Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/BpWlylCtY7p5ju0iluZpyKNqkYc.roa
File: BpWlylCtY7p5ju0iluZpyKNqkYc.roa (raw, json)
Hash identifier: U58m719CxKKwMeciJUYj7nckh8GzrxHOl6MyrbQLjdw=
Subject key identifier: 06:95:A5:CA:50:AD:63:BA:79:8E:ED:22:96:E6:69:C8:A3:6A:91:87
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019FCC7A0403ABB88DDFE849A78D8D6A3228
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/BpWlylCtY7p5ju0iluZpyKNqkYc.roa
Signing time: Tue 04 Aug 2026 11:12:56 +0000
ROA not before: Tue 04 Aug 2026 11:12:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219072
IP address blocks: 2a0c:9a40:e000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:7a:04:03:ab:b8:8d:df:e8:49:a7:8d:8d:6a:32:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Aug 4 11:12:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0695a5ca50ad63ba798eed2296e669c8a36a9187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7a:65:3d:0a:6e:05:73:54:f0:1a:7c:57:30:
21:1b:fd:05:95:eb:84:fd:9b:4c:90:b4:81:ad:bb:
40:bc:18:18:46:ba:cb:0e:d6:91:c4:e1:4a:56:1c:
54:05:87:07:36:b2:89:d1:7e:98:ea:6a:03:51:b2:
62:39:b0:96:db:98:36:14:57:15:f5:e5:cc:99:3e:
91:24:27:74:41:42:76:a4:73:32:74:b3:aa:c2:73:
50:f4:46:dc:6c:85:e7:06:51:5f:de:23:32:e8:d1:
a6:1f:44:6c:e2:c2:0a:ba:61:9f:2f:5b:f6:0a:f1:
76:1b:e2:d5:53:ee:4e:df:96:ba:c0:21:b8:46:8b:
85:9b:b1:78:9d:42:86:39:1c:9f:c5:d9:cb:84:87:
15:8b:c6:f7:b5:ab:db:df:5e:5d:46:7c:b7:b6:5c:
23:78:70:92:08:12:64:23:a8:7e:af:43:b8:90:3d:
83:bf:17:70:51:1d:3b:c0:23:9f:ce:0a:c0:59:df:
4d:ec:f9:4f:9e:59:6d:16:fa:6a:48:99:78:62:fa:
8b:56:74:92:42:5d:eb:1c:d2:4b:48:1f:5b:eb:57:
c5:f5:79:2f:04:b4:f7:cc:6d:d6:19:39:38:6b:c3:
1a:31:66:ce:cb:4d:1c:43:f5:96:44:28:f2:dd:07:
5a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:95:A5:CA:50:AD:63:BA:79:8E:ED:22:96:E6:69:C8:A3:6A:91:87
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/BpWlylCtY7p5ju0iluZpyKNqkYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:e000::/48
Signature Algorithm: sha256WithRSAEncryption
24:7c:30:56:41:a7:19:a1:2f:52:04:55:79:b9:06:cb:fe:93:
23:e4:4b:ba:8c:f1:bb:4c:0a:fb:f0:7a:c5:7d:25:f9:36:35:
a2:1e:91:b7:31:43:f3:55:be:1f:b5:48:dc:e0:ca:88:f6:ec:
56:b7:76:6f:f4:82:51:eb:4e:21:6e:86:e3:9e:12:d0:ab:9a:
45:54:40:3a:39:6f:2d:93:36:9b:c9:f0:9f:93:e7:8c:e1:78:
f4:b8:23:3c:0d:97:d6:0a:57:cb:d8:3e:00:cf:6c:05:a7:6f:
22:7f:91:cb:f5:7f:da:b5:97:dd:7c:ac:48:c9:fa:82:6f:91:
ae:d0:02:d1:8b:0c:77:f6:a5:fe:92:50:5b:0a:8d:4c:2c:e2:
bc:6c:39:0b:3c:ec:b0:cc:7f:1c:d4:f8:c4:90:d0:14:60:f6:
f8:89:6c:05:3d:3e:f9:3b:e3:eb:b5:2d:47:84:d0:e7:42:32:
48:f8:63:15:f9:ee:4c:61:a2:31:1e:ea:2f:b3:43:d1:62:00:
3c:f4:e0:34:eb:7e:e1:d2:33:26:a1:c6:95:5b:c9:cd:97:1c:
69:f7:e3:a7:e4:f5:94:6b:41:b2:ca:63:63:cc:8a:69:21:2e:
05:9c:51:d2:e4:8d:33:0d:3f:23:23:4e:ec:1b:bf:20:1e:55:
9d:7a:46:00
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ/MegQDq7iN3+hJp42NajIoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjYwODA0MTExMjU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjk1YTVjYTUwYWQ2M2JhNzk4ZWVkMjI5NmU2NjljOGEzNmE5MTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXplPQpuBXNU8Bp8VzAhG/0FleuE
/ZtMkLSBrbtAvBgYRrrLDtaRxOFKVhxUBYcHNrKJ0X6Y6moDUbJiObCW25g2FFcV
9eXMmT6RJCd0QUJ2pHMydLOqwnNQ9EbcbIXnBlFf3iMy6NGmH0Rs4sIKumGfL1v2
CvF2G+LVU+5O35a6wCG4RouFm7F4nUKGORyfxdnLhIcVi8b3tavb315dRny3tlwj
eHCSCBJkI6h+r0O4kD2DvxdwUR07wCOfzgrAWd9N7PlPnlltFvpqSJl4YvqLVnSS
Ql3rHNJLSB9b61fF9XkvBLT3zG3WGTk4a8MaMWbOy00cQ/WWRCjy3QdajwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFAaVpcpQrWO6eY7tIpbmacijapGHMB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvQnBXbHlsQ3RZN3A1anUwaWx1WnB5S05xa1ljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQOAA
MA0GCSqGSIb3DQEBCwUAA4IBAQAkfDBWQacZoS9SBFV5uQbL/pMj5Eu6jPG7TAr7
8HrFfSX5NjWiHpG3MUPzVb4ftUjc4MqI9uxWt3Zv9IJR604hbobjnhLQq5pFVEA6
OW8tkzabyfCfk+eM4Xj0uCM8DZfWClfL2D4Az2wFp28if5HL9X/atZfdfKxIyfqC
b5Gu0ALRiwx39qX+klBbCo1MLOK8bDkLPOywzH8c1PjEkNAUYPb4iWwFPT75O+Pr
tS1HhNDnQjJI+GMV+e5MYaIxHuovs0PRYgA89OA0637h0jMmocaVW8nNlxxp9+On
5PWUa0GyymNjzIppIS4FnFHS5I0zDT8jI07sG78gHlWdekYA
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:21 2026 by rpki-client