Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/BZcnD-tmErBEiB7QcJrqQ989pOo.roa
File: BZcnD-tmErBEiB7QcJrqQ989pOo.roa (raw, json)
Hash identifier: cUC9ZHrkqmNKaBOeR4eTnUCwVEP+4beM1Gn8IQ8IXNI=
Subject key identifier: 05:97:27:0F:EB:66:12:B0:44:88:1E:D0:70:9A:EA:43:DF:3D:A4:EA
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 01A04256087F126286367B5086203BD09F01
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/BZcnD-tmErBEiB7QcJrqQ989pOo.roa
Signing time: Thu 27 Aug 2026 08:28:49 +0000
ROA not before: Thu 27 Aug 2026 08:28:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212025
IP address blocks: 131.123.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:56:08:7f:12:62:86:36:7b:50:86:20:3b:d0:9f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Aug 27 08:28:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0597270feb6612b044881ed0709aea43df3da4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ac:1f:59:8c:9e:72:19:50:dc:6c:04:29:70:
8c:c5:96:99:22:53:da:2b:fa:23:cb:a4:bb:a4:85:
09:60:04:31:ad:c9:a5:af:ff:d9:9b:61:18:db:57:
c4:7c:75:e0:d2:88:33:c6:ce:c2:60:01:fc:47:a9:
12:6f:3b:a8:da:3d:98:23:0f:69:ea:88:7f:7b:8b:
4f:c6:e9:9d:b3:3a:f8:6f:be:a1:8a:c0:6c:ee:46:
dd:2c:34:ec:e0:bf:4c:15:d0:ee:ec:08:a4:ae:90:
b6:8e:28:d1:7e:e5:e6:06:a4:dc:bc:6d:e7:5a:59:
b8:b3:81:2f:7a:09:67:a1:69:0a:87:58:68:8f:f5:
ca:85:ce:ad:28:b2:a1:9a:3b:64:4c:b0:b2:6f:d0:
16:bf:7c:c5:62:6a:3e:54:f2:2f:b0:b4:8a:fd:be:
da:a5:f6:ae:d0:8c:8b:c3:9c:19:1c:93:4a:3d:4c:
ed:8c:fb:09:f8:4a:ad:e7:e0:4b:4b:e5:75:8d:44:
0f:1c:4f:ce:45:39:b9:7c:16:da:85:b6:17:74:43:
7b:68:19:16:d7:03:ae:35:cb:86:46:38:f0:b3:36:
f9:ce:11:87:87:f6:87:97:36:6e:5e:76:01:4c:f1:
59:80:5b:cc:0e:76:91:9b:35:0a:1a:96:f1:76:42:
55:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:97:27:0F:EB:66:12:B0:44:88:1E:D0:70:9A:EA:43:DF:3D:A4:EA
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/BZcnD-tmErBEiB7QcJrqQ989pOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.123.23.0/24
Signature Algorithm: sha256WithRSAEncryption
55:6a:ec:d9:a6:8c:1b:1c:11:a7:91:1d:c5:1a:18:80:2a:40:
03:38:42:e4:b0:d2:20:87:5e:25:4f:32:c7:54:c2:49:0f:31:
6c:62:ec:e1:4a:c7:ba:de:b7:67:e3:56:e9:55:30:05:3d:6d:
ee:24:11:8d:d8:1c:40:7d:f8:ea:44:a8:45:07:7b:eb:fe:2b:
17:1c:fa:da:b6:28:09:0e:91:ec:08:ab:25:e3:65:33:6d:a4:
13:6f:6b:d1:a7:d3:c4:e6:4e:9d:da:7d:c5:1f:e0:37:b2:9c:
c9:a6:a2:26:9c:15:ba:ac:e8:51:81:15:77:7b:e4:d5:6c:f3:
49:53:de:42:ff:84:e3:8d:5d:70:5c:3b:6c:0c:8a:fa:5e:32:
e3:26:6e:f4:ca:a5:90:23:10:fb:16:b2:07:a7:f2:40:17:9b:
f1:ac:b0:ad:59:8e:79:ed:f3:70:75:24:14:d4:11:06:7d:c6:
38:e4:e3:ff:e9:31:49:e2:e1:44:78:57:7f:57:a5:a9:0a:57:
6c:51:62:a5:09:59:b7:cc:dc:74:1d:02:f2:4b:9e:73:9f:34:
e1:04:bb:27:b4:ba:71:69:89:dd:c6:aa:cb:5f:39:cb:f8:9b:
69:5b:9b:fd:bf:77:f2:40:ba:01:37:79:37:4e:89:56:c0:cc:
b9:58:75:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:13:58 2026 by rpki-client