Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/BJy-8q5rdLqS1VrgzjydPMIrwPc.roa
File: BJy-8q5rdLqS1VrgzjydPMIrwPc.roa (raw, json)
Hash identifier: 2+PepOInvhAWOYeDFTDRuwPrzFlVe49zW1KY3Vp4ZYc=
Subject key identifier: 04:9C:BE:F2:AE:6B:74:BA:92:D5:5A:E0:CE:3C:9D:3C:C2:2B:C0:F7
Certificate issuer: /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial: 019F23685965B6CC3C6DDBC94825F8DB3236
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/BJy-8q5rdLqS1VrgzjydPMIrwPc.roa
Signing time: Thu 02 Jul 2026 15:17:48 +0000
ROA not before: Thu 02 Jul 2026 15:17:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216308
IP address blocks: 2a10:4646:390::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:59:65:b6:cc:3c:6d:db:c9:48:25:f8:db:32:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Validity
Not Before: Jul 2 15:17:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=049cbef2ae6b74ba92d55ae0ce3c9d3cc22bc0f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bd:64:05:60:94:d9:d2:2f:43:ba:52:18:16:
50:63:5d:86:6f:3f:de:ca:48:9f:67:10:7e:ab:d4:
4c:a4:a7:4c:39:ae:b4:15:4a:95:0a:b6:43:2f:82:
6c:10:a9:09:16:b8:c6:06:b8:d5:59:17:6f:c3:ec:
c8:ff:92:bf:98:88:05:a4:ff:9f:bc:ac:63:78:46:
42:13:2c:86:40:a6:17:60:c7:93:de:4a:11:e8:ac:
e2:c5:29:d7:98:e4:b8:3c:dc:bf:9e:a0:73:5a:a6:
76:3e:67:63:5e:ec:85:c7:d7:9a:2c:51:0c:f4:0c:
79:c6:ff:25:8a:d6:f6:b2:66:8f:cb:e9:67:7b:9c:
d1:d9:75:be:e6:cf:55:99:47:ad:76:78:f5:85:a2:
0c:87:14:4d:38:db:42:ab:d5:db:6c:be:28:c7:29:
a2:24:6f:a1:c7:e6:70:b2:7e:08:73:3e:2b:93:97:
f3:74:75:73:64:94:42:a6:54:20:4c:34:c8:ff:9a:
16:90:87:72:9a:c9:6d:6b:d5:bc:f3:bb:74:92:e8:
7b:ca:33:64:4e:7c:44:60:e7:09:df:a6:e1:ae:46:
30:36:2a:24:4c:bf:e4:a6:2e:dc:65:e8:53:24:25:
c4:23:d9:11:9d:cb:02:73:f5:0d:c8:89:15:74:e6:
2d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:9C:BE:F2:AE:6B:74:BA:92:D5:5A:E0:CE:3C:9D:3C:C2:2B:C0:F7
X509v3 Authority Key Identifier:
keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/BJy-8q5rdLqS1VrgzjydPMIrwPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:390::/44
Signature Algorithm: sha256WithRSAEncryption
93:7f:82:e2:91:01:24:18:56:30:b8:cb:45:34:0c:aa:44:ec:
35:7e:ab:75:f4:ee:19:fa:d6:2f:2b:82:92:a0:a9:17:85:cb:
21:76:82:c5:d7:be:ec:7b:9a:c4:75:a9:e5:65:54:84:42:5f:
fb:11:0a:a4:2e:29:54:36:d3:2c:9e:ba:35:19:a6:3a:0c:35:
eb:0c:d8:e6:36:15:9a:41:dc:31:54:25:ba:e6:5d:f8:bb:39:
7b:65:d0:e7:de:fc:6f:a9:7b:13:b1:17:e6:a4:3c:b9:cb:19:
f2:43:fa:ab:21:72:7a:2d:9f:61:c9:af:b0:4c:da:62:73:c7:
2f:a4:e2:64:2f:ec:e9:b1:5c:ba:4f:8f:4a:4c:0b:df:60:5e:
3f:c6:e0:74:62:b1:ac:6f:67:f3:ca:7d:ed:d0:88:d4:63:b2:
9a:bd:4b:8b:3f:b4:fd:54:98:48:cd:05:bb:f3:44:61:d7:45:
82:8a:ec:0c:7d:80:b9:07:d8:59:24:15:64:d9:fc:ec:83:08:
8c:cf:2b:fb:e6:f0:12:af:44:c8:dd:86:e3:29:9e:a0:c2:d1:
d4:26:64:c0:49:35:8c:b9:e4:b9:3b:85:05:5f:cd:53:01:15:
0e:b5:e0:d9:ed:0f:8a:0f:c3:93:a8:fd:01:91:5b:a8:e8:cf:
6b:2e:f8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 15:59:42 2026 by rpki-client