.0/20 maxlen: 24
188.211.15.0/24 maxlen: 24
188.212.240.0/21 maxlen: 24
188.213.192.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6f:91:33:e6:fc:8f:f6:c3:be:dd:52:41:28:02:91:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Validity
Not Before: Feb 18 07:05:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6c045c9dd214cd85bbd91cf54f09351f8bd436a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:89:2c:56:87:25:ab:9d:8e:87:81:25:12:19:
fb:84:95:64:5a:99:92:14:3f:5b:cf:5f:80:8c:a9:
f5:92:4f:b0:d5:9f:a2:30:be:b5:db:53:78:34:be:
37:29:57:f3:af:d0:b7:01:97:55:03:3c:2a:38:77:
8c:f5:2b:16:62:ed:54:22:b9:7f:ad:64:fa:63:c2:
fb:70:0b:4e:4e:97:ae:85:ed:90:b2:47:6d:e1:1a:
a1:28:c9:70:ad:7e:39:78:59:ac:43:19:d4:f9:4e:
44:a8:e0:c3:dd:a8:5b:38:d3:e5:fa:c4:7e:b4:7a:
8d:42:62:7c:74:f4:72:cd:b3:90:b7:50:bf:34:01:
3d:49:00:c7:ce:a6:e5:69:ff:d0:97:7e:5e:3c:73:
58:c9:f5:11:42:1e:01:b9:6e:9c:e8:69:1b:ac:10:
6d:06:64:59:7d:88:94:c7:6d:89:bb:ed:9a:29:64:
a4:e3:c7:55:70:79:86:a3:51:68:0d:aa:ef:76:b0:
3c:e8:f2:38:c6:fe:23:f4:76:fb:d6:54:0c:a6:6d:
ca:58:8a:af:74:ec:97:70:60:1d:28:56:93:d4:fe:
73:06:59:7b:d4:0a:a7:f8:ca:74:a5:ec:64:ae:79:
88:d0:44:9c:01:ed:26:de:16:eb:54:3e:5b:34:e1:
3f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:C0:45:C9:DD:21:4C:D8:5B:BD:91:CF:54:F0:93:51:F8:BD:43:6A
X509v3 Authority Key Identifier:
keyid:88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/psBFyd0hTNhbvZHPVPCTUfi9Q2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.64.0/20
37.98.104.0-37.98.119.255
93.119.208.0/20
178.131.0.0-178.131.119.255
178.131.128.0/18
188.211.0.0/20
188.212.240.0/21
188.213.192.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:30:2e:94:ea:4b:c5:bd:b0:8a:c3:51:d2:3d:f6:56:4c:b4:
39:9a:df:c3:c7:58:c5:2a:80:a6:bb:18:9b:f6:f6:ba:02:da:
25:6f:ca:33:31:68:33:78:f9:48:5a:0c:a4:42:62:84:ae:18:
59:5e:87:24:e6:47:3b:70:f7:12:be:eb:83:39:b0:3f:92:ed:
6d:f4:df:02:d4:3d:c3:2d:9b:d3:33:ce:7d:ae:bb:6d:3e:20:
81:3b:6e:eb:23:70:07:16:85:5c:25:32:9a:6c:1e:df:7a:42:
6e:47:6f:94:55:31:ce:27:51:6a:d2:52:6c:a0:bb:95:06:40:
f1:c1:96:ee:d2:0b:58:87:41:e3:a3:b3:82:8c:00:45:3a:c8:
93:0c:ab:27:74:e8:c5:2f:67:a9:c4:2c:a5:54:cd:33:5a:34:
6e:44:98:8a:cd:c1:de:5f:ac:51:ea:d0:4b:03:a7:49:72:a2:
d6:0b:47:f3:b3:b6:12:73:13:71:8b:4d:fb:fb:85:d2:bc:90:
fa:1a:2d:fc:fe:31:04:1a:fe:41:05:95:5b:5d:69:7b:25:54:
49:5d:91:9e:ce:f4:6c:eb:fe:6c:aa:55:67:e0:af:d6:fa:9e:
67:6b:89:06:b9:f8:af:96:c4:ce:f2:74:de:c2:83:59:80:ee:
2c:0e:a0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:03:34 2026 by rpki-client