Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/BOYV9l4wvDS08yRmlbo184A-G5s.roa
File: BOYV9l4wvDS08yRmlbo184A-G5s.roa (raw, json)
Hash identifier: VOBpbJcd9IiZl8NScvLMs+KTUQCPAD6R+yWjxPZZUrA=
Subject key identifier: 04:E6:15:F6:5E:30:BC:34:B4:F3:24:66:95:BA:35:F3:80:3E:1B:9B
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A03DB503C367F4D3833BC91B059893DF9F
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/BOYV9l4wvDS08yRmlbo184A-G5s.roa
Signing time: Wed 26 Aug 2026 10:54:28 +0000
ROA not before: Wed 26 Aug 2026 10:54:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49468
IP address blocks: 89.37.192.0/24 maxlen: 24
89.125.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:31:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:b5:03:c3:67:f4:d3:83:3b:c9:1b:05:98:93:df:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 26 10:54:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04e615f65e30bc34b4f3246695ba35f3803e1b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:60:a0:fb:16:f0:17:d7:8e:50:4c:0c:d4:44:
27:e3:46:b4:99:b2:a4:7c:1e:83:2c:46:f1:ca:6b:
62:9f:5d:53:d1:a0:6d:01:c7:47:67:2f:a0:91:17:
03:3b:06:61:47:eb:e6:ec:af:19:38:a2:46:14:0f:
25:30:8d:3f:45:ca:dd:48:f0:90:8a:ae:d7:56:bb:
ec:58:4b:dc:c6:c6:95:ef:0d:25:db:82:11:dd:0a:
97:8d:20:90:03:97:0b:83:8b:d9:0e:e9:04:36:f6:
d7:f4:10:77:62:b8:1b:a5:58:76:e1:43:6e:6a:65:
70:a7:1b:ac:a1:a9:df:45:7b:56:74:1f:80:dc:75:
85:17:44:f2:2b:0b:c2:56:18:50:8a:ee:fa:16:18:
91:11:d3:fd:e3:41:bb:57:8c:82:e7:8a:9d:a3:db:
c2:a2:cb:17:c9:0a:a5:0c:40:e0:c8:0c:10:f6:5a:
1d:19:55:79:f9:92:ad:73:21:31:36:d2:64:aa:5b:
17:5f:48:7a:2a:f1:12:67:96:eb:ea:c1:c3:a4:e7:
fb:49:e6:4d:e0:41:b1:44:ca:80:3f:58:9e:fb:7e:
b6:4d:77:56:7c:24:6a:0e:ba:38:5d:1c:78:69:d1:
d3:a0:de:04:c0:44:91:eb:ce:e3:40:c6:de:13:1d:
21:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E6:15:F6:5E:30:BC:34:B4:F3:24:66:95:BA:35:F3:80:3E:1B:9B
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/BOYV9l4wvDS08yRmlbo184A-G5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.192.0/24
89.125.166.0/24
Signature Algorithm: sha256WithRSAEncryption
40:61:0e:a0:fc:8a:25:b0:42:27:73:fc:36:97:3f:f4:53:62:
3c:21:a9:46:d1:fe:dc:b9:62:fc:03:9c:ba:e5:21:1f:31:3a:
16:91:34:9f:40:55:d2:cd:b6:1a:7a:b9:83:0b:16:ee:04:a2:
a8:4a:ce:89:05:9f:a6:bf:d8:bf:b6:d7:0b:fb:6f:1f:19:77:
02:3e:e5:ad:a6:73:cf:cc:1f:8c:a0:76:55:42:b6:12:bb:ae:
83:3e:a4:9d:ff:69:6c:73:54:3b:14:8f:f0:92:19:14:ad:a4:
7b:21:98:4f:0f:a5:71:47:ac:e3:bb:fd:f7:62:ce:98:a4:50:
9d:5c:16:b0:f4:c8:cf:60:47:fb:56:98:17:b0:9d:fc:83:ab:
68:9d:bf:65:b0:c7:b5:73:76:7f:ee:7e:dc:05:24:ea:bd:e3:
04:55:28:50:79:1f:22:dc:36:ad:3f:33:22:88:0a:9b:ab:c2:
e6:10:2f:80:ec:e6:d3:88:48:ba:01:b7:6c:b8:1a:31:5d:3f:
e1:2c:26:57:15:7a:47:5f:00:7e:47:b7:7a:68:f3:58:34:d8:
a7:38:44:c0:53:9a:92:98:4a:a7:62:45:ac:6e:d8:0c:08:40:
6d:8d:a8:9f:2c:34:8a:bb:e4:ca:7d:fd:0a:f3:26:bb:36:d4:
11:5c:93:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:19:46 2026 by rpki-client