Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/BVGtnyQZgRc-7rbdcsiLTPdcP5Q.roa
File: BVGtnyQZgRc-7rbdcsiLTPdcP5Q.roa (raw, json)
Hash identifier: N72INfSHSUGHX50eQ8hqjrtdk61/xPzA77YWindEdy4=
Subject key identifier: 05:51:AD:9F:24:19:81:17:3E:EE:B6:DD:72:C8:8B:4C:F7:5C:3F:94
Certificate issuer: /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial: 019F130535EEB1604ED31C8C826536B588B1
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/BVGtnyQZgRc-7rbdcsiLTPdcP5Q.roa
Signing time: Mon 29 Jun 2026 10:55:36 +0000
ROA not before: Mon 29 Jun 2026 10:55:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63286
IP address blocks: 2a09:3f04::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:05:35:ee:b1:60:4e:d3:1c:8c:82:65:36:b5:88:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367160181739568e578e1b5f57976a60398062e6
Validity
Not Before: Jun 29 10:55:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0551ad9f241981173eeeb6dd72c88b4cf75c3f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:0c:33:43:b4:8d:6f:a4:7a:7c:58:7f:34:49:
20:87:c5:a7:72:45:67:a6:bc:7d:3a:84:80:c0:c4:
3a:49:68:89:09:0e:bd:fe:6a:03:28:e8:57:b4:b3:
fd:b0:56:2d:f9:92:7a:9d:ff:11:70:2d:bc:63:cf:
f2:ee:19:b4:02:b6:75:24:90:03:76:39:2b:d6:50:
83:3b:ef:d6:7a:d7:a3:75:a8:e6:47:d0:52:b2:36:
6c:23:3c:e3:43:4c:0e:2d:2a:1b:55:03:c2:de:10:
15:15:07:16:4b:90:9f:b2:7a:42:90:b7:cd:97:6a:
13:64:0d:65:0e:58:80:da:b8:0a:bb:41:be:ff:b2:
df:25:05:2c:da:b5:c4:b2:c2:81:18:a9:18:e6:30:
75:97:38:0c:20:e1:e3:cc:16:08:c9:7d:41:be:f8:
8e:b3:4f:60:d2:01:7d:79:5b:2b:36:48:3f:a1:3b:
73:77:21:0b:c7:93:a6:87:e6:2c:2d:f4:6e:46:09:
77:8c:ee:ed:ff:09:32:94:8d:68:34:06:f4:80:2a:
ff:69:56:22:f9:19:e4:ec:19:95:78:f1:2a:b0:97:
2a:57:1e:f6:ce:3f:86:c6:5b:29:ee:75:c4:99:cf:
56:a1:c7:0a:64:10:4a:6e:00:b7:e4:0a:10:41:8d:
82:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:51:AD:9F:24:19:81:17:3E:EE:B6:DD:72:C8:8B:4C:F7:5C:3F:94
X509v3 Authority Key Identifier:
keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/BVGtnyQZgRc-7rbdcsiLTPdcP5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3f04::/30
Signature Algorithm: sha256WithRSAEncryption
49:47:c4:e6:db:c0:8b:c6:9e:b4:b1:63:9e:2e:f2:03:1b:bb:
47:ca:5b:7e:e0:d0:61:59:0b:8f:ac:47:d3:95:7c:37:3c:1b:
f1:e1:92:02:be:d9:af:8a:37:dc:7f:b8:d0:8a:8b:2d:20:5b:
3b:6c:2d:a6:e3:62:ab:54:46:7e:aa:a2:90:39:80:d1:fb:33:
76:a5:66:5f:8e:12:2c:48:e3:78:e2:b2:06:a3:58:f6:4e:e1:
23:ae:6b:24:fb:95:bf:75:4e:58:2d:7b:66:3e:66:22:fd:3c:
65:64:23:8a:dc:dd:b2:a5:2b:bc:ff:6a:46:d7:1e:46:43:27:
2e:04:f4:d4:60:90:8b:5b:5b:99:4a:f9:f9:75:a1:d9:df:66:
7c:78:e5:86:e4:1a:5d:00:7a:9b:57:06:cd:2e:4d:8a:70:be:
41:37:22:f6:ad:2f:30:a3:f2:22:b4:8d:3a:05:66:87:2a:b1:
11:1c:9a:c8:f3:8b:42:27:d1:1f:39:e6:64:a1:62:d5:8f:63:
ae:d5:f4:cd:e8:ac:33:9a:06:e8:2d:22:cd:12:ec:e5:e4:1a:
7a:f5:c1:99:b3:f0:ad:e4:ee:d1:77:8c:ea:17:ac:fe:53:bf:
91:0e:a5:11:82:46:74:a1:47:8b:8b:bb:81:c8:e6:7b:7b:7a:
d2:1a:50:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:16:54 2026 by rpki-client