Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/BU47z7z_Y06RZfw2ofqMv1bMNB4.roa
File: BU47z7z_Y06RZfw2ofqMv1bMNB4.roa (raw, json)
Hash identifier: Fieu20ana3FmkvsRYULp9mkhQVYADLz/0UnS8WjwRDY=
Subject key identifier: 05:4E:3B:CF:BC:FF:63:4E:91:65:FC:36:A1:FA:8C:BF:56:CC:34:1E
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 019FFFAFEF29CDF036379EAFCE617927E90F
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/BU47z7z_Y06RZfw2ofqMv1bMNB4.roa
Signing time: Fri 14 Aug 2026 09:52:27 +0000
ROA not before: Fri 14 Aug 2026 09:52:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6939
IP address blocks: 84.236.132.0/24 maxlen: 24
88.148.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 08:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ff:af:ef:29:cd:f0:36:37:9e:af:ce:61:79:27:e9:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Aug 14 09:52:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=054e3bcfbcff634e9165fc36a1fa8cbf56cc341e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bb:f0:b1:32:3f:f9:6f:77:67:e8:c4:bd:01:
cd:59:fb:c4:a7:0e:09:d3:8a:ff:bd:f3:45:54:fc:
f5:c5:68:6b:01:36:a3:33:c4:2f:c9:fc:8c:23:67:
1d:74:58:3f:f2:96:89:d8:cc:58:52:c2:b1:b5:b0:
44:29:9c:29:a9:2d:12:44:b9:3b:da:03:f1:9b:62:
89:a9:3c:79:95:1a:24:a2:58:30:2e:6e:e7:a8:7e:
a2:ac:98:25:a7:27:d7:f3:da:1e:b2:6b:8c:2b:09:
77:f1:b5:d1:66:0b:cf:4e:35:21:57:18:1b:f5:93:
67:ad:8f:28:20:e7:f4:a3:dc:01:57:d9:b7:df:66:
4b:e0:60:f1:36:b5:ad:b2:81:ff:99:cb:38:fe:b1:
cf:55:fd:fc:10:44:77:2f:82:6e:31:3e:2a:5a:1a:
fe:33:f8:7c:6c:ea:ce:04:44:b1:ce:23:2c:fe:ca:
d8:7d:68:fa:4a:19:54:fd:5c:a3:c1:75:39:de:a2:
d9:40:63:4b:dc:ea:56:41:7d:52:4c:73:c0:f5:cd:
c4:02:2b:97:8e:fd:75:49:be:0b:60:e6:8d:cf:6f:
ae:04:b0:bb:ce:0c:e6:cc:d4:24:2c:b7:8b:a2:c5:
87:67:17:21:bb:d0:be:ff:63:98:5e:41:53:cf:7e:
c4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4E:3B:CF:BC:FF:63:4E:91:65:FC:36:A1:FA:8C:BF:56:CC:34:1E
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/BU47z7z_Y06RZfw2ofqMv1bMNB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.236.132.0/24
88.148.7.0/24
Signature Algorithm: sha256WithRSAEncryption
24:55:38:5b:1a:ce:6b:55:09:9c:b0:42:85:dc:8a:ea:67:9d:
91:d1:18:f6:82:a0:31:9d:4a:2c:82:59:5b:aa:25:4d:bb:f9:
2b:9d:51:47:d7:69:90:e2:fe:60:79:42:27:92:fa:e6:75:94:
bc:64:a9:a1:73:a9:18:5c:7c:83:6b:34:34:fe:de:18:9f:bf:
ac:2e:77:42:18:bb:5a:92:e9:08:b3:0d:f6:a8:19:e8:9d:83:
68:f8:bf:be:fc:21:cf:a3:ef:a5:f0:c3:55:34:fc:f6:d7:18:
82:b2:d0:b3:78:0a:e1:1c:c2:82:46:79:8b:79:d9:2a:87:43:
d4:27:76:b4:38:9c:a1:52:5a:39:92:1a:85:60:c5:38:b5:13:
1d:17:5c:9e:d3:b2:0f:d1:37:37:84:fc:f5:01:d8:c5:f6:d0:
ad:8e:5b:d7:0f:20:31:92:47:4c:af:18:6d:15:14:cc:65:d8:
6a:2d:15:d7:37:6c:b2:e8:e9:f5:23:10:d0:93:08:a7:17:24:
12:92:96:34:a5:ca:52:27:9c:57:be:bb:48:44:df:b3:16:73:
9a:01:96:c1:e7:49:aa:4e:4e:dc:9c:f1:e2:7e:36:ad:89:06:
02:fe:52:e5:3b:55:87:c1:59:51:b0:15:3e:bf:cb:b3:87:ab:
66:07:9d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:22:52 2026 by rpki-client