Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/BdKwm-uAtgg2z411eG1zreHV_cE.roa
File: BdKwm-uAtgg2z411eG1zreHV_cE.roa (raw, json)
Hash identifier: 4kTCdoJIrUG8mOPncYRammsgFFbizqem2KL9aisdKdA=
Subject key identifier: 05:D2:B0:9B:EB:80:B6:08:36:CF:8D:75:78:6D:73:AD:E1:D5:FD:C1
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 019F0E054FB1A9CF835D03D4D6CE0A3D290E
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/BdKwm-uAtgg2z411eG1zreHV_cE.roa
Signing time: Sun 28 Jun 2026 11:37:36 +0000
ROA not before: Sun 28 Jun 2026 11:37:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209847
IP address blocks: 95.164.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 14:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0e:05:4f:b1:a9:cf:83:5d:03:d4:d6:ce:0a:3d:29:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Jun 28 11:37:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05d2b09beb80b60836cf8d75786d73ade1d5fdc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f2:7e:20:b4:19:8f:38:8a:a4:76:7d:33:4f:
07:74:41:a4:13:a5:9f:db:d6:c8:c4:e2:3d:a3:21:
42:03:f3:a3:45:98:41:fc:f3:2b:8c:11:96:37:66:
28:07:49:29:57:4a:19:35:8c:bd:2c:7f:86:b5:36:
35:d3:26:57:73:d7:ca:1d:d9:81:d3:9e:33:21:ee:
95:02:fa:35:0c:35:34:32:35:fb:e6:76:eb:84:ea:
c5:d1:55:4e:64:c1:a9:2c:fa:aa:86:cc:5c:b9:ea:
97:18:ab:84:52:1f:26:f1:bf:ad:af:cf:95:f7:e6:
13:b6:d9:0e:84:ab:3a:44:e8:c7:21:4a:d5:a6:8f:
df:18:42:c1:e3:da:f3:5a:19:33:99:3a:23:4c:82:
9f:ad:e4:4e:a3:2a:43:d0:06:73:57:f6:1c:20:52:
68:86:f1:20:e9:21:f1:7f:06:07:63:9d:32:1a:7e:
a5:09:c7:2c:95:86:6a:09:8f:79:51:e4:a6:68:b5:
99:2f:98:c3:90:58:9f:24:7b:86:0c:64:56:57:89:
2e:ee:1c:2b:ba:84:09:d5:81:15:ec:f8:70:da:95:
8d:30:2c:cf:80:7c:72:5e:3d:73:ac:cc:85:2c:93:
3d:5a:4f:00:8e:5f:23:3e:58:d1:d0:6e:4c:84:1b:
44:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D2:B0:9B:EB:80:B6:08:36:CF:8D:75:78:6D:73:AD:E1:D5:FD:C1
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/BdKwm-uAtgg2z411eG1zreHV_cE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.116.0/24
Signature Algorithm: sha256WithRSAEncryption
12:6d:83:11:bc:3d:dc:7c:19:b6:3d:19:f1:8d:72:59:16:61:
6b:ff:76:a6:a4:73:b5:a1:e4:90:1f:8c:32:78:01:41:08:b3:
a1:f3:0f:3c:e0:8f:74:70:a8:0f:d5:04:c6:08:a7:2b:7d:b9:
cc:ed:16:da:78:99:aa:bc:eb:7c:ad:13:45:f8:2c:2d:7a:0f:
87:35:6f:99:3d:00:ea:d1:e7:f3:09:bd:d3:35:41:38:9f:ed:
7f:c4:12:49:b4:d0:87:ed:39:03:98:61:17:d0:ec:28:17:36:
d4:15:22:0f:17:5c:ee:6e:60:9f:17:2b:8f:d6:63:41:e9:6e:
fd:9b:ae:57:a5:52:18:5e:96:75:0c:91:bb:0b:51:3d:6c:7c:
e8:23:aa:75:c5:1c:25:ac:51:80:37:40:0d:a2:47:35:20:29:
f2:18:8b:6c:9e:dd:e0:f4:48:21:d4:e3:f2:89:7b:95:df:91:
83:33:50:ba:1a:be:1e:02:1a:04:c2:a2:39:d5:18:3e:9d:90:
a7:c4:27:ab:33:e9:69:0f:92:f4:ba:23:05:58:10:31:39:0a:
7a:68:e2:51:19:57:7b:57:eb:bc:51:0f:7d:1d:49:2b:4f:24:
66:73:54:0d:a4:6d:cb:73:24:d7:23:b8:83:1d:a0:c2:2a:37:
5f:56:e7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 21:16:23 2026 by rpki-client