Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/RbC01VwFxiZgBTALS-uMjRZzAhY.roa
File: RbC01VwFxiZgBTALS-uMjRZzAhY.roa (raw, json)
Hash identifier: q9hSu3/IMM4HWr9vjCMGx9EywT+vVqNbYQnoN0MBA20=
Subject key identifier: 45:B0:B4:D5:5C:05:C6:26:60:05:30:0B:4B:EB:8C:8D:16:73:02:16
Certificate issuer: /CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9
Certificate serial: 019C4C65007D63B7E3A27A2118D48F7C30D5
Authority key identifier: 3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/RbC01VwFxiZgBTALS-uMjRZzAhY.roa
Signing time: Wed 11 Feb 2026 11:10:13 +0000
ROA not before: Wed 11 Feb 2026 11:10:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214525
IP address blocks: 83.219.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4c:65:00:7d:63:b7:e3:a2:7a:21:18:d4:8f:7c:30:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd4d2fdbee3aa3e121428ea7050c9439d8886a9
Validity
Not Before: Feb 11 11:10:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45b0b4d55c05c6266005300b4beb8c8d16730216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f9:fa:45:22:16:6e:fa:d0:ab:fb:e7:2a:10:
79:83:b3:c1:6f:57:ed:8a:b4:09:65:f4:0e:85:13:
a3:82:1f:2d:e3:df:00:e2:db:3b:b3:e6:35:a9:4f:
cd:f2:5b:8c:0e:11:df:53:95:f4:b4:d6:d2:28:58:
ac:3b:2b:8d:3c:92:18:a4:c8:d2:28:16:aa:c4:58:
23:d1:fc:0e:96:50:0b:7c:39:09:8e:db:57:3e:5a:
86:49:3e:0c:7b:7e:49:6f:12:bc:a2:9f:33:66:99:
ea:5b:06:fd:9a:3d:93:9c:85:8e:09:a4:f3:dc:d2:
e7:82:65:07:f0:80:a7:55:42:3c:85:32:14:d8:6a:
b5:5b:8f:8d:52:60:5e:07:10:8f:3f:82:ac:69:a8:
11:1c:43:52:e6:2a:6e:a8:ed:61:54:59:2c:49:49:
c1:c6:75:f0:32:9b:74:6d:6a:37:6e:45:99:c3:81:
54:a6:52:c0:8c:78:a3:b3:dc:cb:19:a4:3c:4b:9c:
a8:e6:1c:92:69:0b:4c:ff:a8:4a:4f:3a:e9:11:f1:
5f:ea:80:2e:ba:31:f2:98:f7:86:97:9c:98:bb:10:
ee:a8:78:d9:e8:38:f7:bd:13:3a:f3:9c:be:bf:22:
08:57:1c:05:cf:61:9c:50:e8:16:f7:16:e9:24:60:
42:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B0:B4:D5:5C:05:C6:26:60:05:30:0B:4B:EB:8C:8D:16:73:02:16
X509v3 Authority Key Identifier:
keyid:3F:D4:D2:FD:BE:E3:AA:3E:12:14:28:EA:70:50:C9:43:9D:88:86:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/RbC01VwFxiZgBTALS-uMjRZzAhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/66b692-4bb3-473e-9413-6261e5b1fc20/1/P9TS_b7jqj4SFCjqcFDJQ52Ihqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.219.251.0/24
Signature Algorithm: sha256WithRSAEncryption
14:3c:d7:90:61:49:a6:7c:e4:e9:93:a9:df:07:df:39:f1:30:
14:3a:73:df:2a:77:18:13:34:2f:c3:c5:ec:18:30:b5:c8:d6:
a5:bd:92:e0:61:2c:68:46:52:75:cb:1c:ec:6d:c7:cf:87:25:
7f:15:9b:fb:b7:6b:12:b8:dc:c4:f6:a5:3d:80:10:82:9f:1b:
b8:37:41:eb:03:80:76:9f:ab:87:20:d9:0f:13:6a:34:d1:00:
9b:e2:2c:88:dd:41:9b:ea:94:cb:d9:7b:b5:95:b2:6c:f5:da:
58:6e:7e:a8:b5:70:db:6b:02:2a:a8:81:bb:50:d0:69:2b:49:
2a:3f:a8:fd:18:5b:60:a1:2b:cf:33:5c:6c:ff:a1:af:49:3c:
46:25:c1:e0:0d:9f:4f:be:4b:fd:ce:05:de:da:9c:a7:da:3b:
85:da:a7:d2:a0:3b:e9:46:7d:5f:a2:76:9b:67:45:ee:58:5b:
d2:02:c7:61:85:00:eb:48:87:bb:6d:16:54:f8:3a:62:05:8e:
0d:47:08:a4:c5:87:78:00:14:c4:1b:dc:01:65:f4:2f:6e:f7:
39:d7:1a:7c:24:40:9f:c6:89:53:41:55:8b:10:64:9e:1b:aa:
30:32:e5:85:c7:da:98:76:ec:97:08:74:51:ae:ed:59:88:b1:
46:0c:1c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:37:16 2026 by rpki-client