Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/bv_AB4zuzThgSz5dZNU3qMbAFIw.roa
File: bv_AB4zuzThgSz5dZNU3qMbAFIw.roa (raw, json)
Hash identifier: GLCsRK1SDrYzkVaaqbJQvIvyA4oj8/biUmBQAjEAEGU=
Subject key identifier: 6E:FF:C0:07:8C:EE:CD:38:60:4B:3E:5D:64:D5:37:A8:C6:C0:14:8C
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019EAF8C5CCDE87A10CC90E988DE900AD29A
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/bv_AB4zuzThgSz5dZNU3qMbAFIw.roa
Signing time: Wed 10 Jun 2026 03:21:12 +0000
ROA not before: Wed 10 Jun 2026 03:21:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215152
IP address blocks: 212.189.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:af:8c:5c:cd:e8:7a:10:cc:90:e9:88:de:90:0a:d2:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jun 10 03:21:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6effc0078ceecd38604b3e5d64d537a8c6c0148c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5a:3a:40:15:64:b5:e2:ea:cc:2f:e8:fe:51:
d2:9f:30:c6:e9:94:f7:7a:a1:fd:0b:d0:8d:fb:9d:
f3:5d:34:0e:43:13:32:6a:53:87:00:d2:eb:2b:4c:
49:82:be:27:4d:95:05:22:6f:e2:1b:fb:0c:4d:36:
fb:dc:30:c7:01:d9:ca:40:0a:71:b5:91:fe:04:e4:
57:a6:22:08:ea:6b:cf:c3:c5:a4:47:da:df:bc:8a:
48:bb:db:7f:c1:c2:21:04:22:47:dd:c9:d4:11:e1:
8e:2a:fd:66:7c:6d:49:6a:bf:28:0a:19:ba:84:80:
1a:18:a1:e4:42:68:65:71:51:6a:ab:17:4e:59:f5:
9b:9d:d3:c7:9a:55:db:c9:2b:71:62:ef:97:62:4b:
d7:ef:6e:73:df:9c:a1:13:e9:10:99:11:11:d5:35:
7a:a3:20:c8:f1:e0:54:b6:d3:a4:59:9f:f2:41:0c:
75:d9:b5:7e:f8:02:7f:b4:18:56:87:4b:ef:ec:5d:
f9:6d:e7:3c:b6:af:97:ca:69:86:97:79:f0:ed:f6:
f7:10:92:87:a4:98:53:52:8a:8c:6f:8c:50:c2:21:
c8:ab:10:22:eb:e8:bc:fc:56:df:59:d5:52:4c:e9:
53:51:19:26:12:2b:df:a6:97:a7:fc:6e:91:10:f5:
30:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FF:C0:07:8C:EE:CD:38:60:4B:3E:5D:64:D5:37:A8:C6:C0:14:8C
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/bv_AB4zuzThgSz5dZNU3qMbAFIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.189.90.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:1c:61:45:b5:ae:b5:47:0f:24:cb:43:8d:8a:0c:73:dd:82:
cd:3f:c4:17:3d:db:9d:a8:57:76:63:d2:76:28:d4:d7:20:0c:
b4:1b:a0:11:1c:1c:cc:a2:90:9c:df:90:45:96:a6:21:d7:6a:
63:bd:42:fa:09:b7:78:93:d8:2f:ad:6e:76:df:3a:38:59:38:
97:33:0a:3d:73:0a:a8:01:77:61:35:d0:dc:0f:2c:45:04:7a:
b7:b0:43:5e:e6:91:6f:a2:10:e0:b2:56:a9:9d:58:cb:d9:85:
b2:5e:aa:e7:02:28:39:5c:87:d4:55:d2:50:18:79:f4:2b:9b:
55:47:56:d5:ad:78:4b:d0:81:fe:fe:c3:b1:92:58:0f:34:a2:
68:df:9e:61:dc:39:23:cd:16:6b:6a:92:14:6d:7e:99:37:45:
44:67:2e:00:9d:c5:34:15:67:04:8e:ef:34:b6:c7:bd:2b:d0:
d8:44:f9:31:04:a5:d7:26:fb:70:19:1c:0d:81:40:d2:bf:b6:
62:6b:f6:98:67:0e:94:db:3e:2d:b3:f9:73:2c:48:ab:49:f3:
8d:b1:2b:eb:b4:81:a5:f1:e5:7c:53:0b:4a:ca:2d:f8:13:d6:
19:d0:ed:86:7c:20:60:d2:59:9d:a1:88:29:91:e0:8e:48:90:
f6:72:10:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:34:31 2026 by rpki-client