Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/bjExBpSltEKhurRNrQgqLtOmwNY.roa
File: bjExBpSltEKhurRNrQgqLtOmwNY.roa (raw, json)
Hash identifier: n9fThTUInzd+8V5zYYstfAmIUgga0VYAQGglIf+UzEs=
Subject key identifier: 6E:31:31:06:94:A5:B4:42:A1:BA:B4:4D:AD:08:2A:2E:D3:A6:C0:D6
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 019DDD5CA3E9E54D283AAF0AA354EC059F38
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/bjExBpSltEKhurRNrQgqLtOmwNY.roa
Signing time: Thu 30 Apr 2026 07:48:49 +0000
ROA not before: Thu 30 Apr 2026 07:48:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209242
IP address blocks: 109.229.216.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:5c:a3:e9:e5:4d:28:3a:af:0a:a3:54:ec:05:9f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Apr 30 07:48:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e31310694a5b442a1bab44dad082a2ed3a6c0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:2c:a9:eb:2b:98:23:10:98:cc:e0:f3:f0:ab:
51:1c:b8:57:0b:f8:f5:d3:11:eb:26:10:90:1f:af:
0e:0a:bb:d0:d2:e0:69:29:f0:40:3c:9a:fb:da:4e:
c0:f8:80:64:27:7e:71:12:3b:fe:a4:33:94:9b:d5:
5a:f0:ff:71:a8:a0:26:29:60:cd:8b:0a:a6:26:df:
55:e8:d9:f7:f6:32:d2:89:4a:a2:89:56:d7:33:b6:
3a:77:5a:3d:fc:fe:d0:3e:a1:ba:fc:0b:79:7b:25:
0e:c6:d1:c6:7b:62:f3:66:4e:0e:13:76:d1:80:a7:
26:18:b7:cb:49:d9:9e:1d:d4:aa:be:c2:0c:26:95:
bc:87:d6:34:a4:9c:06:79:01:c5:d4:38:05:87:18:
a6:9c:c4:5e:c6:fc:fd:8a:c5:6f:3e:2a:b1:b5:bd:
8e:d1:4e:69:9f:b4:bd:5a:61:8d:65:22:b6:1d:09:
c2:0c:59:4d:44:64:24:f4:48:8c:d8:ba:db:74:f6:
b3:e2:93:f8:50:8c:cb:28:4e:bc:7f:c2:98:b8:08:
a5:d6:ba:8f:24:6d:69:bc:91:52:d9:a7:53:08:e0:
9b:0b:a6:d5:24:c1:e9:a0:7b:7c:ef:54:55:3d:da:
8f:92:b0:da:61:56:3a:b5:2d:cd:59:53:5d:14:96:
c1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:31:31:06:94:A5:B4:42:A1:BA:B4:4D:AD:08:2A:2E:D3:A6:C0:D6
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/bjExBpSltEKhurRNrQgqLtOmwNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.229.216.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:36:00:7b:99:b2:b7:9d:d3:cf:f6:e9:12:25:5d:ad:11:6e:
1a:82:2e:14:45:8a:92:61:55:e1:d4:b8:24:10:8e:38:ab:c4:
71:a1:04:8f:99:3e:0e:e2:ac:31:d3:9c:ef:45:48:a0:2e:46:
f4:0a:de:a1:41:d6:39:e1:88:ee:84:9d:83:eb:e9:37:5f:3b:
d5:0c:46:78:49:d3:7d:bf:3e:a1:70:67:8f:97:4d:d8:27:66:
12:9e:3b:c4:f8:ec:b2:1b:44:55:d7:de:40:5b:7d:53:1f:92:
e3:7c:6b:46:fb:ec:53:54:cc:38:9d:dd:f2:17:5d:28:93:a2:
e8:a4:13:87:c5:dc:d3:ef:0f:da:b7:24:b9:a6:e0:38:6f:f6:
4c:61:a6:b7:56:c9:57:30:fc:e0:4f:b4:3d:9f:3e:33:ea:0e:
1c:4d:91:bd:1d:92:39:e3:9f:99:1f:ed:42:3a:f7:33:6f:6a:
47:1e:05:14:77:33:20:94:bf:bf:62:68:e7:9f:90:f7:14:54:
0e:7c:b4:9f:98:bf:b0:d6:7c:00:d6:23:0a:8a:40:9b:4c:01:
ca:20:49:b1:c5:83:9a:c1:f6:dc:ee:db:84:16:2e:b4:68:33:
b6:db:4f:97:a8:51:f6:ae:41:e8:a1:7d:20:ff:94:62:81:39:
2d:db:1a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 12:31:37 2026 by rpki-client