Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/BAbmpTLpyhGo4wXZA7wt5GyKCUg.roa
File: BAbmpTLpyhGo4wXZA7wt5GyKCUg.roa (raw, json)
Hash identifier: VqfNVpmyL6IsSbPN3GzDa1RB7NljsXiRrMWSAQe9RTc=
Subject key identifier: 04:06:E6:A5:32:E9:CA:11:A8:E3:05:D9:03:BC:2D:E4:6C:8A:09:48
Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial: 019F26E3888E191EC05CA243B463D3230A70
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/BAbmpTLpyhGo4wXZA7wt5GyKCUg.roa
Signing time: Fri 03 Jul 2026 07:31:13 +0000
ROA not before: Fri 03 Jul 2026 07:31:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 5.10.216.0/24 maxlen: 24
5.10.222.0/24 maxlen: 24
185.23.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:26:e3:88:8e:19:1e:c0:5c:a2:43:b4:63:d3:23:0a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Validity
Not Before: Jul 3 07:31:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0406e6a532e9ca11a8e305d903bc2de46c8a0948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f1:df:40:ad:da:1b:be:1d:3a:4d:4d:df:d1:
8c:7b:d0:94:b9:12:e0:58:1f:b3:9c:0e:ac:37:12:
05:c1:b5:a0:5e:62:11:7c:fc:fb:f9:00:03:41:8c:
0c:d7:db:5d:9d:b9:37:08:4a:75:44:65:07:aa:59:
d2:6c:b4:85:29:df:c2:9e:a9:56:aa:02:3b:17:26:
eb:d7:47:12:0d:09:31:1a:96:f4:83:bf:c3:e7:29:
04:3a:37:51:79:64:44:e1:84:fc:e6:14:26:b6:ec:
0f:92:e5:2a:8c:07:19:1f:d1:05:e5:69:6c:47:d3:
2d:ba:5c:00:77:e5:72:1e:33:0b:42:9e:bc:3a:b4:
19:93:38:ef:6a:8d:6c:a7:b9:f6:72:09:88:26:7f:
75:9f:8d:4c:20:6a:be:46:14:25:e6:d5:58:fa:53:
6d:38:be:44:f7:61:49:ab:d3:10:8d:ec:27:a2:9c:
62:32:85:48:12:4a:b9:42:ed:5c:0d:6d:f3:29:80:
dc:80:5f:ff:cd:f7:41:aa:ce:30:46:5e:73:cb:fd:
bb:1c:63:3e:29:88:37:7f:bf:3d:a8:8d:3e:b6:98:
17:4f:e4:c5:66:48:a2:a7:0c:58:2d:06:01:51:73:
a4:87:4a:be:19:4f:94:ea:f1:c5:80:2b:e3:2a:81:
d1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:06:E6:A5:32:E9:CA:11:A8:E3:05:D9:03:BC:2D:E4:6C:8A:09:48
X509v3 Authority Key Identifier:
keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/BAbmpTLpyhGo4wXZA7wt5GyKCUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.216.0/24
5.10.222.0/24
185.23.237.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:a4:98:dc:9c:59:e9:61:28:e4:1f:36:db:d5:0b:8a:7c:c8:
0c:59:d7:a8:bf:01:0a:c3:c0:b7:e8:4d:4c:90:cd:35:e4:92:
be:da:56:69:b2:d2:b3:a2:de:d5:67:62:b7:f6:8e:c5:81:61:
07:34:4e:97:0e:93:3f:f9:0f:13:17:72:e0:42:a0:b8:e4:e5:
46:5c:a2:96:2f:29:dc:ec:20:87:4d:1f:31:bb:d4:8d:74:db:
e9:2e:05:82:e2:5a:4b:06:b1:71:f7:04:63:d7:13:b2:17:87:
0f:6d:98:f3:0f:ff:9d:1e:f7:fc:d7:96:7c:77:89:be:1f:10:
17:30:65:71:62:36:cd:ba:e6:df:9c:a4:98:73:cf:06:64:ac:
c9:d3:7f:8c:ab:71:4d:ab:b4:44:40:cc:d0:f3:5f:3d:9c:bb:
e4:e3:7a:d8:e0:0f:ab:75:9c:2b:0b:20:3e:7d:c6:dc:86:41:
a2:64:0a:9e:5f:45:b5:6e:f4:21:eb:cf:b1:6c:9f:fc:ba:ab:
f3:8a:bd:01:82:1f:0b:bc:e4:3b:b6:1c:d9:d4:38:78:bb:c7:
ca:ff:04:11:42:c4:42:a5:80:dd:09:d2:5d:7b:bb:e2:65:ef:
91:02:38:75:6e:c7:c5:cd:06:2e:57:ba:f8:8d:2f:6a:6d:b6:
86:5d:c6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 09:43:18 2026 by rpki-client