Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/B_cUWMvkDrWwNevq-NhH06J8ywg.roa
File: B_cUWMvkDrWwNevq-NhH06J8ywg.roa (raw, json)
Hash identifier: ki78ojsdQ+VGD7Du9CRQIEWSZOZHzzvnZ4p2T4RU1zU=
Subject key identifier: 07:F7:14:58:CB:E4:0E:B5:B0:35:EB:EA:F8:D8:47:D3:A2:7C:CB:08
Certificate issuer: /CN=c86406264e49cf6f89ca5d2c6af750b36e156564
Certificate serial: 019B7F15BB9F9B3226F4A349A679746905BE
Authority key identifier: C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/B_cUWMvkDrWwNevq-NhH06J8ywg.roa
Signing time: Fri 02 Jan 2026 14:21:29 +0000
ROA not before: Fri 02 Jan 2026 14:21:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20929
IP address blocks: 194.50.174.0/24 maxlen: 24
2001:67c:f4c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:bb:9f:9b:32:26:f4:a3:49:a6:79:74:69:05:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c86406264e49cf6f89ca5d2c6af750b36e156564
Validity
Not Before: Jan 2 14:21:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=07f71458cbe40eb5b035ebeaf8d847d3a27ccb08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6e:67:5e:31:4a:fe:42:2d:cf:bf:99:af:6c:
40:b6:bc:3f:fc:bb:a5:d0:62:d3:d3:d1:76:ed:c4:
f2:58:ee:b4:e7:7f:8d:0b:8c:dd:ec:aa:d9:67:14:
55:9e:15:d5:90:e7:a8:90:e1:34:cd:b6:d3:58:af:
a6:54:c0:c3:9a:3b:69:09:c8:5c:6a:d5:8f:44:4f:
f8:73:ae:4f:7b:a9:5c:2b:21:02:fa:98:84:e3:9d:
92:46:58:6a:0f:ae:24:a6:0f:4f:3e:44:7d:9b:68:
85:bf:b5:22:95:23:c1:34:7e:a7:a8:b5:05:7a:c7:
27:7b:c9:17:7f:25:e5:92:61:4b:eb:f6:36:78:a3:
28:2e:f8:9c:ad:fb:bb:f0:a5:0a:fd:bb:a9:05:82:
47:d3:e5:43:49:4f:6b:00:3f:26:a0:94:cd:27:03:
67:2a:0d:45:30:47:9a:50:75:1b:d8:54:57:55:f0:
a5:5f:0e:5f:ff:6b:ad:0a:b0:e2:64:be:d2:e3:62:
47:7f:63:a7:40:ca:0c:7c:3f:cf:a0:d7:0d:5c:5a:
c3:00:14:f9:5e:60:df:30:75:85:bf:9f:43:12:ef:
d2:bb:f8:2d:eb:68:0d:c0:ec:43:68:77:39:a9:24:
b5:0f:7d:ac:b7:a0:52:b8:72:8c:23:c2:ec:79:c1:
f1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F7:14:58:CB:E4:0E:B5:B0:35:EB:EA:F8:D8:47:D3:A2:7C:CB:08
X509v3 Authority Key Identifier:
keyid:C8:64:06:26:4E:49:CF:6F:89:CA:5D:2C:6A:F7:50:B3:6E:15:65:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yGQGJk5Jz2-Jyl0savdQs24VZWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/B_cUWMvkDrWwNevq-NhH06J8ywg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/874b3b-67de-49ef-8fc1-62dd6ecfe725/1/yGQGJk5Jz2-Jyl0savdQs24VZWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.174.0/24
IPv6:
2001:67c:f4c::/48
Signature Algorithm: sha256WithRSAEncryption
3d:68:64:bc:80:a5:e3:e9:fe:c8:30:55:6d:5b:6c:51:99:ba:
f8:76:60:a5:57:dc:69:c9:fd:86:6c:9d:d5:00:71:aa:fd:38:
59:4f:55:c2:65:d9:95:86:af:83:3f:43:20:04:57:8b:79:4b:
12:2f:ae:b5:c2:5d:55:ea:6a:63:c1:2c:11:c6:7b:a6:99:df:
01:6d:44:81:b4:c7:d1:16:24:f8:5a:a7:24:71:9f:76:a6:d0:
74:86:af:e1:67:a2:12:61:08:fe:b7:9c:8a:5a:a0:0a:e1:62:
0c:9a:70:dc:aa:4f:3b:a2:ee:4f:0e:11:66:13:46:78:ae:db:
21:fc:f7:39:a2:7c:62:64:b7:00:fa:12:a0:5c:6d:d4:21:cc:
6a:66:93:85:f6:3b:98:7c:27:f2:ef:aa:d2:96:f5:82:8a:74:
81:75:5c:44:5f:d1:b2:84:6d:db:7f:31:23:da:d2:36:2c:f8:
73:1d:04:12:e0:d9:12:4f:b2:29:0e:39:b1:34:c2:99:dc:85:
c4:30:18:0f:cb:f1:2c:f5:d4:51:17:fd:5f:53:bc:e5:f0:8d:
bd:7c:70:a8:df:bf:08:87:54:38:6f:37:f5:1a:63:1f:0d:ac:
07:31:7c:7a:63:c6:0b:90:b7:ec:63:20:d1:f4:d4:e6:2a:10:
1f:6f:cf:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:41:01 2026 by rpki-client