Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/hBRiKUaX3TWSuigxiLnVvj7qdWA.roa
File: hBRiKUaX3TWSuigxiLnVvj7qdWA.roa (raw, json)
Hash identifier: MQ2pAZI4cg71/6s0JkQFt+B8fRf89LAS7mPFgvkRr0k=
Subject key identifier: 84:14:62:29:46:97:DD:35:92:BA:28:31:88:B9:D5:BE:3E:EA:75:60
Certificate issuer: /CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Certificate serial: 019D53F12529B391F05A0F61A983744CB83A
Authority key identifier: FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/hBRiKUaX3TWSuigxiLnVvj7qdWA.roa
Signing time: Fri 03 Apr 2026 15:23:25 +0000
ROA not before: Fri 03 Apr 2026 15:23:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49981
IP address blocks: 188.208.196.0/24 maxlen: 24
2a06:f940::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:53:f1:25:29:b3:91:f0:5a:0f:61:a9:83:74:4c:b8:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Validity
Not Before: Apr 3 15:23:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=841462294697dd3592ba283188b9d5be3eea7560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:64:61:7e:d5:49:c0:de:bf:60:91:7d:3f:b1:
a6:2c:f4:ab:af:84:89:ba:d6:ca:d2:54:d7:2b:67:
8b:82:d5:68:48:2f:0b:65:44:d3:e6:90:03:70:36:
51:ed:d7:6f:56:a9:b4:93:e8:dc:b8:bb:c0:3e:6a:
f6:9b:b3:db:b1:6a:9d:21:d3:d6:47:19:70:b0:4b:
18:70:e8:0f:a2:ca:ad:5b:3f:f5:4d:57:9b:70:c5:
db:3d:e0:c5:4a:0f:25:a2:79:bb:89:c5:df:52:58:
01:e6:44:c8:02:e6:1a:a5:62:00:3f:40:4a:ef:ab:
02:e2:e8:4a:7a:50:40:2e:c4:e9:6e:33:3d:c6:82:
26:d2:8f:1b:9f:13:26:a5:8c:23:ab:25:3b:49:2c:
e4:5a:97:6d:2d:5d:b6:53:1b:9f:48:32:af:87:4c:
36:e9:4b:4e:07:28:8d:d2:bc:a2:3b:af:50:1a:54:
30:d9:b5:24:63:eb:d8:84:d7:4e:60:7f:eb:0d:e4:
08:ba:4f:9b:ac:2c:40:04:cd:ac:26:7b:2e:bd:9c:
1f:57:73:b6:ae:0f:a4:75:0a:99:69:15:04:ea:e3:
d7:d9:d3:b7:b4:8e:bf:b1:75:1f:6f:53:a3:81:49:
1c:08:4d:27:df:c5:b5:46:e3:65:41:b8:c1:50:86:
36:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:14:62:29:46:97:DD:35:92:BA:28:31:88:B9:D5:BE:3E:EA:75:60
X509v3 Authority Key Identifier:
keyid:FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/hBRiKUaX3TWSuigxiLnVvj7qdWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.208.196.0/24
IPv6:
2a06:f940::/48
Signature Algorithm: sha256WithRSAEncryption
1e:54:d9:b8:04:cf:93:f7:37:14:0a:cd:c4:ab:09:54:58:dc:
0c:a4:f5:64:85:61:fe:f2:6a:0a:4b:8a:95:d1:00:84:4e:12:
05:0a:69:6d:01:f3:0d:5c:a1:a1:c3:3b:b6:73:b6:b2:fa:1e:
3a:e4:1a:ab:29:2c:93:eb:e9:86:76:c8:76:61:db:04:5c:d4:
ba:d1:7a:9f:fd:71:c0:83:cc:de:a8:e9:f0:8b:b6:0f:4e:97:
8b:69:ed:b9:d9:80:89:d2:f5:80:b0:30:0b:2c:72:c8:04:12:
84:16:9d:ba:8d:bd:a5:55:b4:76:a7:95:8b:2f:8c:cd:8e:05:
4f:41:e5:52:34:05:54:c2:8f:a8:49:b3:ba:94:e1:df:ca:8a:
11:bd:e5:69:87:af:ec:03:c3:73:42:74:a1:98:3b:11:6d:a9:
dc:fb:8c:33:d1:10:e4:49:e5:e5:6a:93:6c:41:c3:7c:e5:18:
cc:0e:f7:cf:50:00:c7:af:c4:2d:e8:0a:eb:10:8f:53:1d:76:
a8:57:8f:f6:3d:48:bd:6a:91:c7:66:cb:fd:0a:c3:3d:7b:ad:
26:67:4e:96:5f:8e:d2:a6:de:f6:97:bf:38:c7:6c:1c:f6:64:
24:e5:45:87:7c:53:46:95:5f:ac:98:b9:7d:fc:50:02:ae:34:
d2:8d:78:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:52:40 2026 by rpki-client