Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/BJmU-HGFpMA_HDiqzUyBdFdhGj8.roa
File: BJmU-HGFpMA_HDiqzUyBdFdhGj8.roa (raw, json)
Hash identifier: sz0TS98SmOKCV0NeGluorn4WucqlrBaDHpHmfIfGVMw=
Subject key identifier: 04:99:94:F8:71:85:A4:C0:3F:1C:38:AA:CD:4C:81:74:57:61:1A:3F
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019F5B75BA78225CBE9E7B20EB0B4A41D334
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/BJmU-HGFpMA_HDiqzUyBdFdhGj8.roa
Signing time: Mon 13 Jul 2026 12:31:09 +0000
ROA not before: Mon 13 Jul 2026 12:31:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a10:3c85::/32 maxlen: 32
2a10:3c86::/32 maxlen: 32
2a13:c240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 21:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5b:75:ba:78:22:5c:be:9e:7b:20:eb:0b:4a:41:d3:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jul 13 12:31:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=049994f87185a4c03f1c38aacd4c817457611a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:48:b3:93:f3:77:93:41:4e:41:20:f8:b7:77:
b4:8b:29:5e:02:0f:e6:4e:e7:26:48:27:e1:5f:94:
23:a8:36:94:e8:3a:e8:d0:12:50:02:cf:be:7d:76:
6b:a1:a9:dd:b5:ce:a9:44:f2:27:11:42:51:ee:37:
0f:8f:0e:c9:0d:bd:e5:20:f3:7e:40:98:4b:97:a4:
0e:95:55:d4:fc:e9:58:dd:17:4f:b7:57:99:3a:81:
8f:44:4b:7d:ef:1b:8b:82:70:28:8e:c2:02:7d:65:
62:69:ce:54:28:6a:b9:8c:ed:2c:1d:d5:5e:bd:64:
7b:20:6e:35:09:25:17:f8:a2:77:f1:71:a2:77:29:
f7:63:7c:0e:6e:5f:37:99:62:64:b3:47:fe:85:1b:
10:ba:e1:40:26:43:9a:e6:c6:37:0e:df:6d:38:bc:
2f:94:7a:48:d0:1c:e0:a1:b2:35:83:28:6c:e9:ba:
0e:a2:3e:62:e0:fc:8e:c1:3c:69:96:68:ee:31:af:
d7:d3:b2:95:13:bb:c5:04:26:6e:ad:81:c5:e1:4f:
12:3c:1f:f9:ab:b6:b7:01:0e:99:53:10:fb:b2:68:
2d:c1:f6:ea:ab:a0:98:ed:07:21:e2:39:d6:41:1d:
8c:20:de:e3:54:e5:9a:58:b2:cb:d5:a3:9c:b7:dd:
10:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:99:94:F8:71:85:A4:C0:3F:1C:38:AA:CD:4C:81:74:57:61:1A:3F
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/BJmU-HGFpMA_HDiqzUyBdFdhGj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3c85::-2a10:3c86:ffff:ffff:ffff:ffff:ffff:ffff
2a13:c240::/29
Signature Algorithm: sha256WithRSAEncryption
b7:76:86:c0:26:53:e9:a6:d8:2a:80:0f:95:72:af:23:e2:d6:
42:61:09:1f:46:b1:9c:04:5f:84:63:97:4e:5d:c4:4a:81:0b:
92:fa:8d:e2:c0:04:d4:62:fc:88:69:3b:dd:22:89:c6:d7:03:
f8:be:1b:b0:81:d3:63:5d:1b:77:97:9e:a1:3f:b8:02:25:e7:
91:35:03:5a:99:3d:c4:d2:f5:10:9e:29:c0:00:62:42:3f:14:
76:72:f9:d3:5d:06:4d:69:55:e5:e0:52:18:49:3a:c3:fe:5f:
d8:1a:ab:fe:40:d2:11:f5:3c:c4:b8:66:fe:c8:a5:4b:8c:e7:
99:c9:87:6a:ce:2d:51:99:ab:9c:66:e8:34:ce:a9:a1:45:f0:
c5:14:b7:7f:80:16:8e:20:a7:1d:6f:42:80:97:c1:f6:97:a0:
cd:c6:0b:85:f4:9c:62:5a:ca:51:e6:bb:55:fe:d1:82:f3:99:
63:44:8e:29:14:04:1f:d3:9f:49:33:d6:f4:f3:f5:b6:22:a8:
d1:1c:08:0e:90:35:00:3d:54:84:48:db:2b:69:e6:16:e6:d8:
62:03:ac:c3:52:39:45:be:26:81:8a:7c:bc:35:f7:35:35:b6:
76:1c:0d:15:85:6a:18:c0:65:10:d8:4e:8a:8f:6b:50:d3:35:
e1:ec:89:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 07:46:50 2026 by rpki-client