Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/sB-h8uMEqY5NvYcFvztDjJ9OCkI.roa
File: sB-h8uMEqY5NvYcFvztDjJ9OCkI.roa (raw, json)
Hash identifier: T903QrMKBu8jmOh+85rvfFItyyBD7skAN1q18TIYRyw=
Subject key identifier: B0:1F:A1:F2:E3:04:A9:8E:4D:BD:87:05:BF:3B:43:8C:9F:4E:0A:42
Certificate issuer: /CN=3e70c14bf26faf0198f1e7b24729cd71b33518de
Certificate serial: 01A06B72CABB89C35BF53B9130E8DF106315
Authority key identifier: 3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/sB-h8uMEqY5NvYcFvztDjJ9OCkI.roa
Signing time: Fri 04 Sep 2026 08:04:40 +0000
ROA not before: Fri 04 Sep 2026 08:04:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 193.169.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6b:72:ca:bb:89:c3:5b:f5:3b:91:30:e8:df:10:63:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e70c14bf26faf0198f1e7b24729cd71b33518de
Validity
Not Before: Sep 4 08:04:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b01fa1f2e304a98e4dbd8705bf3b438c9f4e0a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:88:12:a2:a8:09:b7:84:32:08:25:e1:33:c8:
24:9e:b3:b2:d8:6a:93:fd:54:b8:22:2a:7e:90:85:
64:7f:e9:39:09:27:be:ce:3b:d9:9f:1f:e2:80:41:
ab:da:14:60:65:42:d8:f4:71:22:6a:2a:ae:8e:f9:
96:c9:8e:e2:be:b5:fe:66:5a:ae:e4:40:3c:c5:f8:
4a:4b:42:cf:0e:0a:bd:1e:7e:74:71:4b:04:6a:45:
92:a4:2d:e8:bc:02:b5:e2:0e:d5:10:29:09:2f:cd:
66:a0:68:10:60:41:44:5f:4f:a3:cf:f8:ae:23:f0:
29:ed:d8:94:0f:de:f3:02:04:18:2d:87:29:82:97:
b8:f2:fd:f3:16:92:7f:6d:89:d3:c8:cb:25:94:09:
28:f7:d4:86:74:09:be:6e:3c:4d:3a:ff:e0:3c:3e:
aa:c3:8d:be:c1:8a:2d:92:48:c6:f5:2e:75:d4:bc:
01:b0:2f:b8:5b:23:c6:4e:e0:00:7d:64:dd:8e:d7:
ab:89:a7:13:42:f5:03:48:f7:4a:ce:16:4b:3e:dd:
65:fa:45:63:c1:29:11:58:d3:17:87:05:31:4e:2b:
66:8a:a2:31:98:ea:2b:62:93:38:a2:d7:7c:55:1f:
fd:2e:32:c3:7b:a7:5b:57:17:ba:85:c9:37:75:38:
e1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1F:A1:F2:E3:04:A9:8E:4D:BD:87:05:BF:3B:43:8C:9F:4E:0A:42
X509v3 Authority Key Identifier:
keyid:3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/sB-h8uMEqY5NvYcFvztDjJ9OCkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.59.0/24
Signature Algorithm: sha256WithRSAEncryption
05:a8:30:66:e4:eb:c8:27:bc:30:16:5e:b2:45:f4:10:7f:13:
93:7e:b5:45:05:5b:8f:55:c1:42:7e:66:10:07:1b:d1:5f:2f:
4f:66:89:e9:70:ed:ff:01:d7:35:a6:f1:f8:2b:a4:52:fc:5c:
7a:36:e3:85:ea:5b:05:c0:16:a2:a6:04:08:57:93:66:df:81:
a2:48:ec:6f:03:b5:65:ce:4e:3a:c4:94:52:c1:7a:6c:ff:06:
4a:e0:ca:86:61:0d:af:64:53:32:12:6c:57:ed:90:24:83:69:
64:3a:f0:c3:84:3c:a9:c6:3d:f2:98:ba:23:3a:bb:5a:fa:48:
78:8e:31:ec:8a:f4:70:74:60:c5:40:49:17:99:c1:e9:8f:d4:
5f:6d:b9:0b:83:31:7e:70:39:fa:92:a5:1f:06:7d:a0:eb:41:
da:11:71:9f:2a:95:f7:f5:0e:97:54:ee:c6:17:b1:eb:92:68:
d9:60:78:57:72:0a:2e:c4:cd:d8:fa:08:7b:8a:9d:2f:ac:c2:
c7:91:25:50:f7:a7:2d:25:5f:19:d1:34:50:ea:77:6a:ea:da:
1c:4e:22:1b:7f:37:37:76:76:1b:7f:6f:e7:f5:62:07:86:9d:
e2:2c:de:6c:5f:6d:15:17:70:7d:e3:87:c8:6d:f4:2b:53:e3:
da:bc:9e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:19:47 2026 by rpki-client