Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/tdO4wEk8YpGTzq5kd9vPeqnDeDo.roa
File: tdO4wEk8YpGTzq5kd9vPeqnDeDo.roa (raw, json)
Hash identifier: cB5CSJkT3O+9UBmuTizqC0w9ZxVIs1IRBERe6k5DKkU=
Subject key identifier: B5:D3:B8:C0:49:3C:62:91:93:CE:AE:64:77:DB:CF:7A:A9:C3:78:3A
Certificate issuer: /CN=047ee74ac490e31f1d40764f092411ee25eb1665
Certificate serial: 019B775896BA9D5A4F70A14DBCD0C525CBC1
Authority key identifier: 04:7E:E7:4A:C4:90:E3:1F:1D:40:76:4F:09:24:11:EE:25:EB:16:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/tdO4wEk8YpGTzq5kd9vPeqnDeDo.roa
Signing time: Thu 01 Jan 2026 02:17:33 +0000
ROA not before: Thu 01 Jan 2026 02:17:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200770
IP address blocks: 185.96.212.0/22 maxlen: 24
2a06:200::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:96:ba:9d:5a:4f:70:a1:4d:bc:d0:c5:25:cb:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=047ee74ac490e31f1d40764f092411ee25eb1665
Validity
Not Before: Jan 1 02:17:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5d3b8c0493c629193ceae6477dbcf7aa9c3783a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d6:d4:8c:2b:64:dc:dc:2b:31:8c:21:3d:6a:
ae:27:40:86:f6:83:7a:ba:f8:55:09:25:58:7d:a5:
1b:c1:08:c6:f3:53:e8:b8:a4:c1:85:14:4e:c3:69:
ee:9e:af:79:07:1d:9f:2f:5e:24:a8:c1:24:f3:82:
aa:d3:e6:90:77:0c:21:15:b3:c6:09:6f:4b:58:37:
eb:17:95:a7:55:07:3d:a7:d8:d2:02:3a:a2:d4:93:
cb:e4:f5:e7:46:e1:e5:1d:d5:66:86:f8:e1:b5:20:
53:c5:60:88:e9:fa:c8:3d:c4:6b:48:e2:43:8a:e2:
c7:20:aa:f4:b3:57:95:79:b1:6c:41:96:f0:60:22:
53:65:95:f2:a9:3b:da:0b:12:bf:ee:a0:cb:c1:a6:
16:2f:ba:15:30:b1:d1:2f:c5:86:4c:a5:34:fb:f6:
36:0e:dd:bd:08:04:1f:13:cf:a6:99:48:6c:95:b6:
db:cd:df:ec:de:f1:31:95:b5:bc:6d:dd:8d:ef:68:
20:7b:a9:1b:66:71:d5:12:74:0e:51:fa:21:6d:cf:
d3:05:a1:7c:c7:1c:f6:74:74:81:71:36:59:79:03:
c0:b4:cb:02:44:dc:ce:30:a8:68:0e:70:1c:22:9f:
4f:0b:f6:68:65:f5:d6:d5:05:12:06:0a:21:9f:f3:
98:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D3:B8:C0:49:3C:62:91:93:CE:AE:64:77:DB:CF:7A:A9:C3:78:3A
X509v3 Authority Key Identifier:
keyid:04:7E:E7:4A:C4:90:E3:1F:1D:40:76:4F:09:24:11:EE:25:EB:16:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/tdO4wEk8YpGTzq5kd9vPeqnDeDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/17f769-5833-4f26-93f8-ea7f218fdb50/1/BH7nSsSQ4x8dQHZPCSQR7iXrFmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.96.212.0/22
IPv6:
2a06:200::/29
Signature Algorithm: sha256WithRSAEncryption
aa:41:0f:91:1b:06:36:26:d4:9c:c5:57:7a:05:fa:53:20:b2:
3f:7a:db:a5:d2:25:e9:15:5c:63:91:99:30:49:51:49:64:a0:
bf:05:8c:42:15:30:10:aa:08:7b:35:ac:85:02:14:9b:f7:50:
6f:4b:b1:4e:9f:ca:48:29:27:c8:9d:88:07:bf:2e:87:9d:ea:
1b:42:74:db:dc:49:2b:69:e3:30:1a:dc:48:80:71:cc:4f:77:
29:9f:59:2a:22:bd:24:26:43:d0:60:a4:59:ce:ff:4e:b2:f5:
d1:89:5f:8e:b9:0a:3c:21:60:e7:a4:c2:10:35:71:23:cd:d2:
fe:23:51:e1:47:27:20:c4:6a:1e:5b:7b:02:58:99:03:97:52:
2f:a5:32:af:89:3f:96:56:26:52:81:c6:13:4b:80:c4:50:d4:
88:1d:ac:9f:d5:6b:d9:46:39:ff:2a:13:b5:29:d7:57:d8:6c:
ed:57:93:6a:4c:88:12:38:7d:70:96:d9:58:2f:10:e0:da:2a:
cc:77:c0:f1:3a:58:0b:de:43:09:68:a9:55:b6:b9:fa:16:4d:
e9:46:b1:cf:a4:7c:3d:ad:89:2c:5e:dc:2d:b1:fb:be:71:60:
19:79:33:c1:da:92:f6:74:fd:9d:ee:22:17:c8:e4:48:82:1a:
01:5c:d4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:56:07 2026 by rpki-client