Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/BL4XBzH6Ns4NK7_vcCN738yqR94.roa
File: BL4XBzH6Ns4NK7_vcCN738yqR94.roa (raw, json)
Hash identifier: eXMiLbg4h7rMEWz2yxMj2oPW+ciyfa5OvO4p9n+6hOk=
Subject key identifier: 04:BE:17:07:31:FA:36:CE:0D:2B:BF:EF:70:23:7B:DF:CC:AA:47:DE
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F2368F1EEC7521DAFE2C8AD1D849E655C
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/BL4XBzH6Ns4NK7_vcCN738yqR94.roa
Signing time: Thu 02 Jul 2026 15:18:28 +0000
ROA not before: Thu 02 Jul 2026 15:18:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 138.188.174.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f1:ee:c7:52:1d:af:e2:c8:ad:1d:84:9e:65:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04be170731fa36ce0d2bbfef70237bdfccaa47de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e1:73:e4:28:2a:5f:ef:85:16:ed:0d:54:e9:
ce:1f:28:b3:ab:7d:eb:e5:06:16:62:54:3d:0d:c6:
51:f8:05:0c:12:61:16:6e:b1:0f:29:69:cb:b1:33:
e7:15:e5:2c:67:eb:69:7e:ee:a7:9f:16:95:f1:10:
93:07:43:b5:f2:ed:50:c7:29:45:91:94:4a:8f:29:
3a:97:1e:1a:45:ca:b0:b7:4c:72:79:3a:12:3e:97:
69:31:b6:ae:82:bb:ec:25:05:84:73:09:b3:43:f9:
05:12:98:27:2c:fa:9d:ab:a9:82:37:ac:40:df:2f:
5a:ce:a1:c9:5c:0a:7f:3b:02:83:3f:c1:a7:be:de:
3d:a9:a9:fa:3b:57:e8:36:2c:73:bc:2b:4c:b4:26:
fd:5a:e7:ea:d6:5e:99:e8:6f:6d:26:c9:e4:af:bd:
6b:f2:1f:b9:a1:f7:3d:dd:b7:d2:d1:e7:d7:59:9f:
40:d4:43:5e:a7:07:81:91:44:9b:f2:01:62:48:cc:
4e:7e:8b:b9:7b:56:ef:e1:98:19:22:7e:ba:7d:82:
43:6e:dd:6c:28:e7:bf:13:6f:30:1b:c5:8e:3f:d1:
a6:83:dd:31:00:51:d7:5a:5e:72:d9:bd:aa:4f:71:
64:e3:3c:e1:5c:5e:53:6d:f5:84:65:be:1c:e9:cb:
31:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BE:17:07:31:FA:36:CE:0D:2B:BF:EF:70:23:7B:DF:CC:AA:47:DE
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/BL4XBzH6Ns4NK7_vcCN738yqR94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.188.174.0/23
Signature Algorithm: sha256WithRSAEncryption
81:8c:ac:a1:2e:35:e5:de:a5:a9:64:a5:45:ca:bc:70:71:2c:
93:e3:ce:88:ed:3d:dd:77:b0:5a:67:2b:1f:2a:3d:b8:76:92:
4d:aa:05:9b:ab:e9:0c:26:f2:7a:38:9e:d8:0f:3f:d8:0c:3d:
72:ff:6c:8c:33:0b:10:e5:43:02:86:e4:fe:a2:a6:91:1d:b7:
23:fa:f2:e9:82:cc:77:ac:4c:02:57:4f:af:bf:23:65:79:72:
51:3c:43:f9:d6:b8:8f:5d:72:ca:1a:f6:97:4e:39:aa:96:e0:
90:8d:4b:44:9b:df:52:79:a1:72:c8:64:82:f7:a7:e4:74:3e:
39:4f:f0:39:94:c7:c1:2b:0a:14:ba:b4:61:3a:dd:86:b7:98:
67:6c:9c:b3:f3:5e:37:74:78:56:6f:c1:1d:38:12:91:7f:fc:
26:27:4f:56:37:6e:7c:bb:8b:7c:f9:0c:47:2d:d3:1b:b1:da:
24:5e:43:46:11:2d:3b:9f:f1:df:31:cc:ee:a4:ca:dd:98:36:
7e:00:0e:d7:d2:77:99:ae:eb:d9:29:de:7a:68:95:9c:cf:15:
55:4d:88:d1:f7:45:55:0d:11:b0:ce:f6:a6:0e:06:49:03:aa:
af:6c:48:02:23:75:3b:39:20:85:94:11:cf:c9:72:1b:cb:63:
cb:9b:45:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:15:48 2026 by rpki-client