Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/bpzxcNH2eEEEx6zZUUGsRcHS5YA.roa
File: bpzxcNH2eEEEx6zZUUGsRcHS5YA.roa (raw, json)
Hash identifier: Ak6oG3ZsBiu3/q7t7KJZ6gbGkZR+WWy1ldYqnXCpE04=
Subject key identifier: 6E:9C:F1:70:D1:F6:78:41:04:C7:AC:D9:51:41:AC:45:C1:D2:E5:80
Certificate issuer: /CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Certificate serial: 019FD19E8D87265635F6F60F4D9578A98A16
Authority key identifier: 0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/bpzxcNH2eEEEx6zZUUGsRcHS5YA.roa
Signing time: Wed 05 Aug 2026 11:10:56 +0000
ROA not before: Wed 05 Aug 2026 11:10:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 163.5.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:9e:8d:87:26:56:35:f6:f6:0f:4d:95:78:a9:8a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce851b6dd5d364ee19e0b38201b3e8df2624bcb
Validity
Not Before: Aug 5 11:10:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e9cf170d1f6784104c7acd95141ac45c1d2e580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a8:04:14:a4:2f:1a:1c:c8:9c:fd:08:de:80:
1d:e8:b0:47:19:80:50:aa:a3:2a:a5:48:25:b9:94:
81:cf:25:28:3c:2c:88:4c:8c:4c:ac:ab:9c:60:d2:
7d:76:63:3d:d0:17:2a:f4:ad:80:2e:7b:d0:01:2d:
25:f7:f3:48:c1:75:79:ba:23:88:e8:82:3c:74:7b:
c4:2c:fc:a6:3c:f0:a9:46:50:33:1a:40:c0:3f:2c:
56:e6:23:2e:17:00:22:ae:d5:32:ff:f3:de:1e:29:
35:12:8e:7a:4a:59:9d:2c:28:88:e2:06:6e:45:40:
ec:1e:ad:44:2d:35:83:3f:44:f6:0e:cb:40:52:3c:
bc:d5:2a:67:aa:ec:2d:03:e6:f8:8d:f1:b8:51:91:
2f:b5:42:0b:e1:ee:1d:67:85:05:89:08:ab:5f:64:
de:32:eb:ea:17:b3:0a:68:af:a4:95:0c:0a:8a:9f:
47:c0:32:10:e6:9a:51:8b:da:82:7c:3a:14:fe:4f:
6f:91:08:64:f9:64:14:21:41:28:64:ce:28:24:9f:
ac:54:20:d1:25:c4:d3:0c:44:bd:f8:e2:08:50:44:
00:75:a1:9f:30:46:e7:25:70:73:10:83:75:a4:4c:
37:ab:79:73:24:81:e6:20:8e:6d:f9:10:f5:2b:a9:
10:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:9C:F1:70:D1:F6:78:41:04:C7:AC:D9:51:41:AC:45:C1:D2:E5:80
X509v3 Authority Key Identifier:
keyid:0C:E8:51:B6:DD:5D:36:4E:E1:9E:0B:38:20:1B:3E:8D:F2:62:4B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOhRtt1dNk7hngs4IBs-jfJiS8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/bpzxcNH2eEEEx6zZUUGsRcHS5YA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/d02dfb-9673-49a8-971c-9fe94108ff01/1/DOhRtt1dNk7hngs4IBs-jfJiS8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.5.216.0/24
Signature Algorithm: sha256WithRSAEncryption
79:04:b7:42:a5:3c:80:4a:74:a8:78:8b:ab:e7:8b:5d:6c:82:
30:1b:f5:5d:d8:ae:5d:34:83:43:17:29:f5:9f:36:e2:69:90:
32:33:54:56:5f:77:18:7d:94:8e:13:6d:5c:c0:16:c7:e3:7f:
ee:4e:bd:74:0e:f9:c3:a7:cd:8e:8e:8d:b2:7b:38:9a:b6:91:
8c:5b:44:cd:49:9b:3c:1e:53:3e:42:25:15:4c:ca:9d:9f:30:
74:f6:fd:7d:a8:8d:dc:74:ce:5d:0b:5c:69:4e:89:9c:78:61:
a1:bb:8d:31:72:b8:50:77:e6:ce:49:2c:db:0b:4a:10:d0:a5:
4b:10:0a:1c:bd:b6:3a:71:cd:84:95:71:ee:38:71:75:61:83:
f3:49:1a:6e:4d:b6:13:fd:68:77:d4:80:23:f1:d4:de:6b:ce:
cf:00:58:e6:38:80:88:62:42:95:64:04:08:f6:79:4d:59:2f:
5c:ea:51:53:42:e9:c1:4f:25:66:bf:79:da:62:23:c0:10:29:
01:45:f7:e0:5f:21:68:7c:57:aa:be:ec:24:a7:c0:89:22:f2:
94:cb:bd:f3:a1:ea:2c:f4:c7:cc:6c:a3:ee:90:e1:ba:ad:ed:
f9:01:ba:28:e6:86:18:c0:29:a0:e2:7a:03:bf:ac:8c:b7:c1:
d5:73:34:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:51:45 2026 by rpki-client