Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/bjs_zJFuHzjoxK2NthqbKcV1s-8.roa
File: bjs_zJFuHzjoxK2NthqbKcV1s-8.roa (raw, json)
Hash identifier: Eg2O923oFj6n/iosVJD0SXVlsUTZEP0y964Jkw4vJR0=
Subject key identifier: 6E:3B:3F:CC:91:6E:1F:38:E8:C4:AD:8D:B6:1A:9B:29:C5:75:B3:EF
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 01A077091B2444BD0ACE3E5621554FBBF462
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/bjs_zJFuHzjoxK2NthqbKcV1s-8.roa
Signing time: Sun 06 Sep 2026 14:04:40 +0000
ROA not before: Sun 06 Sep 2026 14:04:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199741
IP address blocks: 45.11.236.0/23 maxlen: 23
45.11.238.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Sep 2026 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:77:09:1b:24:44:bd:0a:ce:3e:56:21:55:4f:bb:f4:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Sep 6 14:04:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e3b3fcc916e1f38e8c4ad8db61a9b29c575b3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a4:a3:57:96:95:79:7a:f5:ba:86:7c:c3:e2:
48:01:44:1f:54:7c:be:52:00:61:96:9c:c4:0f:a1:
23:36:08:cd:bd:c7:38:b0:cd:53:31:45:92:50:e9:
e4:fc:d7:90:f9:90:29:30:a9:f1:5b:55:8b:b4:69:
82:f9:e6:99:64:79:ab:19:f0:1b:28:56:4b:11:30:
0f:69:c7:17:22:bd:9b:85:ec:94:da:6f:e4:54:ed:
52:15:a3:36:a9:63:b2:12:f8:1e:4a:7f:bb:24:ff:
6d:ae:9c:58:20:8a:a7:84:99:66:a5:f8:15:eb:89:
ef:48:c4:cc:ce:48:07:17:d9:f3:77:a0:41:72:33:
73:fd:62:4b:85:60:64:25:81:80:03:4d:4c:28:3e:
15:70:f6:08:51:1d:36:32:49:15:62:c4:b5:c5:5e:
12:e2:29:de:8e:ab:9b:51:e7:d0:2c:71:7e:83:4d:
3c:17:7f:7f:42:97:ba:18:81:b9:a7:fd:61:f8:85:
c4:c8:77:88:cc:ac:d8:b8:48:39:e0:34:50:92:a7:
32:83:d5:70:96:34:cf:16:50:b3:43:7c:08:7b:d4:
25:89:31:8f:90:e9:ae:d4:ac:9f:f3:2f:62:b4:97:
fe:08:a7:ec:99:b0:54:7d:d2:33:4e:42:40:91:9d:
dd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3B:3F:CC:91:6E:1F:38:E8:C4:AD:8D:B6:1A:9B:29:C5:75:B3:EF
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/bjs_zJFuHzjoxK2NthqbKcV1s-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.236.0/22
Signature Algorithm: sha256WithRSAEncryption
05:d6:83:24:c8:6d:dd:e8:48:e5:94:19:51:77:e5:55:a0:2b:
96:db:25:9c:9c:b3:c7:3d:19:32:c6:0c:c3:8d:a9:a6:e5:68:
e4:a6:d3:27:38:f0:80:67:30:bf:fa:d2:90:2c:9e:ed:84:2c:
1c:c7:ee:f5:e5:0a:33:5a:4e:f4:52:bd:b0:82:35:3a:71:01:
fd:6f:92:af:b2:f1:eb:1b:21:b8:ae:b3:ea:aa:d5:cc:a6:12:
19:8c:23:fb:f4:6d:f5:44:d7:9c:71:06:ea:20:13:93:1a:90:
3d:5d:8e:7f:36:d9:84:58:35:35:82:39:0f:d2:af:51:a5:3b:
b2:42:3d:5a:11:39:f6:1e:9d:f5:e2:0e:4a:fd:fd:4e:13:0e:
06:06:b9:47:64:4c:4b:99:9d:b0:97:3b:33:4e:80:76:0a:be:
0d:8d:78:90:f8:a2:79:ea:df:62:10:ac:80:52:56:6f:0f:56:
11:f0:de:9d:15:41:a5:9c:c2:f2:e6:86:61:46:6e:54:ab:92:
9e:f2:2f:3d:f1:e3:c1:5f:62:52:f3:15:86:9d:6e:fd:21:52:
c5:87:5e:5c:a9:11:01:c4:59:ce:6d:f9:f7:2f:91:02:8e:bb:
a9:7b:34:09:75:26:60:ac:07:d9:80:61:dd:0e:61:e8:60:32:
cd:cc:5b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 7 08:06:38 2026 by rpki-client