Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/380_fONoo0vKuEzHZKFuqEUscU4.roa
File: 380_fONoo0vKuEzHZKFuqEUscU4.roa (raw, json)
Hash identifier: KA3zr/tNX5l+b8Lbxtnhhgvm4RebrcqoWUwyDtx/yGk=
Subject key identifier: DF:CD:3F:7C:E3:68:A3:4B:CA:B8:4C:C7:64:A1:6E:A8:45:2C:71:4E
Certificate issuer: /CN=bfeaab1ba68e87c9f7ab0d9050bff9f20a6267da
Certificate serial: 019B7BA37E0BADF7C767911F5BD64BD61AFD
Authority key identifier: BF:EA:AB:1B:A6:8E:87:C9:F7:AB:0D:90:50:BF:F9:F2:0A:62:67:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-qrG6aOh8n3qw2QUL_58gpiZ9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/380_fONoo0vKuEzHZKFuqEUscU4.roa
Signing time: Thu 01 Jan 2026 22:17:50 +0000
ROA not before: Thu 01 Jan 2026 22:17:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206310
IP address blocks: 185.187.216.0/22 maxlen: 22
185.209.184.0/22 maxlen: 22
2a0b:af80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-qrG6aOh8n3qw2QUL_58gpiZ9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:a3:7e:0b:ad:f7:c7:67:91:1f:5b:d6:4b:d6:1a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfeaab1ba68e87c9f7ab0d9050bff9f20a6267da
Validity
Not Before: Jan 1 22:17:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dfcd3f7ce368a34bcab84cc764a16ea8452c714e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d3:d0:d0:c6:a6:02:4a:ec:3e:98:89:8d:8f:
fb:73:f3:f9:01:8c:85:e8:b8:3c:cf:58:e4:73:49:
0b:19:e2:88:3b:43:7e:67:3b:eb:e6:90:30:f2:3d:
6b:2c:e6:83:5b:48:92:3a:f9:31:6a:d9:59:b2:d6:
69:28:5a:f2:c4:d3:2d:54:ad:f6:7f:57:94:b3:af:
c7:48:25:a7:bf:a4:13:ec:65:2b:bc:0f:68:7c:e0:
34:c6:fe:31:b1:ab:f0:bc:06:e0:2c:e7:50:74:ec:
94:14:61:1e:69:f6:81:20:b7:32:79:4e:f0:c8:f6:
46:21:ef:68:eb:87:a7:b9:44:73:c8:8e:fb:1e:96:
6b:93:84:9e:17:78:5c:0a:dd:2a:81:94:87:bb:08:
ab:d6:69:0b:eb:14:c2:d7:23:33:a6:98:f4:9f:ed:
a3:b2:41:0c:d1:ff:dc:d5:a9:05:c2:e4:34:70:38:
09:0a:aa:f4:5f:db:4c:5d:95:d8:f8:f4:09:32:84:
a1:13:12:7e:a3:16:a7:1b:2a:b1:a2:8f:dc:04:b1:
1d:a2:30:5b:fd:ab:05:a5:d5:f6:3e:ec:f7:b9:41:
ff:31:a5:50:6c:8d:1d:8d:f1:70:df:77:b7:1d:ee:
b7:b6:04:9e:f5:5f:de:66:5f:31:3f:02:4d:a3:23:
11:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:CD:3F:7C:E3:68:A3:4B:CA:B8:4C:C7:64:A1:6E:A8:45:2C:71:4E
X509v3 Authority Key Identifier:
keyid:BF:EA:AB:1B:A6:8E:87:C9:F7:AB:0D:90:50:BF:F9:F2:0A:62:67:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-qrG6aOh8n3qw2QUL_58gpiZ9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/380_fONoo0vKuEzHZKFuqEUscU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/137786-466c-4b58-a7af-f33741295101/1/v-qrG6aOh8n3qw2QUL_58gpiZ9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.216.0/22
