Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/BIcd5wQn9v5wUtU78kYLI4GXidM.roa
File: BIcd5wQn9v5wUtU78kYLI4GXidM.roa (raw, json)
Hash identifier: QUWLTGcwrwAcnwQ64GOIRf1fx94Fu5rW2CbPwkByxM4=
Subject key identifier: 04:87:1D:E7:04:27:F6:FE:70:52:D5:3B:F2:46:0B:23:81:97:89:D3
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 019E2BE658F5FB531B97CE38B3CDA48DB5C0
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/BIcd5wQn9v5wUtU78kYLI4GXidM.roa
Signing time: Fri 15 May 2026 13:49:36 +0000
ROA not before: Fri 15 May 2026 13:49:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202759
IP address blocks: 141.105.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 22:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:e6:58:f5:fb:53:1b:97:ce:38:b3:cd:a4:8d:b5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: May 15 13:49:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04871de70427f6fe7052d53bf2460b23819789d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8e:81:96:7f:29:65:80:75:ae:30:69:32:e7:
5d:92:62:9d:e7:d0:1c:43:09:ae:f8:7a:fb:16:be:
37:07:5d:34:c3:5f:89:26:54:ab:7b:0a:ae:0a:64:
2f:2b:94:04:be:6d:df:86:ee:59:ac:ed:cf:17:d2:
8f:4d:a9:b4:80:98:05:29:e5:68:e3:e2:b8:25:54:
a3:df:a6:01:fd:e2:62:1a:ed:47:a4:d6:1a:d4:40:
44:8d:25:01:53:b1:53:f8:9a:29:9e:38:88:df:a2:
ba:94:cc:ef:7d:b1:bb:d3:57:72:a2:b0:c2:97:e0:
cc:19:91:53:42:c7:52:8c:7c:43:66:9c:b6:55:52:
7f:16:47:c1:01:d6:37:cd:ad:c2:ca:64:e4:f6:35:
2f:23:ac:89:fc:29:c4:28:ea:5a:c9:2c:07:83:08:
e8:cb:cc:9c:8f:af:95:04:b4:00:7a:ee:f7:ba:a0:
34:92:37:a3:6e:19:ee:06:e5:68:80:77:64:7a:95:
80:ae:bb:f8:68:58:65:81:67:49:ef:38:77:6f:b2:
0e:ea:ab:1e:ed:f7:3c:27:58:49:91:92:a9:61:69:
79:6b:64:c6:d0:f1:f9:16:96:48:35:64:7b:99:09:
09:8c:7f:2e:35:22:1f:d7:14:88:d0:a4:dc:5b:62:
50:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:87:1D:E7:04:27:F6:FE:70:52:D5:3B:F2:46:0B:23:81:97:89:D3
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/BIcd5wQn9v5wUtU78kYLI4GXidM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.105.140.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:e8:5a:eb:16:45:e4:dc:3a:ce:cb:c5:8f:bc:93:1e:a2:11:
a6:94:44:2d:52:52:81:1b:66:2c:6f:b1:d6:50:bf:23:b8:e6:
27:b9:82:40:bc:1b:ba:2f:5c:8e:73:cc:b5:f7:af:9d:37:80:
fe:58:38:29:aa:5f:ac:ec:e4:52:2d:0f:9e:39:7f:dd:e4:30:
94:15:35:e7:db:68:5b:08:69:6d:2f:fe:6d:96:fe:78:c3:54:
3c:fe:45:c4:32:05:4b:ff:dd:35:1a:bb:38:a9:b3:e6:78:7f:
85:1a:9e:94:9b:f1:cd:cb:b0:43:0a:84:80:c4:f6:c5:22:ee:
b3:80:d2:c9:ae:04:bb:d0:35:a8:f0:45:26:65:51:f9:5c:50:
2b:79:b5:2b:82:63:b4:98:10:a5:12:4d:01:35:a7:70:7f:66:
a2:b2:7f:2b:5c:35:04:80:aa:50:5c:b0:b0:6e:8a:a2:96:a6:
78:b3:ee:71:e3:93:ba:18:04:46:1c:da:b5:4e:70:ed:c3:a4:
84:d2:88:8c:ff:87:14:69:5d:20:b0:e0:c6:cc:71:a2:48:a1:
ef:8e:9a:63:e5:aa:67:7f:51:03:9b:f0:cc:93:33:9a:e4:83:
84:9a:ad:b5:90:20:01:f2:d7:a6:69:e3:0f:e0:26:8e:f4:2f:
4f:fb:10:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:03:48 2026 by rpki-client