Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/BUdsqcJq0eaXcvpncXjlTVXI5HQ.roa
File: BUdsqcJq0eaXcvpncXjlTVXI5HQ.roa (raw, json)
Hash identifier: D9H3GhrcYaeEBZShoz6d7Z+W3NaSy/mhR51cNHkRQ38=
Subject key identifier: 05:47:6C:A9:C2:6A:D1:E6:97:72:FA:67:71:78:E5:4D:55:C8:E4:74
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A143BBF8F882981A6DF2EDE68C5315F316
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/BUdsqcJq0eaXcvpncXjlTVXI5HQ.roa
Signing time: Fri 16 Oct 2026 08:02:34 +0000
ROA not before: Fri 16 Oct 2026 08:02:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41354
IP address blocks: 212.212.32.0/19 maxlen: 24
217.206.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 00:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:bb:f8:f8:82:98:1a:6d:f2:ed:e6:8c:53:15:f3:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 16 08:02:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05476ca9c26ad1e69772fa677178e54d55c8e474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:41:af:32:05:f2:c7:5e:cb:84:df:5e:67:bf:
b3:fb:e3:e4:a0:41:e1:ea:d0:1d:8b:48:fd:41:cb:
41:40:67:38:5f:40:33:19:c8:6a:20:94:f8:24:26:
9e:43:e3:e4:67:67:62:59:06:cc:ef:64:b4:85:cc:
3f:c0:61:80:f4:7e:7d:5b:e5:7c:4d:84:a7:1b:5b:
97:86:08:de:a4:50:f0:b9:ff:48:08:b5:6c:a9:41:
dc:c8:4f:42:2e:87:e6:e3:ca:13:0f:85:72:eb:9b:
15:bd:70:9d:2e:88:c5:26:70:8b:98:6c:90:81:5a:
a5:12:24:2d:7d:74:e8:7d:e6:65:a1:b0:ae:41:77:
21:7d:28:06:5a:ab:7d:94:9f:23:b7:6f:86:e5:cb:
dc:d3:f1:40:80:6b:fa:8b:c7:2d:ee:c2:f7:60:17:
0a:46:9e:56:46:3a:64:28:03:ce:a3:a9:b0:9f:40:
6e:24:28:80:83:33:e7:c6:0e:75:3b:21:22:0e:9d:
e9:9c:32:5c:22:56:ad:60:0f:28:e1:ca:9a:f5:1a:
3f:7a:e0:8e:18:b4:e5:17:48:0a:9d:08:75:25:f2:
20:28:44:b1:b9:00:3c:8e:e7:ca:ae:29:cb:83:9b:
15:14:36:bf:ef:ff:42:f8:73:86:57:6b:18:be:60:
7e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:47:6C:A9:C2:6A:D1:E6:97:72:FA:67:71:78:E5:4D:55:C8:E4:74
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/BUdsqcJq0eaXcvpncXjlTVXI5HQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.212.32.0/19
217.206.0.0/18
Signature Algorithm: sha256WithRSAEncryption
b4:ce:8a:f7:dc:27:26:78:41:7c:30:f0:40:df:41:c6:c7:3c:
2c:8e:b4:cd:fe:9f:cd:aa:f0:08:88:dd:12:dc:06:57:fb:1d:
cb:3c:ba:42:1c:96:f1:4f:81:49:af:2b:6c:07:4c:11:bc:30:
63:d4:27:20:e6:95:79:d5:bc:30:b8:40:f3:03:85:a8:cd:b5:
fe:96:5e:a1:4e:11:17:ea:b0:2e:40:8a:53:b0:80:46:b9:9a:
2e:cb:5d:5f:04:88:90:5e:84:cf:e1:30:36:8b:c1:b3:1e:d1:
d2:65:be:07:97:08:42:e5:1d:50:e9:89:0f:19:8a:56:db:0a:
4b:59:dd:fb:ef:bd:b3:f4:f8:0a:3a:f0:31:50:90:07:87:80:
69:9e:7e:62:7d:82:89:52:5e:e9:ae:a8:8e:d6:69:c2:aa:91:
4a:92:5a:44:73:75:ae:14:16:12:3f:19:f8:f1:58:bc:96:a2:
f4:54:4a:fd:5c:5b:32:52:60:8e:6c:6d:d8:5e:e7:e0:aa:74:
32:5d:32:0c:47:2e:aa:db:9c:ed:25:df:c7:0f:dd:1d:33:2b:
49:47:16:ce:7c:85:d1:19:fe:18:e6:71:87:c9:e1:de:59:31:
bc:41:72:c7:77:90:4a:be:8c:67:84:29:06:11:20:02:eb:53:
86:d5:c8:a9
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaFDu/j4gpgabfLt5oxTFfMWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYxMDE2MDgwMjM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTQ3NmNhOWMyNmFkMWU2OTc3MmZhNjc3MTc4ZTU0ZDU1YzhlNDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0GvMgXyx17LhN9eZ7+z++PkoEHh
6tAdi0j9QctBQGc4X0AzGchqIJT4JCaeQ+PkZ2diWQbM72S0hcw/wGGA9H59W+V8
TYSnG1uXhgjepFDwuf9ICLVsqUHcyE9CLofm48oTD4Vy65sVvXCdLojFJnCLmGyQ
gVqlEiQtfXTofeZlobCuQXchfSgGWqt9lJ8jt2+G5cvc0/FAgGv6i8ct7sL3YBcK
Rp5WRjpkKAPOo6mwn0BuJCiAgzPnxg51OyEiDp3pnDJcIlatYA8o4cqa9Ro/euCO
GLTlF0gKnQh1JfIgKESxuQA8jufKrinLg5sVFDa/7/9C+HOGV2sYvmB+AwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAVHbKnCatHml3L6Z3F45U1VyOR0MB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvQlVkc3FjSnEwZWFYY3ZwbmNYamxUVlhJNUhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQF1NQgAwQG
2c4AMA0GCSqGSIb3DQEBCwUAA4IBAQC0zor33CcmeEF8MPBA30HGxzwsjrTN/p/N
qvAIiN0S3AZX+x3LPLpCHJbxT4FJrytsB0wRvDBj1Ccg5pV51bwwuEDzA4WozbX+
ll6hThEX6rAuQIpTsIBGuZouy11fBIiQXoTP4TA2i8GzHtHSZb4HlwhC5R1Q6YkP
GYpW2wpLWd37772z9PgKOvAxUJAHh4Bpnn5ifYKJUl7prqiO1mnCqpFKklpEc3Wu
FBYSPxn48Vi8lqL0VEr9XFsyUmCObG3YXufgqnQyXTIMRy6q25ztJd/HD90dMytJ
RxbOfIXRGf4Y5nGHyeHeWTG8QXLHd5BKvoxnhCkGESAC61OG1cip
-----END CERTIFICATE-----
Generated at Mon Oct 19 07:42:13 2026 by rpki-client