Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/b0XSo4jvDuO8MB_EbsL2q8I7iqE.roa
File: b0XSo4jvDuO8MB_EbsL2q8I7iqE.roa (raw, json)
Hash identifier: zA5xuJEEHRh1YzXZne76m8fjU9QyWncSAVrCc1799S0=
Subject key identifier: 6F:45:D2:A3:88:EF:0E:E3:BC:30:1F:C4:6E:C2:F6:AB:C2:3B:8A:A1
Certificate issuer: /CN=43b88ff1edfb67206603026771aaaec84b8b1eb8
Certificate serial: 019B7FF23382131ACCE6190A8417075DB2F1
Authority key identifier: 43:B8:8F:F1:ED:FB:67:20:66:03:02:67:71:AA:AE:C8:4B:8B:1E:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q7iP8e37ZyBmAwJncaquyEuLHrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/b0XSo4jvDuO8MB_EbsL2q8I7iqE.roa
Signing time: Fri 02 Jan 2026 18:22:17 +0000
ROA not before: Fri 02 Jan 2026 18:22:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212031
IP address blocks: 193.163.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q7iP8e37ZyBmAwJncaquyEuLHrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:f2:33:82:13:1a:cc:e6:19:0a:84:17:07:5d:b2:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43b88ff1edfb67206603026771aaaec84b8b1eb8
Validity
Not Before: Jan 2 18:22:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f45d2a388ef0ee3bc301fc46ec2f6abc23b8aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:83:c7:81:2b:1d:2d:6d:22:ec:9b:da:49:77:
92:34:a6:c1:13:46:ac:ec:81:87:7f:27:0c:6f:83:
1b:7c:e3:45:0a:0c:b6:47:cc:36:fc:26:38:d5:0e:
32:de:a2:75:a7:c1:c1:46:50:da:1b:19:27:f8:3a:
c8:f4:e9:d6:b3:19:62:03:bd:8e:f4:c1:92:fe:cb:
f8:d5:c6:f1:fb:c3:7a:c7:e0:6e:1e:57:6d:68:c5:
6b:53:e6:e0:45:c6:3b:df:ab:f7:ca:db:a9:40:f0:
97:08:26:b6:b1:a4:6d:0a:43:cf:84:1e:10:e9:85:
2e:59:00:c8:b4:54:0e:1a:de:9d:be:b0:3e:d9:6c:
91:ea:5b:ef:49:a1:63:d6:bf:7e:42:49:48:d2:d5:
dd:00:80:97:27:b0:8b:b3:b4:93:4e:78:11:5a:d8:
11:5b:77:8d:95:17:ec:35:6c:66:6f:85:38:2e:83:
d7:60:cc:19:7e:00:22:ab:77:38:a6:ad:92:2b:5d:
cc:58:a5:cd:45:18:8a:85:78:fa:a3:2b:4d:f6:c3:
62:fb:34:bb:e3:c0:9b:8a:cd:9e:c9:e2:bc:84:19:
e6:4d:c4:5a:af:56:7d:a6:6d:be:2f:9f:19:79:2a:
78:bf:19:b9:b8:69:05:1d:b6:e5:e0:f1:67:73:74:
d6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:45:D2:A3:88:EF:0E:E3:BC:30:1F:C4:6E:C2:F6:AB:C2:3B:8A:A1
X509v3 Authority Key Identifier:
keyid:43:B8:8F:F1:ED:FB:67:20:66:03:02:67:71:AA:AE:C8:4B:8B:1E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q7iP8e37ZyBmAwJncaquyEuLHrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/b0XSo4jvDuO8MB_EbsL2q8I7iqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e5c783-436e-46e5-b514-c1be5dc01bbe/1/Q7iP8e37ZyBmAwJncaquyEuLHrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.145.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:18:27:d3:14:2e:19:33:59:df:b2:9d:66:1b:27:53:f8:2f:
10:42:ae:7b:c0:78:7e:94:97:e9:b1:1e:ab:40:0f:fc:82:b9:
a8:03:dd:9f:d7:28:38:ed:0e:3a:cc:4e:fd:c5:1e:bc:51:6d:
64:fb:d3:80:71:c6:31:c6:d3:39:33:3c:ec:ea:01:22:a8:7c:
76:b9:51:14:c7:8f:5d:d9:d7:3d:53:1a:0c:27:ee:cc:2e:73:
5a:94:ab:b4:49:7c:c3:77:75:92:4f:63:40:74:14:3a:fd:ec:
e9:2d:f5:7e:6a:1f:c6:91:59:38:eb:af:6f:a2:fe:89:48:98:
44:f5:e2:8e:ad:7b:2e:1a:11:5d:02:55:0f:f7:8e:c2:2e:8e:
99:3b:da:61:04:0d:5c:9d:d4:ec:b0:47:9e:c1:5e:cf:6e:23:
00:b2:69:33:e4:75:3a:cf:7d:48:b3:96:1c:66:00:b2:84:f6:
85:79:7a:b2:75:38:23:1e:73:f4:72:e4:cb:9b:f1:dc:0c:55:
a1:99:7d:45:70:bf:64:9c:d9:48:ec:6a:cb:80:35:1e:fd:36:
30:83:c2:c5:c4:aa:55:9d:fe:6a:a4:74:c7:e3:af:19:48:89:
08:fa:4c:14:ae:b6:15:b4:db:3d:44:15:4c:8f:a8:4d:04:9d:
be:a4:d9:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:55:28 2026 by rpki-client