Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/tNeeAWKkIVOIuAD4PHWLL3N_kKk.roa
File: tNeeAWKkIVOIuAD4PHWLL3N_kKk.roa (raw, json)
Hash identifier: Bf6c0BIpdRCo1yEs4r44JJ+ve3ioKxcHtL7Ll7CrmLk=
Subject key identifier: B4:D7:9E:01:62:A4:21:53:88:B8:00:F8:3C:75:8B:2F:73:7F:90:A9
Certificate issuer: /CN=17cf12a6589e998c9bec139af8fce70ac475ad72
Certificate serial: 019B7A5ACB623B6AB0E92B7E6EE0CFAB4192
Authority key identifier: 17:CF:12:A6:58:9E:99:8C:9B:EC:13:9A:F8:FC:E7:0A:C4:75:AD:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/tNeeAWKkIVOIuAD4PHWLL3N_kKk.roa
Signing time: Thu 01 Jan 2026 16:18:49 +0000
ROA not before: Thu 01 Jan 2026 16:18:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44176
IP address blocks: 45.81.188.0/22 maxlen: 24
45.118.184.0/22 maxlen: 24
216.205.160.0/19 maxlen: 24
2a0e:5e80::/29 maxlen: 32
2a0e:5e80::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:cb:62:3b:6a:b0:e9:2b:7e:6e:e0:cf:ab:41:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17cf12a6589e998c9bec139af8fce70ac475ad72
Validity
Not Before: Jan 1 16:18:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4d79e0162a4215388b800f83c758b2f737f90a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ad:08:65:93:de:46:aa:d0:63:e4:76:4a:89:
83:67:b2:b2:ff:e0:7a:59:38:89:bb:06:63:41:5a:
42:e4:01:1e:4c:09:53:41:a9:7a:47:19:09:c4:a9:
84:61:7d:3b:00:ad:15:e9:ee:10:01:53:e0:24:c5:
51:da:b0:dc:0b:e8:a2:7c:aa:69:e8:f7:29:79:c2:
ae:4e:ba:f3:85:21:7d:5a:01:dc:cc:8e:fe:58:56:
95:2c:54:aa:59:6a:70:60:d2:b4:95:e3:af:8a:e9:
af:0b:f5:a1:e6:ca:6a:96:3b:2c:6e:fa:00:0d:d9:
13:61:b9:6b:66:df:f4:fe:d0:06:ee:bb:75:c3:2f:
09:c4:92:44:13:43:ae:5f:e3:97:a0:26:5f:4d:ec:
5f:ed:22:9e:d1:c3:c0:ed:3c:ce:41:8c:63:d9:ed:
7c:11:6c:fb:f0:90:00:b4:ed:ba:29:a4:69:b9:2e:
c0:f1:13:c8:58:fd:9c:74:11:f2:a9:6c:5a:3c:d3:
7c:ea:4f:72:79:5f:71:26:28:98:ab:40:2b:a9:37:
bf:a1:df:ee:81:47:a5:ca:2d:7b:9a:a4:84:47:bd:
7d:da:f0:03:6a:85:8c:40:96:54:de:de:c3:66:df:
5b:b8:e0:df:3b:fa:a6:3e:85:eb:6e:1e:1b:52:dc:
99:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:D7:9E:01:62:A4:21:53:88:B8:00:F8:3C:75:8B:2F:73:7F:90:A9
X509v3 Authority Key Identifier:
keyid:17:CF:12:A6:58:9E:99:8C:9B:EC:13:9A:F8:FC:E7:0A:C4:75:AD:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/tNeeAWKkIVOIuAD4PHWLL3N_kKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.188.0/22
45.118.184.0/22
216.205.160.0/19
IPv6:
2a0e:5e80::/29
Signature Algorithm: sha256WithRSAEncryption
8c:ea:3f:9e:da:4c:2c:e1:a7:67:4b:59:11:7d:99:a5:e6:2a:
3a:20:56:77:50:c5:d1:61:3c:1d:5d:c3:7d:49:23:02:ce:6e:
1c:66:d4:cd:25:8a:e7:1b:54:cb:82:44:96:79:ce:bf:84:8f:
30:c5:1d:ab:a7:c2:cf:d4:9e:43:1c:65:5c:11:f1:98:db:dc:
78:ae:79:54:2d:57:76:82:33:43:4c:33:98:0f:6a:d3:54:b8:
85:9f:3c:e7:2e:c2:5a:16:dd:ef:77:60:a3:cc:2c:fd:6d:7b:
38:f2:82:34:a7:31:58:59:ae:64:aa:da:60:25:15:c9:dd:47:
3d:cb:7b:f3:77:37:44:52:5d:ca:77:88:66:b7:15:4d:6a:cb:
b5:fd:d0:15:b8:d9:94:bb:19:d3:d8:68:81:a4:df:3a:76:7d:
81:4b:ca:3f:53:6d:57:8d:eb:55:9c:24:80:cc:50:54:00:44:
a6:d9:05:22:cb:23:01:37:c5:0f:49:be:ba:89:a4:86:92:c3:
74:da:95:9c:18:55:7d:a6:0f:2d:21:d1:a0:e0:5a:63:96:7a:
cb:65:2d:43:ab:03:bd:a5:fe:06:e0:c1:43:bc:e3:5c:33:2d:
ef:12:57:48:89:cd:fd:e1:a9:41:83:7f:50:cb:f8:4a:d0:dd:
63:47:24:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:57:11 2026 by rpki-client