Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/BqP8JpSkO9zmFzKOVwQO5quzGwc.roa
File: BqP8JpSkO9zmFzKOVwQO5quzGwc.roa (raw, json)
Hash identifier: mL1va32nLh3K1Fn2SjIGSxBOV9vU7EKGw0UkMzUCNeA=
Subject key identifier: 06:A3:FC:26:94:A4:3B:DC:E6:17:32:8E:57:04:0E:E6:AB:B3:1B:07
Certificate issuer: /CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Certificate serial: 019FCEE31193489D15B7DD85242682D257DE
Authority key identifier: BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/BqP8JpSkO9zmFzKOVwQO5quzGwc.roa
Signing time: Tue 04 Aug 2026 22:26:55 +0000
ROA not before: Tue 04 Aug 2026 22:26:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59588
IP address blocks: 185.112.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ce:e3:11:93:48:9d:15:b7:dd:85:24:26:82:d2:57:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Validity
Not Before: Aug 4 22:26:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06a3fc2694a43bdce617328e57040ee6abb31b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:41:60:ed:2d:dd:05:37:10:a5:98:ea:9a:d6:
dd:75:c2:7a:c9:21:fd:81:cb:06:be:a1:4d:f6:2d:
20:c5:eb:11:8f:d1:73:10:34:ff:b9:2f:08:79:a3:
97:8c:25:32:0a:79:07:2c:14:84:97:55:a8:43:fe:
dd:df:80:d1:bc:4b:a3:6a:a3:12:2d:db:3c:0b:4c:
5e:4b:0f:39:38:db:24:3c:bc:52:8e:57:d6:44:10:
6e:d9:b5:69:e3:73:2f:a8:af:cd:3b:a3:e1:00:3b:
b4:c1:08:90:d9:6f:c4:de:27:d5:39:9f:b9:05:bb:
4d:fe:b1:7d:a3:04:9c:27:a1:d6:0c:d2:17:59:41:
16:24:1e:a0:4d:88:e2:1e:65:9c:7d:d3:f1:45:9c:
57:83:58:89:5f:de:5e:f9:a1:06:43:69:16:30:c7:
1f:03:bd:25:96:f7:00:96:61:21:4a:b3:06:bf:c9:
b9:de:8e:eb:67:b7:1e:56:a6:07:87:98:46:b6:f0:
72:8e:9c:64:bd:05:7a:fc:13:93:33:4d:64:dc:87:
2a:54:2b:e1:1b:ab:31:bd:c1:c2:60:57:4b:8f:18:
77:d7:25:14:71:4a:1d:11:1c:08:b5:b0:5d:02:e6:
0c:bd:f0:e6:d5:7e:71:9f:da:e9:08:e7:36:8e:bc:
24:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A3:FC:26:94:A4:3B:DC:E6:17:32:8E:57:04:0E:E6:AB:B3:1B:07
X509v3 Authority Key Identifier:
keyid:BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/BqP8JpSkO9zmFzKOVwQO5quzGwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.190.0/24
Signature Algorithm: sha256WithRSAEncryption
80:2a:31:6d:31:f2:90:7a:24:4e:fd:61:a5:ed:51:89:6a:ad:
88:a7:43:3d:58:9e:db:f7:f5:38:96:e0:ce:3e:9b:05:71:e7:
0c:63:ec:a9:81:28:08:f9:4b:69:e1:56:85:15:57:42:ea:74:
d7:d0:2f:fb:e4:9d:ec:3d:fe:eb:36:a9:14:e1:4a:81:da:aa:
ad:b6:ef:75:0e:b0:05:e3:90:c9:b9:aa:a7:06:b4:24:24:eb:
00:91:f7:d9:f4:41:5c:22:7c:18:1b:ba:ed:b1:c8:64:7c:d3:
5f:09:f6:18:4a:88:e7:ab:4c:3f:62:d1:2d:47:52:c8:16:01:
1f:13:48:13:a1:36:82:3f:66:ed:1c:3b:ec:55:51:52:12:8a:
fe:2a:7a:68:c1:d7:16:b8:1f:99:df:58:85:ad:50:43:f5:7b:
43:e9:11:41:29:2a:ee:d7:b3:6d:93:95:c2:ed:18:7d:c7:04:
ba:3e:27:05:e0:a9:fe:6b:1c:62:f6:ec:50:a1:22:c1:22:c0:
ed:8d:58:d2:7a:e7:28:00:ac:6a:4d:c0:74:a0:8e:1e:98:34:
c0:b6:bc:cf:27:95:c7:b3:ef:5d:73:f1:16:fd:e1:76:7b:c0:
be:13:f8:ac:cd:d3:f2:93:d3:0e:5c:6f:ca:52:26:0e:f5:0d:
d0:2a:84:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:05:50 2026 by rpki-client