Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/bhp3y_f6Un_Q0kTrAp6y_wnK3mk.roa
File: bhp3y_f6Un_Q0kTrAp6y_wnK3mk.roa (raw, json)
Hash identifier: Pa00LmFZ6kIiIzfJKOrZCpDC6xFB38IR+csIS5OWKYQ=
Subject key identifier: 6E:1A:77:CB:F7:FA:52:7F:D0:D2:44:EB:02:9E:B2:FF:09:CA:DE:69
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 019F646D791BEB24AA0518BD1AADA74D9099
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/bhp3y_f6Un_Q0kTrAp6y_wnK3mk.roa
Signing time: Wed 15 Jul 2026 06:18:43 +0000
ROA not before: Wed 15 Jul 2026 06:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25369
IP address blocks: 89.23.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:64:6d:79:1b:eb:24:aa:05:18:bd:1a:ad:a7:4d:90:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Jul 15 06:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e1a77cbf7fa527fd0d244eb029eb2ff09cade69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:96:b8:8f:13:98:d0:1c:c5:70:b9:2c:74:dd:
87:2f:20:f7:28:f7:35:51:ac:00:c8:7a:79:f4:9f:
f3:eb:c9:02:dd:09:19:31:3d:13:b9:01:5e:9e:19:
a6:dc:3d:60:16:70:78:92:61:17:7b:61:13:3d:1b:
aa:6f:2b:e6:30:61:cb:66:bf:16:f5:87:de:21:22:
08:f0:79:5f:74:6f:a6:b2:34:e4:a5:58:0b:c7:22:
4a:4d:32:e4:f0:92:be:f6:9c:c5:e8:17:62:dd:94:
cf:ec:10:1c:49:16:89:5d:d8:5f:2b:27:2d:60:f1:
2b:19:a1:26:aa:da:6f:6d:45:f6:d1:8e:6b:0a:db:
ad:d7:61:76:c1:6a:92:3c:97:14:20:41:bf:be:bd:
37:eb:83:f9:eb:5b:e8:66:71:a5:e3:79:57:7a:91:
b7:8a:c6:ff:64:f1:93:12:31:d8:d7:25:66:d2:d1:
05:d0:40:01:ff:f6:58:4e:fd:de:86:bf:a3:83:ce:
b5:0a:a2:c2:7a:01:36:27:79:00:28:2e:e1:d6:6c:
1c:b7:e3:2b:cb:d0:8f:f7:dd:45:3f:39:26:8a:3f:
85:2d:b3:a4:a8:7e:6f:16:44:35:7f:01:8a:0e:f5:
cd:f3:64:93:7a:83:d6:6a:fb:20:da:d5:3c:e6:00:
92:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1A:77:CB:F7:FA:52:7F:D0:D2:44:EB:02:9E:B2:FF:09:CA:DE:69
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/bhp3y_f6Un_Q0kTrAp6y_wnK3mk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.23.87.0/24
Signature Algorithm: sha256WithRSAEncryption
15:36:f4:b4:b5:f4:c9:33:db:db:15:9b:7e:69:f5:9c:0a:1f:
ef:91:4d:7a:a4:c7:68:37:53:84:80:bb:a1:a1:48:1c:1c:fa:
c1:41:a6:be:12:b4:77:93:54:91:f8:0b:da:9f:c8:07:fa:72:
2d:02:d7:62:82:b4:f8:74:1e:12:66:fc:c5:38:e6:a0:23:b2:
6e:27:f4:f8:a5:15:28:03:7a:b3:08:3f:6c:5a:3a:b3:85:16:
1b:d0:07:b7:10:36:c5:26:f5:23:74:02:95:b5:2e:19:2a:ff:
73:ac:b6:7c:f9:91:e3:40:86:ad:9d:d9:ed:54:fd:b9:89:b7:
de:89:96:ad:6f:f4:85:65:fb:d3:d6:96:4f:9e:fb:60:bd:d4:
9b:cb:6e:30:bb:7d:85:90:fa:64:67:67:d2:b6:cb:38:ea:6c:
a4:ae:23:56:02:ba:9d:30:20:2e:95:81:c0:ec:e6:9b:95:30:
31:a6:e1:fa:5f:a5:0c:67:f8:6f:28:64:fc:1c:9d:39:77:5f:
f1:fb:00:90:6b:c3:60:a6:d8:76:7f:e3:a7:26:52:a2:e2:68:
95:14:53:d6:db:5c:30:cf:a4:f4:a2:ec:5b:db:e6:e5:c3:f6:
bd:18:06:fc:7f:a7:ef:97:95:dd:78:5e:6b:7f:fd:8a:15:db:
dc:01:74:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 20:27:56 2026 by rpki-client