Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/bd0fr_kRPnaKLvLN9ZpO5e3Kz2I.roa
File: bd0fr_kRPnaKLvLN9ZpO5e3Kz2I.roa (raw, json)
Hash identifier: WDxxU0O54RTfygWfLBj7mncB1ZZMMpBFwyQajkCAytc=
Subject key identifier: 6D:DD:1F:AF:F9:11:3E:76:8A:2E:F2:CD:F5:9A:4E:E5:ED:CA:CF:62
Certificate issuer: /CN=82d889b733367387af24d06e7f921e1ebc0e8cc0
Certificate serial: 019F23684222E6CD89752B7B93C3E1A6D7D0
Authority key identifier: 82:D8:89:B7:33:36:73:87:AF:24:D0:6E:7F:92:1E:1E:BC:0E:8C:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gtiJtzM2c4evJNBuf5IeHrwOjMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/bd0fr_kRPnaKLvLN9ZpO5e3Kz2I.roa
Signing time: Thu 02 Jul 2026 15:17:42 +0000
ROA not before: Thu 02 Jul 2026 15:17:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60672
IP address blocks: 82.192.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/gtiJtzM2c4evJNBuf5IeHrwOjMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/gtiJtzM2c4evJNBuf5IeHrwOjMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/gtiJtzM2c4evJNBuf5IeHrwOjMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:42:22:e6:cd:89:75:2b:7b:93:c3:e1:a6:d7:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82d889b733367387af24d06e7f921e1ebc0e8cc0
Validity
Not Before: Jul 2 15:17:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ddd1faff9113e768a2ef2cdf59a4ee5edcacf62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6c:10:dd:d1:8a:2b:81:c4:db:d8:9f:a7:83:
55:f8:a9:91:2b:2c:04:0f:9e:d8:7a:d7:23:46:45:
70:1e:26:f7:74:c7:c9:58:0f:02:2b:4c:65:57:5d:
67:29:c2:f4:d4:8b:76:18:51:73:ed:2e:e0:a2:e3:
2e:76:d4:46:e5:67:e8:cd:a2:53:cb:a0:43:ba:3a:
25:ec:1a:fd:d8:54:da:4d:0a:0a:15:32:c5:87:a3:
af:ee:4b:e8:b6:ad:1c:31:63:2e:5e:78:1f:53:0d:
fd:eb:0e:04:66:29:fd:0c:b8:07:f2:e7:55:d2:0c:
a3:ee:42:4b:80:46:64:8a:ae:82:5c:92:4d:40:21:
9c:c0:3d:9d:72:ca:32:42:a6:25:6d:0d:41:09:0c:
a5:50:6c:16:db:72:c8:d4:82:a4:88:06:02:dc:9c:
8b:c8:a2:cb:c2:07:10:35:5a:99:b3:a8:9a:65:61:
e5:c6:b4:30:cd:0c:26:85:ad:bf:5d:8e:32:2b:9c:
12:be:84:7e:b5:2a:94:1b:c3:63:bd:20:2d:16:86:
a5:5d:7b:55:2d:e2:43:17:bf:cd:eb:72:b7:04:23:
76:d5:49:a4:19:6a:89:5e:14:d8:c3:40:a1:6f:6b:
6f:f8:6c:62:a0:62:4b:c7:c6:b2:67:3e:b3:af:d0:
12:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:DD:1F:AF:F9:11:3E:76:8A:2E:F2:CD:F5:9A:4E:E5:ED:CA:CF:62
X509v3 Authority Key Identifier:
keyid:82:D8:89:B7:33:36:73:87:AF:24:D0:6E:7F:92:1E:1E:BC:0E:8C:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtiJtzM2c4evJNBuf5IeHrwOjMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/bd0fr_kRPnaKLvLN9ZpO5e3Kz2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9488d5-a8d3-44b5-92df-58caf4701be3/1/gtiJtzM2c4evJNBuf5IeHrwOjMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.192.106.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:86:e5:51:dd:e5:3d:e1:e8:ab:45:09:ca:72:7c:4e:36:fc:
f4:a5:4d:6c:fd:d6:62:65:47:67:71:d5:f1:f9:dd:cc:e9:d7:
28:b5:f2:1b:00:b7:8c:db:ef:78:77:0a:d1:90:0b:0e:f1:8a:
18:5d:52:a9:68:47:65:bf:d5:53:28:db:62:4d:cc:18:ac:9f:
3d:df:c2:67:a8:d3:20:65:60:6e:b7:47:9c:7a:0a:9a:41:79:
59:75:b5:ee:25:47:f9:97:0f:3b:45:5d:6b:3c:de:04:4c:28:
0c:e3:bf:b0:97:ba:bc:2d:78:05:17:92:42:b5:dd:e3:96:15:
6e:5b:aa:11:fb:87:6e:1c:8d:1e:fc:ea:66:c2:8d:35:8b:11:
be:af:f2:ba:43:9f:35:1c:df:32:34:c7:75:d1:48:2c:07:f8:
27:32:36:77:dc:44:57:77:75:2d:3a:fe:62:e7:5c:c2:1d:e5:
64:fe:ca:ef:c2:9d:58:9d:98:68:dc:9a:cb:c9:db:ac:1b:96:
9e:bd:81:73:45:7e:4e:ac:d5:61:59:8a:c6:68:4d:aa:07:26:
b3:68:9e:44:25:d7:a9:0a:33:81:16:66:43:ee:5e:6b:df:92:
d3:23:c1:d1:46:62:94:fe:2e:75:8a:15:21:4a:51:e5:4f:8f:
dd:66:2e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:20 2026 by rpki-client