Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/bQYx_xQSdi96aXvakBARQlWzcuo.roa
File: bQYx_xQSdi96aXvakBARQlWzcuo.roa (raw, json)
Hash identifier: paxG2U4ADDtULZYvAzrh9UihW/30QbEMMaBJ7NEhmYo=
Subject key identifier: 6D:06:31:FF:14:12:76:2F:7A:69:7B:DA:90:10:11:42:55:B3:72:EA
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 01A0A3F3047439B58260B9DD6D9C19C2EC44
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/bQYx_xQSdi96aXvakBARQlWzcuo.roa
Signing time: Tue 15 Sep 2026 07:23:27 +0000
ROA not before: Tue 15 Sep 2026 07:23:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 85.232.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a3:f3:04:74:39:b5:82:60:b9:dd:6d:9c:19:c2:ec:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Sep 15 07:23:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d0631ff1412762f7a697bda9010114255b372ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:67:d1:3e:1c:71:5c:45:06:15:a9:65:d1:3e:
6b:17:22:bd:18:22:bd:27:0d:a7:36:ac:c7:68:91:
32:e9:0e:b6:f7:dd:f4:ac:0a:db:bb:e7:13:36:63:
7b:39:72:8c:43:e3:5f:8d:98:31:43:1e:41:f2:58:
71:90:23:de:09:3d:f6:ae:63:16:3f:b5:21:57:cb:
9c:4c:eb:18:d6:9a:09:4b:62:8c:27:4c:2a:30:0e:
ec:aa:4b:96:59:63:02:76:9c:ed:81:16:13:17:6b:
49:c2:48:22:40:8d:87:10:16:03:6a:1f:51:96:f0:
44:4b:d7:12:b3:f9:2f:0f:49:a8:11:25:38:0c:76:
8a:9c:ea:1b:7a:30:78:0a:10:15:e6:a6:b1:7f:ff:
f4:b6:60:11:34:ef:26:3c:41:e0:fc:1c:49:1a:83:
1a:0f:06:06:13:c4:94:35:a1:ae:ea:8f:fd:d4:e5:
30:aa:b5:03:79:9e:50:93:93:1a:44:bf:5a:7e:55:
58:c2:cd:d5:08:cf:73:c7:f7:cb:0a:20:8f:7d:f2:
b3:7a:fe:09:9d:b9:7d:70:fc:c8:6f:25:84:a6:a3:
0f:ef:78:c1:c8:4f:6d:9e:a5:c1:ee:cb:54:94:c1:
73:0c:7c:ba:23:86:69:cf:9c:99:f5:c0:c1:a8:c0:
35:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:06:31:FF:14:12:76:2F:7A:69:7B:DA:90:10:11:42:55:B3:72:EA
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/bQYx_xQSdi96aXvakBARQlWzcuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.232.181.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:43:10:b0:03:61:86:71:77:fe:15:fc:22:c8:8d:37:08:ec:
0a:c2:56:86:85:76:2a:30:ae:9a:50:57:41:f3:88:5a:e7:2d:
4c:55:38:49:a4:b0:08:f9:1e:5e:27:02:89:a5:a0:60:26:00:
be:c7:42:27:31:34:94:3d:e1:1c:00:57:12:63:a5:68:11:eb:
91:0c:ca:17:6e:c2:1f:37:cc:f2:2a:b3:a3:eb:df:bd:c8:d8:
53:13:57:ff:cd:6b:b5:c3:0a:3d:e5:5c:06:24:33:c7:ea:56:
c7:61:45:47:41:ac:e7:15:22:ea:99:93:15:82:d8:58:c7:b1:
61:76:5e:f3:8c:d1:a3:40:0f:f9:f5:4a:23:13:ee:18:a3:7b:
aa:96:be:41:14:77:d9:c2:5e:46:2c:e2:7f:59:84:2d:8f:a4:
ab:f8:f4:20:ae:4b:06:2c:7d:19:e0:57:3b:de:6d:46:17:38:
31:80:8e:5d:2a:05:fc:19:95:62:f9:f1:e0:44:4d:46:7a:f0:
2e:a4:14:07:c5:5b:c3:43:37:2b:ca:f5:95:23:c5:4b:a7:9e:
f9:9a:8a:43:be:0b:a6:cf:f4:74:eb:38:8a:1b:0f:c7:cb:14:
1d:9e:b7:2b:1d:bf:6f:70:c1:88:65:0a:0d:9b:02:ec:75:32:
0f:89:3c:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCj8wR0ObWCYLndbZwZwuxEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNWUwMjMwYmU3OTllNDQ4MjljODcyMGNhMzgzNDcwNDU0
OTRlMjAwHhcNMjYwOTE1MDcyMzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDA2MzFmZjE0MTI3NjJmN2E2OTdiZGE5MDEwMTE0MjU1YjM3MmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWfRPhxxXEUGFall0T5rFyK9GCK9
Jw2nNqzHaJEy6Q629930rArbu+cTNmN7OXKMQ+NfjZgxQx5B8lhxkCPeCT32rmMW
P7UhV8ucTOsY1poJS2KMJ0wqMA7sqkuWWWMCdpztgRYTF2tJwkgiQI2HEBYDah9R
lvBES9cSs/kvD0moESU4DHaKnOobejB4ChAV5qaxf//0tmARNO8mPEHg/BxJGoMa
DwYGE8SUNaGu6o/91OUwqrUDeZ5Qk5MaRL9aflVYws3VCM9zx/fLCiCPffKzev4J
nbl9cPzIbyWEpqMP73jByE9tnqXB7stUlMFzDHy6I4Zpz5yZ9cDBqMA1BQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG0GMf8UEnYveml72pAQEUJVs3LqMB8GA1UdIwQY
MBaAFG9eAjC+eZ5EgpyHIMo4NHBFSU4gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83MGNjZWYtMTdmMy00OTI4LTljMGIt
YmE3YzdkODE5MGNhLzEvYlFZeF94UVNkaTk2YVh2YWtCQVJRbFd6Y3VvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny83MGNjZWYtMTdmMy00OTI4LTljMGItYmE3YzdkODE5MGNh
LzEvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVei1MA0G
CSqGSIb3DQEBCwUAA4IBAQB6QxCwA2GGcXf+FfwiyI03COwKwlaGhXYqMK6aUFdB
84ha5y1MVThJpLAI+R5eJwKJpaBgJgC+x0InMTSUPeEcAFcSY6VoEeuRDMoXbsIf
N8zyKrOj69+9yNhTE1f/zWu1wwo95VwGJDPH6lbHYUVHQaznFSLqmZMVgthYx7Fh
dl7zjNGjQA/59UojE+4Yo3uqlr5BFHfZwl5GLOJ/WYQtj6Sr+PQgrksGLH0Z4Fc7
3m1GFzgxgI5dKgX8GZVi+fHgRE1GevAupBQHxVvDQzcryvWVI8VLp575mopDvgum
z/R06ziKGw/HyxQdnrcrHb9vcMGIZQoNmwLsdTIPiTzJ
-----END CERTIFICATE-----
Generated at Fri Sep 18 18:04:29 2026 by rpki-client