Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/bGjbi903t76xUzuFaqUP7yoLH7s.roa
File: bGjbi903t76xUzuFaqUP7yoLH7s.roa (raw, json)
Hash identifier: DadTW8j0y9iAWAp+yCzHjVkmFV2iNFLu5SO/BT4Zlhw=
Subject key identifier: 6C:68:DB:8B:DD:37:B7:BE:B1:53:3B:85:6A:A5:0F:EF:2A:0B:1F:BB
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 019E605EF7BE7B3C3132F116C64B3A7B668B
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/bGjbi903t76xUzuFaqUP7yoLH7s.roa
Signing time: Mon 25 May 2026 18:21:36 +0000
ROA not before: Mon 25 May 2026 18:21:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19318
IP address blocks: 194.61.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 May 2026 12:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:60:5e:f7:be:7b:3c:31:32:f1:16:c6:4b:3a:7b:66:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: May 25 18:21:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c68db8bdd37b7beb1533b856aa50fef2a0b1fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e2:8e:6d:8f:74:3b:d7:8b:6c:f3:b2:f2:49:
45:e3:2e:ba:d7:bd:9a:b1:95:2c:84:3d:41:cf:c9:
c4:09:dc:19:37:2d:ac:5e:d5:33:65:39:26:a7:0c:
6c:e8:87:17:c4:86:c8:22:11:ef:37:e9:2a:9e:66:
cf:cc:b2:50:57:50:72:d1:e8:bc:58:61:4a:7d:fa:
60:1f:21:4d:92:3c:68:88:57:53:94:db:82:73:41:
31:f6:2d:1a:45:39:6a:11:c6:e9:f5:e4:a0:f0:89:
a3:41:a6:b9:6c:2c:32:0d:50:69:e9:6e:d9:2d:e1:
5d:06:2a:95:27:6a:a4:95:d7:e7:3c:a4:f8:19:0f:
4c:c1:a0:55:db:3d:58:c7:79:85:01:98:e3:a5:99:
79:d6:65:6c:04:44:6d:ed:37:8f:b2:a0:5a:f9:bc:
bc:62:e0:2c:4a:88:16:a0:3a:e9:ff:0d:4b:07:35:
37:51:d4:3d:a9:4b:e3:6e:43:d9:3c:20:8d:65:83:
87:ca:99:8d:54:ef:b7:80:c1:96:30:54:0f:21:23:
88:33:42:85:d9:50:48:16:07:aa:70:b7:fd:32:83:
51:8a:86:5e:c4:e5:42:b4:20:f9:9e:d5:00:a5:a9:
61:41:fd:12:49:7d:ea:3d:e7:26:76:85:7f:ed:67:
ff:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:68:DB:8B:DD:37:B7:BE:B1:53:3B:85:6A:A5:0F:EF:2A:0B:1F:BB
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/bGjbi903t76xUzuFaqUP7yoLH7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.9.0/24
Signature Algorithm: sha256WithRSAEncryption
07:ad:ed:52:ca:67:1b:d9:c1:1c:3d:b1:b8:0e:13:31:ae:4e:
b1:a4:4d:b5:9d:74:6d:3f:86:6c:29:00:e7:c2:a4:88:c0:97:
6f:c4:b0:cb:74:f3:34:cc:6d:c1:dc:68:bc:c3:4a:a5:22:03:
9e:69:80:4c:c8:66:7c:28:c2:76:49:83:1b:a5:5e:cd:bb:04:
78:ab:41:9b:eb:91:31:7b:09:83:ef:37:88:ee:1b:e8:e8:1b:
9e:74:a5:c8:58:79:47:1d:c5:90:5d:4d:94:ae:55:26:1f:5f:
44:3f:bc:65:d4:d1:70:45:0d:10:ab:1f:b3:f7:01:22:dc:95:
f1:ef:3f:f7:f6:c7:c4:10:0d:e3:cf:bd:3d:c8:fb:d5:c3:3a:
57:eb:f1:51:70:59:ff:b9:f8:76:d1:c0:17:44:0b:e9:51:75:
cd:f2:46:e5:5c:30:a7:b7:16:91:c3:a3:dc:56:c2:cf:5c:db:
b1:77:b4:f7:a3:5b:1f:27:bd:e5:ab:c3:46:a2:e1:48:22:89:
ec:8b:8d:fa:55:e4:43:01:f9:c6:17:44:1d:34:04:a3:05:f7:
55:9c:ec:bf:bf:32:e0:c8:22:e0:54:74:f2:0f:46:0e:90:a0:
25:bc:c0:80:9b:37:ad:4f:01:6d:2b:55:1d:e4:59:48:5c:c4:
4b:3c:37:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 20:46:32 2026 by rpki-client