Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/BL4Vtry3hEpte5DWArEP18F1cE0.roa
File: BL4Vtry3hEpte5DWArEP18F1cE0.roa (raw, json)
Hash identifier: gofiyS9syREpyRSAEswnOrvXK3X11R7n1mcI61HsmZo=
Subject key identifier: 04:BE:15:B6:BC:B7:84:4A:6D:7B:90:D6:02:B1:0F:D7:C1:75:70:4D
Certificate issuer: /CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Certificate serial: 019FB27BF2EDD8048461B1CFE80B19B951E5
Authority key identifier: 91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/BL4Vtry3hEpte5DWArEP18F1cE0.roa
Signing time: Thu 30 Jul 2026 10:04:55 +0000
ROA not before: Thu 30 Jul 2026 10:04:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57551
IP address blocks: 82.112.168.0/24 maxlen: 24
82.112.169.0/24 maxlen: 24
185.143.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 22:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b2:7b:f2:ed:d8:04:84:61:b1:cf:e8:0b:19:b9:51:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91381bc969de6adc3d1ddc0eb89bdeeace9805cd
Validity
Not Before: Jul 30 10:04:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04be15b6bcb7844a6d7b90d602b10fd7c175704d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:38:f4:a4:6d:fc:af:cb:b3:d3:63:34:b5:69:
30:79:b0:0d:cc:80:b3:e9:39:fc:0a:4a:27:1b:74:
45:88:53:35:9e:71:c3:54:5a:da:4f:40:0e:fa:51:
13:9b:26:4f:1f:28:90:11:15:b6:0d:d8:27:94:16:
e5:e1:5d:59:28:44:4e:8a:73:7e:e1:c3:50:40:e7:
bb:e9:b7:e4:9a:04:df:18:17:7a:11:bd:92:48:90:
99:7f:e3:3a:dd:64:75:5f:c5:44:aa:88:e8:fa:25:
55:c3:21:42:f8:0a:dc:94:82:d8:76:fc:29:9e:d8:
05:f3:b5:3a:b5:25:58:d4:b8:b3:69:50:01:8b:0b:
c8:40:ec:0d:21:cc:e7:df:09:b5:cf:9d:8b:af:d5:
0e:71:9e:50:a9:9c:60:f9:8f:5c:fb:62:84:10:32:
c9:b6:b0:11:0e:61:75:4b:66:67:55:b7:32:00:f3:
f7:14:54:62:a0:36:ee:e8:0a:d8:07:87:61:d7:64:
8f:0e:95:9b:9d:15:96:36:cb:a1:7b:b3:cd:83:3f:
6c:61:99:65:aa:ae:4d:19:41:09:00:23:af:ee:d3:
1a:49:62:6e:f1:a6:a7:f0:07:5c:30:1f:60:3c:5d:
19:c4:6a:e7:94:4e:22:9a:f5:8d:f0:a9:c8:46:21:
e2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BE:15:B6:BC:B7:84:4A:6D:7B:90:D6:02:B1:0F:D7:C1:75:70:4D
X509v3 Authority Key Identifier:
keyid:91:38:1B:C9:69:DE:6A:DC:3D:1D:DC:0E:B8:9B:DE:EA:CE:98:05:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTgbyWneatw9HdwOuJve6s6YBc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/BL4Vtry3hEpte5DWArEP18F1cE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/f35406-d8c4-4f5c-92ac-256da95d1345/1/kTgbyWneatw9HdwOuJve6s6YBc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.112.168.0/23
185.143.76.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:75:2a:51:9d:25:79:8a:63:6d:09:df:e6:1f:2a:26:1f:fd:
95:70:e5:98:90:f2:2f:04:a3:90:e0:f1:d5:38:3a:93:1b:bf:
eb:ff:da:7a:e6:d4:0b:0d:cb:8b:41:61:f7:1d:b2:55:c5:e7:
71:4c:20:cc:34:fa:f4:c7:a0:a6:ea:33:4e:56:24:ae:75:b3:
ef:78:ad:b4:fc:6d:42:4a:a3:2a:a1:af:3a:1e:ef:cd:ca:26:
14:fd:eb:96:ce:c4:36:a9:0c:3f:0d:e6:f2:4a:3c:b8:87:b7:
74:a9:4f:b7:c5:cd:51:6f:7f:46:2c:08:6d:ca:ae:af:ad:4d:
19:d8:54:e1:15:01:c5:a7:b7:52:de:6c:d2:95:bf:01:37:69:
14:f8:3f:65:57:76:02:4f:a4:d1:c2:f3:a0:b0:f1:12:f9:2e:
9b:bd:5e:2a:37:2f:b0:2a:d5:0d:4c:00:c7:6f:bf:29:2f:71:
03:5f:49:c2:8f:a7:9c:97:18:73:ad:27:c4:4a:ee:d6:f6:08:
3e:41:66:58:9a:c5:3c:f3:a2:f0:55:91:6a:bd:a8:37:e1:fb:
8a:f4:ce:64:95:d4:c7:58:bb:fa:10:26:33:e2:02:0c:0c:42:
0f:82:21:a1:da:f5:56:3b:e6:54:c2:00:c5:0b:33:5a:99:35:
b6:a5:af:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 05:49:38 2026 by rpki-client