185.209.184.0/22
IPv6:
2a0b:af80::/29
Signature Algorithm: sha256WithRSAEncryption
85:4f:e5:ce:c0:4c:16:91:3c:19:25:b3:34:76:ad:cd:c6:f8:
e2:9a:33:37:fd:b3:02:59:b7:2f:69:80:aa:a0:25:da:1b:42:
d1:3b:bf:b7:4d:c8:16:84:0f:96:61:33:43:59:2d:04:d4:51:
6d:4e:79:e0:0b:02:e7:07:76:88:29:7b:db:8d:bf:5d:ab:3c:
ef:aa:98:2f:85:83:5e:09:6e:1e:42:a6:12:98:59:33:2e:5a:
2b:18:55:3f:56:01:90:86:54:54:7b:2c:c3:4a:62:df:0a:81:
f8:21:9f:01:54:88:16:9c:d8:a1:99:25:04:6f:be:0c:c5:84:
25:19:17:33:ca:03:e9:a9:82:6c:79:65:76:14:06:8a:05:13:
db:af:98:fc:5a:3e:2f:ea:ee:bd:de:e9:d4:b9:f3:7b:09:aa:
2c:3a:60:dc:23:f5:c1:c7:69:82:22:31:ab:01:20:7a:f3:81:
21:48:9a:1b:a4:39:14:72:f4:15:8f:dd:d0:49:2d:65:3a:33:
5d:55:8a:fb:df:85:bb:fe:58:0a:49:31:15:58:63:a2:84:07:
b4:4a:05:db:b7:57:cb:70:e4:49:b7:4c:c9:29:4a:02:a7:0a:
94:da:92:97:03:0b:c7:29:8f:81:86:36:85:23:cc:fe:99:14:
bb:12:13:29
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZt7o34LrffHZ5EfW9ZL1hr9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZWFhYjFiYTY4ZTg3YzlmN2FiMGQ5MDUwYmZmOWYyMGE2
MjY3ZGEwHhcNMjYwMTAxMjIxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZmNkM2Y3Y2UzNjhhMzRiY2FiODRjYzc2NGExNmVhODQ1MmM3MTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3NPQ0MamAkrsPpiJjY/7c/P5AYyF
6Lg8z1jkc0kLGeKIO0N+Zzvr5pAw8j1rLOaDW0iSOvkxatlZstZpKFryxNMtVK32
f1eUs6/HSCWnv6QT7GUrvA9ofOA0xv4xsavwvAbgLOdQdOyUFGEeafaBILcyeU7w
yPZGIe9o64enuURzyI77HpZrk4SeF3hcCt0qgZSHuwir1mkL6xTC1yMzppj0n+2j
skEM0f/c1akFwuQ0cDgJCqr0X9tMXZXY+PQJMoShExJ+oxanGyqxoo/cBLEdojBb
/asFpdX2Puz3uUH/MaVQbI0djfFw33e3He63tgSe9V/eZl8xPwJNoyMRjwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFN/NP3zjaKNLyrhMx2ShbqhFLHFOMB8GA1UdIwQY
MBaAFL/qqxumjofJ96sNkFC/+fIKYmfaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdi1xckc2YU9oOG4zcXcyUVVMXzU4Z3BpWjlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8xMzc3ODYtNDY2Yy00YjU4LWE3YWYt
ZjMzNzQxMjk1MTAxLzEvMzgwX2ZPTm9vMHZLdUV6SFpLRnVxRVVzY1U0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8xMzc3ODYtNDY2Yy00YjU4LWE3YWYtZjMzNzQxMjk1MTAx
LzEvdi1xckc2YU9oOG4zcXcyUVVMXzU4Z3BpWjlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCubvYAwQC
udG4MA0EAgACMAcDBQMqC6+AMA0GCSqGSIb3DQEBCwUAA4IBAQCFT+XOwEwWkTwZ
JbM0dq3NxvjimjM3/bMCWbcvaYCqoCXaG0LRO7+3TcgWhA+WYTNDWS0E1FFtTnng
CwLnB3aIKXvbjb9dqzzvqpgvhYNeCW4eQqYSmFkzLlorGFU/VgGQhlRUeyzDSmLf
CoH4IZ8BVIgWnNihmSUEb74MxYQlGRczygPpqYJseWV2FAaKBRPbr5j8Wj4v6u69
3unUufN7CaosOmDcI/XBx2mCIjGrASB684EhSJobpDkUcvQVj93QSS1lOjNdVYr7
34W7/lgKSTEVWGOihAe0SgXbt1fLcORJt0zJKUoCpwqU2pKXAwvHKY+BhjaFI8z+
mRS7EhMp
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:38:08 2026 by rpki-client