Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/o0Ar2DETFlUxLEOkeVUWjGR8WPc.roa
File: o0Ar2DETFlUxLEOkeVUWjGR8WPc.roa (raw, json)
Hash identifier: opuyTRQFWnU43wU694s8uEjDvDG+GMKf+lea5jnxMmc=
Subject key identifier: A3:40:2B:D8:31:13:16:55:31:2C:43:A4:79:55:16:8C:64:7C:58:F7
Certificate issuer: /CN=ba9efca86dea70d3ee90181678c8eb30e6916d1d
Certificate serial: 019B7AC88ED47AAE69489656CA237B2EF3A0
Authority key identifier: BA:9E:FC:A8:6D:EA:70:D3:EE:90:18:16:78:C8:EB:30:E6:91:6D:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up78qG3qcNPukBgWeMjrMOaRbR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/o0Ar2DETFlUxLEOkeVUWjGR8WPc.roa
Signing time: Thu 01 Jan 2026 18:18:42 +0000
ROA not before: Thu 01 Jan 2026 18:18:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56472
IP address blocks: 80.86.48.0/20 maxlen: 24
185.22.36.0/22 maxlen: 24
2a02:29a0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/up78qG3qcNPukBgWeMjrMOaRbR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:c8:8e:d4:7a:ae:69:48:96:56:ca:23:7b:2e:f3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9efca86dea70d3ee90181678c8eb30e6916d1d
Validity
Not Before: Jan 1 18:18:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a3402bd831131655312c43a47955168c647c58f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:16:1b:98:9e:fa:f9:ca:d7:09:91:33:d1:47:
57:4d:4a:74:f2:95:4d:26:3a:4e:83:8c:8d:9f:d8:
a5:44:aa:e0:99:14:10:7e:5d:fd:a7:14:16:53:5d:
82:49:6d:3e:3d:f7:aa:c1:a4:bb:95:9d:a6:c2:92:
a1:e2:94:d9:3f:3c:2c:f3:f3:cc:39:2e:15:4b:a5:
ba:4f:b9:d2:3a:81:f3:3e:56:ac:aa:2d:b7:a2:9a:
b5:e2:a4:29:68:d8:94:c2:94:e5:70:33:f7:f8:42:
57:69:bc:40:7b:86:15:d1:1e:a6:6a:34:df:0f:ba:
8c:ec:b4:31:4d:26:dd:0b:b3:1a:23:35:36:00:81:
28:7d:2f:43:91:11:2c:b4:2f:ff:51:4f:fb:e0:69:
30:59:aa:3d:66:f2:f8:1a:48:41:02:55:62:62:af:
f6:23:2f:fa:b6:f8:4d:55:f7:9c:d7:cb:1a:81:f7:
97:4f:f6:cb:34:1d:c5:18:ca:49:1e:ae:b9:99:e2:
e0:c5:e9:17:57:fa:c5:bc:d9:d0:9b:08:91:ce:57:
44:60:1a:bd:37:78:1f:af:b7:18:ea:b5:f1:db:34:
ff:b7:40:0b:24:da:e4:9d:6b:b3:2b:f5:98:f8:84:
4f:d2:e3:47:37:50:48:ea:2e:64:ec:fc:84:56:f9:
de:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:40:2B:D8:31:13:16:55:31:2C:43:A4:79:55:16:8C:64:7C:58:F7
X509v3 Authority Key Identifier:
keyid:BA:9E:FC:A8:6D:EA:70:D3:EE:90:18:16:78:C8:EB:30:E6:91:6D:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up78qG3qcNPukBgWeMjrMOaRbR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/o0Ar2DETFlUxLEOkeVUWjGR8WPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/75b838-4ece-4998-8ad8-17d31dee8e12/1/up78qG3qcNPukBgWeMjrMOaRbR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.48.0/20
185.22.36.0/22
IPv6:
2a02:29a0::/32
Signature Algorithm: sha256WithRSAEncryption
81:cf:00:dd:6d:18:b0:dd:56:4a:71:00:25:77:69:f0:fb:b0:
4b:3c:ed:37:02:de:23:d4:3e:5c:1c:d3:87:54:df:08:5e:88:
cc:7f:0d:bb:85:9e:bd:be:d4:46:e8:ce:a3:39:aa:ee:0e:96:
fd:86:9f:2a:80:32:a4:81:6e:31:51:4e:c8:fd:69:93:27:cc:
de:c1:9b:2d:d2:a3:6a:88:15:17:50:bd:60:35:94:8c:fb:8e:
3b:a3:44:33:be:15:c1:99:61:bd:0f:e8:7e:2e:60:0d:17:a0:
9b:d5:26:c7:e4:fb:47:04:c1:a9:df:c4:7d:56:f8:83:3b:65:
d2:bf:1e:58:a5:b5:d4:29:49:d5:0f:17:98:2f:98:d7:be:bf:
47:15:11:04:ee:10:0a:2f:a9:5d:b2:df:e3:ac:ea:11:91:58:
47:6b:50:af:82:c4:f7:f0:2f:fa:18:2c:ca:30:59:6c:17:9f:
79:6f:bd:21:53:52:34:a0:42:2e:81:d4:f1:56:1b:ba:08:ab:
b1:1c:00:fa:cb:70:20:bb:29:97:ce:cb:ec:74:89:31:d4:08:
bb:bf:ed:29:15:a6:fc:9b:cb:42:b9:a3:eb:ee:20:26:4e:4b:
d6:4b:24:d0:b1:bf:07:e6:56:41:55:4b:30:6c:ad:f8:00:7c:
e7:2a:e6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:43:31 2026 by rpki-client