Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/BkpOXDsCL9gjDgF59DM41NgFoRs.roa
File: BkpOXDsCL9gjDgF59DM41NgFoRs.roa (raw, json)
Hash identifier: 1TDrsqD1RxkQ8FJuvovDIB12g4Sx/EUa52b4KH10vmo=
Subject key identifier: 06:4A:4E:5C:3B:02:2F:D8:23:0E:01:79:F4:33:38:D4:D8:05:A1:1B
Certificate issuer: /CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Certificate serial: 01A1115B0382DE1A509011B9679DDA398B96
Authority key identifier: 6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/BkpOXDsCL9gjDgF59DM41NgFoRs.roa
Signing time: Tue 06 Oct 2026 13:15:39 +0000
ROA not before: Tue 06 Oct 2026 13:15:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199046
IP address blocks: 5.133.24.0/21 maxlen: 24
193.7.220.0/22 maxlen: 22
193.7.220.0/24 maxlen: 24
193.7.221.0/24 maxlen: 24
193.7.222.0/24 maxlen: 24
193.7.223.0/24 maxlen: 24
2a09:9900::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:5b:03:82:de:1a:50:90:11:b9:67:9d:da:39:8b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Validity
Not Before: Oct 6 13:15:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=064a4e5c3b022fd8230e0179f43338d4d805a11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0e:ef:15:e4:ba:8d:c5:9c:d2:73:9f:94:ff:
cf:0f:a0:37:86:6e:6f:72:9d:12:af:de:45:20:ac:
ac:fd:1f:9c:c3:c3:f4:e4:2b:57:8d:66:70:57:fa:
85:e9:35:9b:3b:3d:59:60:fb:7b:0a:60:2d:e1:3d:
f0:88:75:80:a8:d0:0b:74:ea:bd:8d:e3:ec:62:0c:
f0:90:7a:77:75:f6:7d:4a:fc:79:d1:ab:6f:3e:6d:
39:2a:a3:56:1e:84:2c:ee:6d:58:a9:e3:58:7e:79:
71:4f:7b:88:12:02:ce:63:fa:61:4f:95:dc:b8:84:
e6:f4:1f:07:bb:9e:53:91:b5:7b:83:b2:78:bc:ca:
4b:a5:c5:3c:f3:99:83:9e:f0:28:36:62:91:a0:4b:
27:8f:fc:db:e6:71:27:11:24:28:d6:6c:ec:36:94:
58:a5:9c:51:a2:d7:d1:ae:76:b3:29:80:97:6d:b9:
d7:54:0b:92:33:31:a4:96:4c:84:78:1a:d6:ed:2b:
9b:7b:59:03:a0:27:49:f5:a7:a1:32:88:ad:83:95:
89:a3:ae:f0:12:97:48:c1:fc:cc:a9:51:7c:1e:15:
aa:de:14:fb:92:11:bd:1c:37:9f:e6:ed:43:3e:6a:
f4:38:5d:36:2e:83:f9:c9:ad:a6:a1:b1:9d:64:cb:
03:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4A:4E:5C:3B:02:2F:D8:23:0E:01:79:F4:33:38:D4:D8:05:A1:1B
X509v3 Authority Key Identifier:
keyid:6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/BkpOXDsCL9gjDgF59DM41NgFoRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.24.0/21
193.7.220.0/22
IPv6:
2a09:9900::/32
Signature Algorithm: sha256WithRSAEncryption
30:9a:a6:b4:fa:09:65:ce:d1:75:6b:e9:d1:b8:92:d2:71:c2:
e1:69:f5:10:fd:64:ff:80:a5:49:84:41:33:94:b2:e2:87:a2:
cd:ca:9d:58:16:7e:8e:6c:d5:e2:54:f1:b6:4b:70:1e:8b:6f:
c3:33:5a:b0:28:54:37:da:e2:a1:a5:d1:9e:81:cb:d7:df:b1:
06:1b:1a:b2:4a:95:fd:35:79:99:e7:2d:ff:18:5c:ef:c1:04:
c1:be:87:da:e2:74:94:4d:da:e8:2f:79:3f:c8:0d:41:78:7b:
dd:2c:a7:54:6d:6e:33:72:bd:e2:48:e4:a2:1d:3d:b8:f8:7b:
78:2f:eb:80:f8:6e:e5:c4:f4:12:4c:69:03:57:21:d9:f8:6b:
6e:75:0d:19:b3:36:f9:a5:a8:a7:30:a2:25:7b:e5:a9:7d:a2:
b2:13:eb:b8:b8:f1:d7:27:6e:04:14:eb:59:be:39:eb:f0:3a:
d6:ef:4e:92:65:28:bf:7d:fa:d3:59:0e:b2:55:f7:eb:c4:c9:
ce:44:46:62:91:ff:cb:85:f1:df:7e:6c:ab:2a:d2:c4:5d:35:
55:82:27:01:68:6e:b2:f2:fe:dd:db:f3:18:cb:6b:3f:52:4a:
cd:a6:ee:95:85:c0:35:5f:93:50:91:07:2f:a3:41:c9:07:f9:
5a:f4:de:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:54:57 2026 by rpki-client