Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/bgwpe1XPspHXw9-58fArYTkDdSE.roa
File: bgwpe1XPspHXw9-58fArYTkDdSE.roa (raw, json)
Hash identifier: sTc3tvfZWKn7t7t02X8dggAsRS/C7RCVtpCWcGveXWw=
Subject key identifier: 6E:0C:29:7B:55:CF:B2:91:D7:C3:DF:B9:F1:F0:2B:61:39:03:75:21
Certificate issuer: /CN=63883a79789d9f65815292f18d4980ba9c5ed221
Certificate serial: 019E8BB442B79A6F221D62320D001ED01820
Authority key identifier: 63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/bgwpe1XPspHXw9-58fArYTkDdSE.roa
Signing time: Wed 03 Jun 2026 04:18:27 +0000
ROA not before: Wed 03 Jun 2026 04:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49915
IP address blocks: 152.236.0.0/16 maxlen: 24
152.236.128.0/19 maxlen: 24
2a0a:1800::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8b:b4:42:b7:9a:6f:22:1d:62:32:0d:00:1e:d0:18:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63883a79789d9f65815292f18d4980ba9c5ed221
Validity
Not Before: Jun 3 04:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e0c297b55cfb291d7c3dfb9f1f02b6139037521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:83:88:24:06:9a:2f:a5:ee:a2:87:99:ba:4f:
0e:40:12:eb:ed:b4:7d:b4:50:82:3d:62:b2:18:89:
db:c4:21:4a:91:fb:fd:6c:c5:ff:8d:f5:d3:9a:6c:
9c:c7:4c:4d:8d:7c:99:c1:7c:95:72:fe:84:7a:75:
78:02:d3:52:08:99:82:97:c5:8e:dc:35:d1:e9:12:
5e:eb:86:10:13:28:53:cd:b2:47:c5:dc:40:1e:f3:
4e:de:99:f4:ad:45:1f:0e:9f:0c:9c:a7:f5:a1:9a:
31:06:c2:e2:dd:d6:e8:09:95:80:8f:9e:ff:1e:7f:
9e:da:9f:0b:c6:b0:81:fb:bf:90:93:22:72:47:f3:
dc:ad:7c:61:6e:f2:f8:c4:88:18:d1:84:79:b0:c0:
d6:e0:c9:8f:22:55:c7:66:f9:06:56:7d:ca:d4:9d:
c3:ff:39:25:ee:45:ed:8d:02:42:8e:98:99:9d:25:
92:4b:bf:61:2d:83:48:5b:0c:d9:1d:61:7f:f0:f6:
eb:5b:1e:66:6b:16:4e:25:33:e8:fc:be:a0:22:56:
bb:1b:12:22:ad:8b:9d:56:e3:ca:c0:dc:5d:35:9c:
7c:48:42:70:99:7d:1c:f2:42:a6:08:0f:cd:0b:cc:
83:79:50:75:92:e8:72:33:a1:52:25:2f:17:7a:98:
44:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0C:29:7B:55:CF:B2:91:D7:C3:DF:B9:F1:F0:2B:61:39:03:75:21
X509v3 Authority Key Identifier:
keyid:63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/bgwpe1XPspHXw9-58fArYTkDdSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.236.0.0/16
IPv6:
2a0a:1800::/32
Signature Algorithm: sha256WithRSAEncryption
87:8a:f7:d1:e3:77:17:4a:90:fe:c0:5e:29:68:c0:5b:df:b2:
de:e9:98:52:1b:14:ae:a3:ce:bd:1a:06:57:57:8e:3d:5f:12:
28:b9:16:ac:83:b6:a2:4f:4f:d9:7f:54:32:36:21:6a:ed:77:
86:9f:1b:95:f4:7c:29:52:2a:0e:45:fb:53:f7:c0:0d:10:7b:
6e:9e:ee:bc:f2:5c:5e:43:84:28:a7:4b:59:1f:89:ac:0d:5e:
37:0d:5e:a5:a1:7f:90:f1:4a:42:d8:4d:e8:c3:7e:d8:be:50:
73:8a:05:54:f9:b7:45:bb:56:4a:8a:c5:25:37:01:58:93:10:
1b:a3:36:de:91:b5:59:57:ca:5f:78:f0:59:b4:19:4a:2d:c8:
77:68:51:b2:8c:1d:9d:7c:42:c1:12:87:b5:ec:fc:be:a5:76:
4e:26:09:99:6b:e2:14:03:ce:85:d7:57:d9:f2:53:e7:1c:f7:
c5:75:c2:f6:6e:94:8b:1d:6e:80:7b:64:9e:b8:24:ec:b9:b6:
70:03:15:6b:b2:06:f1:7f:6a:29:4c:1e:68:f1:d7:72:ca:a6:
c1:86:7a:ff:6c:28:a5:4b:2b:74:5c:c2:e5:95:60:48:4a:b1:
3b:e8:00:2f:50:34:e6:a3:17:f8:16:2f:bf:41:7a:b5:5c:55:
a2:91:fe:01
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jun 12 03:33:30 2026 by rpki-client