Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/bJDzZLJ3Q_rOKXE5Th0VY_-BSgE.roa
File: bJDzZLJ3Q_rOKXE5Th0VY_-BSgE.roa (raw, json)
Hash identifier: 60q/AJKze0uGjs45bpmZFLeW+Net4H7H5NHfX3Pcijo=
Subject key identifier: 6C:90:F3:64:B2:77:43:FA:CE:29:71:39:4E:1D:15:63:FF:81:4A:01
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01A0470D9F122F2ADEBF7063246DCDFBA2EC
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/bJDzZLJ3Q_rOKXE5Th0VY_-BSgE.roa
Signing time: Fri 28 Aug 2026 06:27:49 +0000
ROA not before: Fri 28 Aug 2026 06:27:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219094
IP address blocks: 193.105.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:0d:9f:12:2f:2a:de:bf:70:63:24:6d:cd:fb:a2:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Aug 28 06:27:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c90f364b27743face2971394e1d1563ff814a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d9:6e:23:0d:ec:ec:91:38:74:42:12:db:33:
0f:84:cf:03:71:d0:41:49:52:19:f5:00:9d:bb:1d:
f8:92:ac:a5:be:f6:15:ae:ba:4b:af:0c:0e:40:b8:
66:8f:32:09:53:ca:52:1a:63:35:d7:73:45:e2:96:
ea:bd:04:9b:23:47:0c:3b:25:0a:1d:70:4a:22:a7:
3a:75:02:27:e0:a8:2a:0c:77:83:df:82:e2:93:b8:
a7:65:28:31:a8:82:98:e3:49:ce:cd:b6:c9:80:2c:
4b:b5:e8:1d:0a:19:59:c6:dc:77:c2:48:7f:6f:92:
59:21:6e:f1:76:e2:48:8c:c2:9c:b2:bb:b0:05:cd:
f4:87:f0:b9:ef:89:49:29:b4:0e:7e:54:97:0e:54:
bb:31:e8:07:44:2e:c5:80:82:01:6a:c1:cb:59:c4:
d1:96:dd:1b:8f:43:8f:4a:3d:f7:30:55:84:a2:f8:
69:28:bc:87:7c:d8:62:a4:ae:76:67:e2:6d:da:1b:
f2:43:f9:8b:62:86:5e:82:fd:99:c8:86:bd:e2:78:
af:72:8a:76:3e:5c:aa:63:e0:aa:1f:13:51:72:bf:
18:dd:cb:9d:00:e6:e9:54:11:5f:c7:dc:5f:6c:18:
91:60:7c:78:f7:f3:de:09:57:92:38:82:3a:50:28:
99:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:90:F3:64:B2:77:43:FA:CE:29:71:39:4E:1D:15:63:FF:81:4A:01
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/bJDzZLJ3Q_rOKXE5Th0VY_-BSgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.177.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:fe:91:c8:55:90:d3:bb:41:e0:58:30:af:87:ef:e2:c1:5c:
b5:86:cf:ca:ca:6b:d8:7a:72:4e:ba:f5:dc:46:35:21:7a:b3:
57:48:e7:1f:be:3b:b3:1c:78:cd:6c:c1:23:52:e1:0c:40:ed:
5b:71:3a:f0:7f:b9:22:de:8c:b8:95:3b:c3:9a:99:ce:e4:c1:
6f:25:f2:3f:88:c6:6a:d9:ff:b6:b4:2a:1e:2a:49:8c:bc:5d:
53:13:f8:c6:c4:e5:c2:be:f6:68:2f:84:fc:ed:bb:46:0e:d6:
6f:24:0d:a1:9a:ca:4b:34:ec:9c:e7:82:10:de:2a:28:f3:e2:
c4:b0:cb:61:d1:78:0b:a5:93:70:83:93:bb:fa:d7:69:95:4d:
88:d6:ce:f4:1c:14:34:66:d6:38:8a:c8:6f:09:4d:74:c1:a5:
e8:47:0c:e6:cd:cc:56:e5:46:c9:5d:a5:81:36:f2:93:44:17:
99:02:f6:fe:b4:bc:54:cd:27:1b:fb:81:35:6a:bc:d4:32:ab:
6a:a9:d0:75:b4:e1:37:24:c1:5f:a7:4e:1f:1c:a0:0c:85:9e:
86:e3:f3:9e:88:bb:f1:fa:7e:5c:15:78:23:ca:22:e3:2d:55:
ed:e3:45:eb:47:4b:e4:8b:e6:80:e4:b2:b8:8a:8b:28:da:82:
42:8f:eb:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:33:12 2026 by rpki-client