Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/9f276c-ed3c-4739-9b54-835a5f8a8ae3/1/bOqTY_nDXoESSF_447Tk5tX5AOI.roa
File: bOqTY_nDXoESSF_447Tk5tX5AOI.roa (raw, json)
Hash identifier: sQ1q20oUgDBcHDCGZ4CXZ3dUrLutFstvaNLWfTrNEsw=
Subject key identifier: 6C:EA:93:63:F9:C3:5E:81:12:48:5F:F8:E3:B4:E4:E6:D5:F9:00:E2
Certificate issuer: /CN=6dc9330bd3897063dbbfd20e5ebbbe51c0d5d153
Certificate serial: 019EAB83A36522AE12B185B930F5A66ADC5D
Authority key identifier: 6D:C9:33:0B:D3:89:70:63:DB:BF:D2:0E:5E:BB:BE:51:C0:D5:D1:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bckzC9OJcGPbv9IOXru-UcDV0VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/9f276c-ed3c-4739-9b54-835a5f8a8ae3/1/bOqTY_nDXoESSF_447Tk5tX5AOI.roa
Signing time: Tue 09 Jun 2026 08:33:11 +0000
ROA not before: Tue 09 Jun 2026 08:33:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12874
IP address blocks: 193.42.234.0/24 maxlen: 24
193.42.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/9f276c-ed3c-4739-9b54-835a5f8a8ae3/1/bckzC9OJcGPbv9IOXru-UcDV0VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/9f276c-ed3c-4739-9b54-835a5f8a8ae3/1/bckzC9OJcGPbv9IOXru-UcDV0VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bckzC9OJcGPbv9IOXru-UcDV0VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ab:83:a3:65:22:ae:12:b1:85:b9:30:f5:a6:6a:dc:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dc9330bd3897063dbbfd20e5ebbbe51c0d5d153
Validity
Not Before: Jun 9 08:33:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6cea9363f9c35e8112485ff8e3b4e4e6d5f900e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2f:17:8b:e1:21:20:21:62:32:7c:96:eb:14:
59:52:c7:02:3c:77:1a:6a:cd:98:5e:00:49:1a:e4:
18:27:4d:ee:59:83:b2:c3:fc:54:3f:c7:c8:25:df:
89:2a:5a:9f:c6:37:2b:75:30:68:64:80:1b:07:52:
0a:ac:e5:c2:71:cc:84:3e:39:2e:69:44:49:16:d6:
63:07:40:49:81:c6:39:72:9c:72:28:15:8c:62:fd:
e5:ff:1a:58:7c:cd:d2:02:dc:7c:e3:12:d7:91:02:
ea:7e:86:53:87:58:13:d7:bd:06:9f:e1:3b:fd:f8:
b0:3e:36:b8:1a:d2:22:e9:be:d4:bb:f1:c7:5d:a4:
33:da:af:fd:13:71:1b:37:4e:5a:51:a9:64:37:75:
ac:ba:be:a6:65:0a:09:a3:32:68:97:98:92:7e:8f:
c4:9b:6d:13:4e:94:df:6f:47:49:ea:63:ff:eb:cb:
76:82:34:88:e2:ad:02:a1:cb:8f:95:db:f5:7c:0f:
d0:c4:ac:5d:0e:5a:cf:41:ca:4b:c4:93:cc:26:41:
fd:03:4c:32:f4:c1:8d:65:32:a7:6b:61:09:8e:a2:
75:13:ec:16:91:99:68:b5:ea:1f:4f:17:5a:12:e8:
aa:75:c4:74:5d:24:3e:aa:d3:31:3d:08:1d:69:ae:
23:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:EA:93:63:F9:C3:5E:81:12:48:5F:F8:E3:B4:E4:E6:D5:F9:00:E2
X509v3 Authority Key Identifier:
keyid:6D:C9:33:0B:D3:89:70:63:DB:BF:D2:0E:5E:BB:BE:51:C0:D5:D1:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bckzC9OJcGPbv9IOXru-UcDV0VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9f276c-ed3c-4739-9b54-835a5f8a8ae3/1/bOqTY_nDXoESSF_447Tk5tX5AOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/9f276c-ed3c-4739-9b54-835a5f8a8ae3/1/bckzC9OJcGPbv9IOXru-UcDV0VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.42.234.0/24
193.42.238.0/24
Signature Algorithm: sha256WithRSAEncryption
14:23:be:2d:83:32:36:fd:14:f5:b3:81:de:59:22:ec:47:4d:
3e:bd:c0:ff:6d:b9:3a:09:d2:61:b5:a7:a1:ea:d1:cf:e0:3a:
b7:2d:1f:6e:8d:86:fd:07:da:ee:1d:be:45:39:a8:43:6f:83:
39:76:96:8f:4c:37:b7:4a:94:30:47:a5:14:a0:32:c1:32:71:
82:db:2e:86:cb:28:af:40:0b:43:19:dd:e2:d9:e3:73:52:df:
15:df:37:7c:39:d2:88:76:92:6c:c6:e4:4c:c5:85:59:d9:7c:
8a:f6:77:77:75:6c:f5:52:e7:30:79:1e:c1:2d:1c:1b:11:6a:
22:d9:76:6a:b1:f1:e0:e5:1e:fa:2d:5d:b3:53:55:d6:3c:5c:
6c:9a:9d:9a:ab:ca:ae:b9:75:88:74:6c:20:d9:13:dc:c8:3c:
01:78:12:13:93:0b:82:99:50:86:02:a7:52:7c:b6:ab:33:f6:
43:76:55:0e:20:1f:3d:9c:7f:48:3a:d3:da:e1:36:2e:99:33:
97:79:8d:0f:55:56:d7:0b:82:3f:23:6f:ec:94:02:a0:ba:f5:
66:af:d6:0e:29:7b:e3:1f:c2:37:d0:53:90:45:c3:77:ff:19:
a3:3f:5a:cc:8a:43:c3:c0:9f:32:9c:0d:f7:f8:a1:9d:2b:47:
b9:25:6e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:19:40 2026 by rpki-client