Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Boy2AEurqc5JG2Hc6j6K1qLtOMw.roa
File: Boy2AEurqc5JG2Hc6j6K1qLtOMw.roa (raw, json)
Hash identifier: sJx+aZv6VwqWyAfzrBfMrgQznRjXfgU7vDrPsezGwXQ=
Subject key identifier: 06:8C:B6:00:4B:AB:A9:CE:49:1B:61:DC:EA:3E:8A:D6:A2:ED:38:CC
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 019E3B672997FCD77A7AAA69ED32F66D29C5
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Boy2AEurqc5JG2Hc6j6K1qLtOMw.roa
Signing time: Mon 18 May 2026 14:04:36 +0000
ROA not before: Mon 18 May 2026 14:04:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213787
IP address blocks: 46.8.201.0/24 maxlen: 24
46.8.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3b:67:29:97:fc:d7:7a:7a:aa:69:ed:32:f6:6d:29:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: May 18 14:04:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=068cb6004baba9ce491b61dcea3e8ad6a2ed38cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f8:24:5f:d1:9d:10:17:6e:4a:40:a7:47:b1:
8a:47:c2:52:3b:84:e8:e3:d3:42:d0:6f:8f:b9:b4:
19:ea:e0:71:a8:b6:4a:0e:30:5c:3e:b6:6d:7e:42:
49:12:e1:b1:88:9e:8e:8d:75:d2:47:ed:2e:29:2b:
5c:82:49:21:6a:04:34:be:16:91:ff:2e:7f:9b:f5:
4a:ba:3e:57:36:be:74:7f:81:c9:e6:88:75:1b:77:
0c:8c:6b:57:90:a3:41:50:23:5f:8b:dd:06:9a:da:
61:b2:d1:31:19:d3:f4:5e:0f:e5:ec:a1:7f:86:b3:
58:01:76:4a:fd:61:3d:17:ab:ae:78:89:44:24:3c:
e3:bf:5b:20:6e:99:e5:19:e4:35:67:64:05:e3:d3:
e9:d5:bf:37:c1:db:f1:f1:b1:db:73:a7:d7:b0:0e:
01:c4:77:f6:13:53:a4:8f:b5:7b:b9:4b:1c:94:9b:
25:cc:ba:66:00:0c:ce:9e:13:dd:24:8b:15:f5:3b:
d4:90:1b:ad:85:41:9d:31:bf:71:af:5e:01:8f:2b:
01:74:9b:25:85:9f:43:5f:de:05:01:ba:2e:2c:16:
4c:34:e1:13:b7:52:b1:4e:72:72:0d:1a:52:ca:d8:
a7:e9:b6:46:53:ef:ce:dc:53:b1:22:9e:bc:54:af:
91:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8C:B6:00:4B:AB:A9:CE:49:1B:61:DC:EA:3E:8A:D6:A2:ED:38:CC
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Boy2AEurqc5JG2Hc6j6K1qLtOMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.201.0-46.8.202.255
Signature Algorithm: sha256WithRSAEncryption
b4:7f:a0:ee:6e:c9:c1:60:a8:62:cb:ea:4f:ee:69:c6:e4:ea:
c0:eb:04:02:a3:51:f7:df:08:59:0e:62:e9:42:09:c6:58:e6:
a2:fd:43:e4:71:57:bb:1f:f8:9b:44:64:c9:91:30:a0:bf:a5:
31:c0:35:d1:9e:c6:f2:59:df:34:31:06:6f:5a:10:78:ac:32:
01:3a:87:ff:08:fe:3e:6b:23:24:33:e2:9e:77:f5:60:3c:af:
ab:87:5a:aa:f6:09:c5:fd:c5:b9:03:6f:26:44:cc:36:93:4f:
2b:db:51:d1:c0:fc:2c:7a:2e:aa:e9:ca:c2:38:f2:ea:91:f3:
b2:d1:3c:0c:ae:e8:51:74:99:d4:e6:58:d4:b5:b7:c1:dc:d9:
bc:8f:fd:d5:2b:0b:93:93:69:8c:e5:fd:5b:43:11:55:69:24:
80:d6:82:ad:a1:a6:34:8a:a8:c5:b3:40:c9:7f:6e:4f:1a:11:
0f:00:d1:dc:f0:c2:b7:91:01:6d:52:81:8c:43:d8:95:41:f7:
aa:7b:00:08:32:02:73:29:f5:e0:a8:00:cd:28:0f:1c:f9:1c:
ea:bc:b0:fa:4a:81:d7:e8:9f:6d:85:57:15:02:a0:d6:e1:9e:
85:4e:30:01:3a:1a:46:57:46:1c:58:35:8a:95:25:e6:dc:a5:
8f:16:58:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:13:04 2026 by rpki-client