Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/BxxzUdjMq19FQJ540u0IrYRzPQA.roa
File: BxxzUdjMq19FQJ540u0IrYRzPQA.roa (raw, json)
Hash identifier: /7Sygg5gvMl4eky8RxF25aZxNJNqacKTtDYvyyUxadw=
Subject key identifier: 07:1C:73:51:D8:CC:AB:5F:45:40:9E:78:D2:ED:08:AD:84:73:3D:00
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01A05CF2D454BB143E890D89817876BA436C
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/BxxzUdjMq19FQJ540u0IrYRzPQA.roa
Signing time: Tue 01 Sep 2026 12:30:12 +0000
ROA not before: Tue 01 Sep 2026 12:30:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216078
IP address blocks: 193.178.226.0/24 maxlen: 24
193.200.78.0/24 maxlen: 24
2a06:5fc0::/29 maxlen: 29
2a0f:9b40::/29 maxlen: 29
2a10:b40::/29 maxlen: 29
2a13:bb40::/29 maxlen: 29
2a13:c340::/29 maxlen: 29
2a14:1100::/29 maxlen: 29
2a14:6a40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 22:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:f2:d4:54:bb:14:3e:89:0d:89:81:78:76:ba:43:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Sep 1 12:30:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=071c7351d8ccab5f45409e78d2ed08ad84733d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ea:59:bb:88:bb:ef:f8:7d:d0:4a:41:1c:2a:
de:f4:db:7a:b2:31:51:4c:a3:92:0c:94:bf:8a:f3:
81:ea:7f:bd:c5:9b:57:33:3d:bc:23:bd:a5:40:12:
bd:5d:50:fe:e1:0f:68:86:de:c9:cb:b2:d8:cf:9e:
8f:99:be:de:40:ee:78:5f:6a:07:42:53:83:27:5a:
74:92:38:15:d5:8c:0f:ac:8b:05:67:ae:d7:68:95:
f9:f1:5e:6b:ec:9e:47:e6:fe:ad:a5:22:4a:e0:99:
ff:56:0a:09:e9:38:df:8b:57:88:15:f6:7b:c1:f9:
36:07:52:6f:3b:33:81:92:58:6f:91:ae:cf:ba:96:
c9:91:e5:93:3e:9e:ab:2a:3a:49:51:13:ce:37:04:
1f:39:ba:39:18:9a:01:6c:70:46:b0:55:46:1f:4b:
e1:09:2c:48:09:6f:bc:d0:25:30:a7:72:34:c6:e0:
d9:af:ce:01:79:70:f4:f4:55:a6:e2:69:45:f3:ac:
19:72:f2:e5:8c:05:4c:50:bf:39:5d:9f:d9:80:df:
43:c7:7d:2c:a8:1c:47:d8:ae:56:9e:44:3b:82:1e:
e7:a2:24:91:31:fb:02:41:b7:0b:11:6e:49:8a:9c:
97:b4:d9:6c:ca:da:cd:1a:ac:b7:ad:c3:a7:f1:66:
73:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1C:73:51:D8:CC:AB:5F:45:40:9E:78:D2:ED:08:AD:84:73:3D:00
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/BxxzUdjMq19FQJ540u0IrYRzPQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.226.0/24
193.200.78.0/24
IPv6:
2a06:5fc0::/29
2a0f:9b40::/29
2a10:b40::/29
2a13:bb40::/29
2a13:c340::/29
2a14:1100::/29
2a14:6a40::/29
Signature Algorithm: sha256WithRSAEncryption
d9:b6:9c:43:4b:24:30:6b:0e:e9:c2:e2:04:94:16:44:71:d5:
49:aa:29:4e:cf:54:d2:25:f5:ec:d8:0e:63:c6:ee:3d:8b:57:
3a:f1:b2:fd:c6:56:49:57:4e:72:4c:57:bc:20:96:ab:fd:63:
8b:fb:ac:0d:44:aa:f8:6c:91:ae:95:cb:dc:b8:e0:30:0f:dd:
b5:96:61:6e:ba:3d:01:f1:1a:de:f1:0c:50:f3:54:32:ec:9d:
16:54:16:e1:76:be:98:83:0f:1c:ac:5c:de:e4:83:78:17:b4:
83:c0:7d:0b:23:ff:1e:fb:eb:a0:d4:44:c3:e7:64:4d:8c:63:
19:bf:19:c1:fe:f3:61:2a:3b:76:f0:2f:47:10:37:ba:9b:e9:
b2:84:84:21:ac:b5:90:8d:3b:72:7c:c1:c2:08:bd:85:04:d3:
42:f6:d7:8a:c3:6a:cc:c5:03:a0:6e:0b:98:b5:03:05:27:46:
ac:a5:e7:f2:8d:12:59:fa:7d:9c:be:da:cf:e6:33:4b:11:93:
c7:7a:0f:0a:63:1a:57:34:37:0b:36:4e:6f:24:74:29:ab:2a:
44:69:1b:b3:ec:39:42:c4:a4:a1:f0:c0:32:3b:a7:98:31:a7:
1f:6b:91:e4:41:ab:93:9a:1e:45:3a:f9:86:d9:2f:96:8a:c5:
93:fa:6b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 05:11:12 2026 by rpki-client