Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/bujSkN739cVx0DJAFCsFlXBvcGs.roa
File: bujSkN739cVx0DJAFCsFlXBvcGs.roa (raw, json)
Hash identifier: EnaDOXi2+w6yujurrNpAuRbunV4mXkAKnBOegobNcoE=
Subject key identifier: 6E:E8:D2:90:DE:F7:F5:C5:71:D0:32:40:14:2B:05:95:70:6F:70:6B
Certificate issuer: /CN=36d6044966c57439aaf520310885f81d45275b2a
Certificate serial: 01A0EAFF4BB634FDAF77848FEBB0A973F280
Authority key identifier: 36:D6:04:49:66:C5:74:39:AA:F5:20:31:08:85:F8:1D:45:27:5B:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NtYESWbFdDmq9SAxCIX4HUUnWyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/bujSkN739cVx0DJAFCsFlXBvcGs.roa
Signing time: Tue 29 Sep 2026 02:29:54 +0000
ROA not before: Tue 29 Sep 2026 02:29:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 134.168.0.0/23 maxlen: 24
134.168.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NtYESWbFdDmq9SAxCIX4HUUnWyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 08:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:ff:4b:b6:34:fd:af:77:84:8f:eb:b0:a9:73:f2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36d6044966c57439aaf520310885f81d45275b2a
Validity
Not Before: Sep 29 02:29:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ee8d290def7f5c571d03240142b0595706f706b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:59:bf:74:5f:f3:24:74:72:8d:1b:ca:b1:f3:
dd:c4:ea:c8:c8:10:6f:e1:d0:d7:46:b0:df:db:b0:
d9:83:89:32:15:50:51:a1:b9:03:99:b9:85:f3:87:
79:53:c1:ad:69:ed:48:9b:6f:f5:70:29:0e:50:8f:
9f:19:c1:6e:be:a8:c9:1b:9b:d0:73:35:17:d0:c1:
41:2c:c0:60:2e:8c:ad:df:f7:fe:87:df:38:6c:8c:
44:7c:48:7e:a6:f7:3b:61:55:8d:ea:4a:57:6d:b6:
72:12:71:8a:aa:e4:75:a6:dc:65:8a:b8:c0:58:87:
be:af:cc:2b:f2:a7:8a:94:9d:44:b0:5e:40:cf:41:
8b:e5:c3:48:81:e1:8f:47:12:32:19:6f:ce:2e:e1:
ef:8c:82:dc:58:79:55:f6:2f:e0:b4:48:fe:33:34:
74:85:d1:fa:a8:29:17:f2:c6:cd:da:7c:0b:34:1e:
d8:b5:bc:68:85:b3:c6:f0:6b:91:a6:15:d2:68:b1:
8c:4c:47:14:7b:bd:e2:e1:c6:4b:67:ef:9d:c7:85:
24:dd:92:4e:c8:eb:99:e5:6c:57:04:c7:94:15:15:
06:9b:00:cc:4b:6d:0e:dd:55:36:ea:ec:4f:46:8d:
c4:e9:4d:33:9b:31:a1:ae:d3:15:e2:f6:6b:31:2f:
43:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E8:D2:90:DE:F7:F5:C5:71:D0:32:40:14:2B:05:95:70:6F:70:6B
X509v3 Authority Key Identifier:
keyid:36:D6:04:49:66:C5:74:39:AA:F5:20:31:08:85:F8:1D:45:27:5B:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtYESWbFdDmq9SAxCIX4HUUnWyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/bujSkN739cVx0DJAFCsFlXBvcGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.168.0.0/23
134.168.4.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:98:f7:38:0e:5b:7e:8f:77:70:c5:c8:82:58:ac:2b:23:3d:
de:d7:6d:f5:eb:89:da:94:a1:a3:8c:c7:78:4f:81:26:56:d3:
39:dd:50:0d:61:c8:52:df:de:9f:ef:57:09:6f:bf:28:00:3c:
5e:fb:3b:21:ac:fd:e3:72:a8:38:cd:5f:65:25:0c:9d:c0:f4:
05:0d:ed:fd:a0:c9:40:bd:02:56:77:9e:41:9a:11:fc:cf:8e:
ff:c9:8b:6f:4a:c9:c1:39:47:b9:8d:fe:fc:f9:06:4c:97:75:
55:ec:67:36:9a:6e:48:98:20:95:20:bc:e7:05:17:be:74:9b:
3b:27:af:20:f0:cb:b9:0b:44:05:fc:4b:b6:36:2e:54:ab:c0:
14:dc:ab:36:10:45:94:52:19:c5:07:93:5b:c5:90:8d:f8:af:
7c:c0:81:d0:0e:f5:5e:6a:44:26:47:5b:8b:36:4c:c6:53:c0:
14:35:b2:55:5f:50:0c:fa:a6:a1:17:21:67:0d:cc:22:75:d9:
a6:c4:b8:d2:b7:3d:82:a6:72:39:28:9c:6f:68:65:ce:bd:a7:
b2:cc:a0:19:25:b9:d2:93:16:19:2e:43:95:3f:45:e8:b7:14:
6f:56:e7:35:f7:6b:12:6b:3e:5b:17:36:70:31:65:80:7d:27:
77:1c:81:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:58:05 2026 by rpki-client