Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/BcV7RQP9tEYrir5s5s8HljB14rg.roa
File: BcV7RQP9tEYrir5s5s8HljB14rg.roa (raw, json)
Hash identifier: 02JvGbXNva6ehURhD7XPxj/q7/tK+vEci0iVCyomOYU=
Subject key identifier: 05:C5:7B:45:03:FD:B4:46:2B:8A:BE:6C:E6:CF:07:96:30:75:E2:B8
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F0271C07AEE7E62B60E33869F23F5201C
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/BcV7RQP9tEYrir5s5s8HljB14rg.roa
Signing time: Fri 26 Jun 2026 05:40:36 +0000
ROA not before: Fri 26 Jun 2026 05:40:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200913
IP address blocks: 5.175.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:02:71:c0:7a:ee:7e:62:b6:0e:33:86:9f:23:f5:20:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 26 05:40:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05c57b4503fdb4462b8abe6ce6cf07963075e2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a0:09:ee:c4:3b:29:d8:1e:ea:cb:6a:23:7d:
05:07:e0:0b:26:ff:b4:23:5c:9c:73:8d:6e:88:db:
5c:2f:de:1b:87:0b:89:d4:e5:dc:9a:9f:21:e3:b9:
91:fd:3a:b0:24:2e:4d:44:8b:50:4a:e1:b4:3d:05:
b5:0a:c8:06:e1:c9:1d:52:e8:16:49:f4:05:c5:55:
dc:8a:ae:1b:64:5d:9e:3d:87:9a:89:b5:f9:50:a8:
0a:97:7c:cd:d2:70:b4:a2:9c:12:b1:90:44:aa:95:
cd:dd:85:64:e7:a5:f2:05:6c:01:71:4b:a3:95:4b:
52:b7:a4:ad:10:a5:a3:f3:8c:4f:e3:c7:2a:c9:16:
34:ab:f9:76:54:10:d5:80:a2:31:73:26:8b:27:5a:
fa:a7:e7:89:83:e6:4b:29:0d:aa:33:5c:c7:b2:32:
4d:e4:4f:23:75:d7:3c:85:93:56:a3:2a:90:0b:c3:
ca:21:7b:b5:cc:d5:6e:13:c2:b2:aa:c8:5c:3b:04:
26:65:81:de:0a:6c:70:5f:16:88:b7:5f:e1:d4:8f:
fd:5b:94:51:87:a0:ed:6c:33:5f:af:6a:6c:35:5b:
15:a3:3b:3c:08:e8:86:87:e2:07:e3:d3:02:6f:7c:
9a:d2:95:41:55:84:13:ab:1e:54:5c:3e:d0:b3:73:
77:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C5:7B:45:03:FD:B4:46:2B:8A:BE:6C:E6:CF:07:96:30:75:E2:B8
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/BcV7RQP9tEYrir5s5s8HljB14rg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.186.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:40:25:4f:57:1d:32:72:ff:2e:6f:d8:48:ad:5a:bf:cf:0b:
56:75:2c:39:99:3a:c7:fc:b8:b5:0c:8c:ff:6a:aa:03:50:ae:
9f:c3:93:a5:d5:ca:e3:42:a5:60:73:4d:d2:36:2e:0c:0a:4a:
b7:40:e1:2e:43:22:a2:26:83:35:b7:bf:35:5b:49:11:f3:47:
89:52:8b:01:5b:09:7a:14:3b:77:0c:87:6e:d1:05:9a:96:1c:
56:85:2e:3f:6f:32:fc:5f:66:30:17:c9:8b:69:9a:fa:f3:02:
ef:99:be:22:72:02:8e:a6:93:99:42:c1:50:48:99:2d:98:12:
14:79:14:5d:6f:71:b8:5d:26:2f:a1:67:48:18:f2:d9:8b:4c:
c6:a4:a8:79:14:67:57:8a:0e:2d:f7:ec:36:6b:d4:d9:67:40:
99:08:86:bc:91:24:fa:51:a3:d3:23:ab:31:83:fc:aa:16:b7:
3c:60:5e:9c:78:95:54:c2:88:21:7c:c4:ef:57:e9:2a:1b:d1:
b4:3a:3c:98:b7:d6:ff:7e:24:b9:e2:af:7a:98:7f:51:97:20:
9e:36:7a:7f:63:a5:c4:5a:c6:70:48:8d:75:01:c5:b2:03:8e:
8b:c7:2b:e5:fb:5c:bd:6c:3d:3d:89:4d:ef:d8:fc:0a:f1:75:
3e:6d:f3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:53:02 2026 by rpki-client