Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/tbucbqP1ON0AOT54NnMK125HVLo.roa
File: tbucbqP1ON0AOT54NnMK125HVLo.roa (raw, json)
Hash identifier: T5js+Dm9JN94kxX5BD3OuDSKks0Ds8jgH26r+p+ijvU=
Subject key identifier: B5:BB:9C:6E:A3:F5:38:DD:00:39:3E:78:36:73:0A:D7:6E:47:54:BA
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019C0B4A169CA7F9404E4AA9937692E28627
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/tbucbqP1ON0AOT54NnMK125HVLo.roa
Signing time: Thu 29 Jan 2026 19:45:30 +0000
ROA not before: Thu 29 Jan 2026 19:45:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19318
IP address blocks: 185.241.211.0/24 maxlen: 24
192.159.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:0b:4a:16:9c:a7:f9:40:4e:4a:a9:93:76:92:e2:86:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 29 19:45:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5bb9c6ea3f538dd00393e7836730ad76e4754ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:42:2a:1c:3d:63:72:c9:0b:78:2b:dd:b6:72:
f8:b3:79:d0:aa:75:de:8f:ad:f7:ff:c1:f6:5a:30:
52:d0:d2:23:bb:c5:ea:94:fd:d1:25:a1:b9:5c:6a:
0a:8e:0f:91:7a:42:5d:3f:19:20:ca:dd:7e:8e:74:
eb:25:db:f3:4d:e7:10:93:41:a4:5d:57:b4:8d:55:
4e:e0:f8:a9:9f:4d:6d:37:af:86:c6:95:b8:dd:d8:
69:e4:1e:40:30:e1:9d:9f:ad:1a:de:59:d2:ae:a9:
05:fb:f5:ae:d0:88:f2:df:36:ac:cd:1a:ed:4a:fe:
08:aa:e0:c1:70:c7:c2:c1:1d:23:a1:58:60:4c:92:
60:95:ce:38:fb:dd:c5:03:61:38:cc:ae:45:73:19:
5e:d6:29:9f:c2:5e:0d:f3:3f:eb:c4:3f:51:b2:1f:
d5:f2:1a:dc:bf:b0:28:e6:b3:af:a2:83:90:e0:e2:
1f:1e:84:78:43:f4:8f:6d:a9:d0:1b:0d:dd:99:ec:
86:c8:26:bb:b8:03:3d:b9:fb:3e:2b:49:e3:c2:bd:
6d:b4:f0:dd:21:76:cf:50:b1:6f:df:2a:54:8a:a3:
69:60:2a:50:c8:c6:41:18:53:fe:46:dd:4b:e6:a2:
6f:77:5d:05:ba:07:fe:df:22:3f:16:0e:12:26:a2:
3e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:BB:9C:6E:A3:F5:38:DD:00:39:3E:78:36:73:0A:D7:6E:47:54:BA
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/tbucbqP1ON0AOT54NnMK125HVLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.241.211.0/24
192.159.99.0/24
Signature Algorithm: sha256WithRSAEncryption
06:8d:f2:53:7d:e4:54:89:92:82:34:61:da:1f:a6:b2:23:38:
85:4a:d4:a4:41:87:91:bd:74:20:ce:eb:99:66:32:5b:16:a7:
90:b5:8a:cb:09:19:cd:88:b6:9a:93:53:94:a6:df:af:30:54:
90:98:1d:03:9c:9a:3e:df:6f:7b:ca:aa:a7:2d:99:03:7a:c5:
ea:fa:d2:20:42:5b:ef:c9:11:26:3f:f5:0a:7f:70:67:6c:f8:
22:e7:d9:7d:19:bd:e7:c8:56:b0:05:a7:31:cf:7c:bf:3e:c6:
af:19:2c:c2:97:11:2b:f7:2d:66:5e:b0:89:e2:e3:74:a8:fd:
52:21:c2:7e:93:4e:7b:42:fd:7b:b2:b9:5e:5c:6e:fc:c7:49:
0a:44:9b:22:fa:00:b0:2c:33:4d:00:99:4e:b1:4d:c0:b9:2a:
79:31:6e:34:9b:06:10:9f:6b:ec:03:a2:0b:9c:70:7a:1a:d0:
b4:ed:fe:52:08:f4:19:7c:15:b2:84:a2:bb:aa:2c:0f:46:1b:
f3:00:19:0f:d9:b4:6b:f7:8a:e3:ea:1d:e1:34:39:53:9c:bf:
d6:3b:a5:54:61:a5:e4:e6:67:7f:09:2b:69:df:77:d3:ac:eb:
51:19:23:85:6f:1c:47:91:ad:3e:f1:91:ac:cd:d5:ff:2c:97:
94:16:94:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:32:15 2026 by rpki-client