Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/BgXy5uZZv8S2TXxh979nzO7cfzU.roa
File: BgXy5uZZv8S2TXxh979nzO7cfzU.roa (raw, json)
Hash identifier: pTbh1QgfnJmp2ldYAtlBszM4uCDoVYQ+P+ph+GkI1zU=
Subject key identifier: 06:05:F2:E6:E6:59:BF:C4:B6:4D:7C:61:F7:BF:67:CC:EE:DC:7F:35
Certificate issuer: /CN=3f65375a4d36f5cae1a1fe2458a380526cfedb6a
Certificate serial: 019FF55E14A88665BB4334320AB68C7DA9B9
Authority key identifier: 3F:65:37:5A:4D:36:F5:CA:E1:A1:FE:24:58:A3:80:52:6C:FE:DB:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/BgXy5uZZv8S2TXxh979nzO7cfzU.roa
Signing time: Wed 12 Aug 2026 09:46:51 +0000
ROA not before: Wed 12 Aug 2026 09:46:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201550
IP address blocks: 178.169.0.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft
rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:5e:14:a8:86:65:bb:43:34:32:0a:b6:8c:7d:a9:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f65375a4d36f5cae1a1fe2458a380526cfedb6a
Validity
Not Before: Aug 12 09:46:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0605f2e6e659bfc4b64d7c61f7bf67cceedc7f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:8e:c2:5d:e7:72:b5:f4:a1:1c:9b:4e:4f:0e:
6d:20:37:58:f2:03:3d:80:be:6a:c6:b7:0e:e0:e9:
41:16:c9:3e:a4:1a:eb:ab:15:e0:3e:2b:a9:cb:10:
9e:89:a6:47:cc:17:32:e3:2d:19:3c:72:23:49:e0:
e1:82:f4:3a:13:16:0e:01:5b:a4:21:ab:13:ba:94:
f8:75:f9:b4:56:db:3f:97:aa:94:19:29:5b:7a:e1:
fe:5c:04:6d:74:cf:f7:e4:32:bd:09:28:f8:3f:d0:
93:42:9f:25:cd:b6:e0:64:42:15:54:e8:88:2c:23:
91:f1:ef:86:8e:8e:4a:dd:2c:15:eb:a0:ab:92:d9:
ee:06:d0:bf:cf:dd:44:5b:97:35:46:2e:4d:95:3f:
01:b5:ec:a0:02:b4:ca:8a:fa:de:95:d1:10:bd:8c:
c7:51:f2:3a:1d:ae:49:72:37:0b:db:ea:d3:3f:67:
60:53:ed:7f:38:61:ad:0d:ae:55:72:2d:95:31:e8:
43:07:9b:49:c2:d9:01:21:52:2f:66:a5:8c:7e:b8:
9b:b6:9c:c8:36:64:f3:4b:4c:20:7f:ce:66:af:8e:
03:b0:88:28:ed:93:23:d1:0d:d1:67:9a:2b:07:44:
1b:79:26:95:7c:43:ff:b0:40:f3:2e:8c:1a:6d:27:
cc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:05:F2:E6:E6:59:BF:C4:B6:4D:7C:61:F7:BF:67:CC:EE:DC:7F:35
X509v3 Authority Key Identifier:
keyid:3F:65:37:5A:4D:36:F5:CA:E1:A1:FE:24:58:A3:80:52:6C:FE:DB:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/BgXy5uZZv8S2TXxh979nzO7cfzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.169.0.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:84:00:c9:1e:b7:9d:12:31:d5:c5:c7:16:ac:a1:0e:20:ed:
fa:e3:45:cc:45:22:61:45:48:d1:5d:a9:a1:ec:cc:e1:f5:0b:
f5:0d:99:90:fa:19:37:86:27:be:7d:0b:eb:2b:bf:21:41:34:
e4:bb:ca:e7:4a:cc:dd:d1:c3:00:e6:bb:96:fb:bb:4a:bd:9f:
c5:e4:90:a8:a7:d9:a8:a1:29:c8:85:5e:ae:4d:be:a7:c1:56:
63:42:4a:ea:0b:84:70:b9:b8:6f:23:e6:97:2d:50:f1:eb:d6:
be:d9:c9:b0:60:24:1f:8c:da:ad:77:cc:5f:27:aa:c5:76:8b:
49:ef:cf:cd:05:a0:b6:5d:d1:a4:dd:2d:3a:4a:7d:4e:df:b6:
64:0d:a4:8f:3e:f0:10:78:2f:d9:b1:09:c1:f9:e9:82:99:82:
cf:a9:c1:b7:f7:3b:93:94:dc:73:3e:e2:2b:62:63:6b:80:b5:
54:1b:6e:b9:2f:5d:52:da:cd:b5:db:7b:23:9e:a2:37:2e:04:
00:5e:56:ae:9b:5c:89:88:5a:49:79:ca:63:16:6a:8b:5f:b0:
c3:3f:44:c3:e0:61:7d:d2:c6:10:92:12:27:ce:82:34:74:b7:
ff:96:d8:79:9b:87:d3:fe:44:48:a9:ff:41:22:b5:d2:48:c8:
5f:d0:ad:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:59:36 2026 by rpki-client