Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/BpEN_mWDeUPQJMCfWawTQxO9f20.roa
File: BpEN_mWDeUPQJMCfWawTQxO9f20.roa (raw, json)
Hash identifier: tso7g+dX3N/TWjWwguXO483Ai/1bwcOJjJM6lgwqVdU=
Subject key identifier: 06:91:0D:FE:65:83:79:43:D0:24:C0:9F:59:AC:13:43:13:BD:7F:6D
Certificate issuer: /CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Certificate serial: 01A0191259B9C69FBDE654A6FF40C81D2A60
Authority key identifier: 62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/BpEN_mWDeUPQJMCfWawTQxO9f20.roa
Signing time: Wed 19 Aug 2026 08:10:28 +0000
ROA not before: Wed 19 Aug 2026 08:10:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205489
IP address blocks: 212.87.186.0/24 maxlen: 24
212.87.187.0/24 maxlen: 24
212.87.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:12:59:b9:c6:9f:bd:e6:54:a6:ff:40:c8:1d:2a:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62a15cc88659f578cc159c52b3a7e9ec5819fb20
Validity
Not Before: Aug 19 08:10:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06910dfe65837943d024c09f59ac134313bd7f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:62:bf:91:03:42:38:42:19:79:8a:58:fa:5e:
83:3f:19:a8:2e:b2:73:d9:7c:06:e5:d9:74:2d:3e:
7c:3a:33:27:b1:26:49:4b:e6:05:0e:8f:31:17:a9:
3e:24:01:f6:d7:c3:13:58:6a:f2:6c:8c:08:70:ad:
4e:a4:c4:99:8e:1e:eb:04:24:da:b9:f9:f0:72:dc:
d7:99:03:b8:a8:b5:b0:de:03:69:0d:63:a0:3a:e3:
71:4e:f8:de:5b:54:55:d2:74:2b:d0:f1:4a:f4:1a:
06:22:05:0a:54:05:b2:e5:c1:b7:d7:bc:60:ef:0d:
70:d3:b2:18:a8:29:6f:32:fc:af:4d:34:6b:b1:12:
b7:99:d4:55:e0:71:82:16:18:9e:df:9e:d1:be:2d:
53:6e:b6:e6:da:5f:da:9b:d0:bb:a6:57:96:15:20:
8f:b0:b8:00:de:cd:a2:f4:78:7e:38:0d:f7:71:29:
77:93:f3:0b:ac:75:4f:ae:4c:ac:93:95:ac:93:ea:
69:89:fb:52:ad:39:b8:2d:46:ff:e2:9b:c2:52:5f:
6e:c9:0b:29:86:ef:31:af:48:6e:84:d3:8a:4c:9b:
55:9b:27:2c:b7:15:f6:9e:a8:1a:73:31:55:2a:c4:
59:e8:97:26:18:36:fd:85:eb:43:23:a2:2d:c5:58:
a6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:91:0D:FE:65:83:79:43:D0:24:C0:9F:59:AC:13:43:13:BD:7F:6D
X509v3 Authority Key Identifier:
keyid:62:A1:5C:C8:86:59:F5:78:CC:15:9C:52:B3:A7:E9:EC:58:19:FB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/BpEN_mWDeUPQJMCfWawTQxO9f20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2117bc-1f9e-4590-a550-4269b56bf7d4/1/YqFcyIZZ9XjMFZxSs6fp7FgZ-yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.186.0/23
212.87.191.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:c9:8f:3d:b0:51:7a:80:6d:dd:6e:74:46:b4:b3:6b:58:c2:
11:6d:58:e5:8c:29:0c:4f:9b:12:51:32:da:92:60:f6:6e:01:
0c:c7:a1:5a:47:68:97:66:9e:9a:aa:a2:d3:dc:6d:f5:7a:90:
10:6b:98:e8:26:d5:ab:20:ac:2d:63:ba:38:4f:3d:ec:6c:d9:
d9:21:5c:17:0e:f2:0f:e0:8e:01:c2:d0:67:1c:22:20:17:97:
24:39:fc:12:19:21:23:32:61:51:b2:da:d2:1c:3b:ec:cf:bc:
eb:b5:c7:6a:69:3d:e1:d0:28:a1:04:14:e5:3c:1e:86:bc:a7:
0d:00:10:59:89:66:38:d8:af:71:ec:bb:69:07:01:f2:02:6b:
de:77:03:43:40:ca:0a:aa:b0:ec:5b:35:ca:8d:4c:94:01:1f:
57:00:0b:02:e4:2c:fe:e6:6e:bc:02:d9:b4:e6:ea:f2:c6:ca:
76:c8:ab:3b:a4:ab:b9:85:96:f1:12:20:fe:2c:02:6a:e7:b6:
f2:b8:30:24:57:ae:e8:35:9e:07:9b:40:2f:89:09:ca:29:a6:
11:6a:37:cf:8a:58:24:5b:3b:06:4c:fa:37:f5:e4:95:a8:0b:
b0:aa:ac:0d:8d:b5:12:09:21:17:0f:80:f2:9c:40:c8:ed:2b:
a0:54:74:86
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaAZElm5xp+95lSm/0DIHSpgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYTE1Y2M4ODY1OWY1NzhjYzE1OWM1MmIzYTdlOWVjNTgx
OWZiMjAwHhcNMjYwODE5MDgxMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjkxMGRmZTY1ODM3OTQzZDAyNGMwOWY1OWFjMTM0MzEzYmQ3ZjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GK/kQNCOEIZeYpY+l6DPxmoLrJz
2XwG5dl0LT58OjMnsSZJS+YFDo8xF6k+JAH218MTWGrybIwIcK1OpMSZjh7rBCTa
ufnwctzXmQO4qLWw3gNpDWOgOuNxTvjeW1RV0nQr0PFK9BoGIgUKVAWy5cG317xg
7w1w07IYqClvMvyvTTRrsRK3mdRV4HGCFhie357Rvi1Tbrbm2l/am9C7pleWFSCP
sLgA3s2i9Hh+OA33cSl3k/MLrHVPrkysk5Wsk+ppiftSrTm4LUb/4pvCUl9uyQsp
hu8xr0huhNOKTJtVmycstxX2nqgaczFVKsRZ6JcmGDb9hetDI6ItxVimywIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAaRDf5lg3lD0CTAn1msE0MTvX9tMB8GA1UdIwQY
MBaAFGKhXMiGWfV4zBWcUrOn6exYGfsgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAt
NDI2OWI1NmJmN2Q0LzEvQnBFTl9tV0RlVVBRSk1DZldhd1RReE85ZjIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8yMTE3YmMtMWY5ZS00NTkwLWE1NTAtNDI2OWI1NmJmN2Q0
LzEvWXFGY3lJWlo5WGpNRlp4U3M2ZnA3RmdaLXlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQB1Fe6AwQA
1Fe/MA0GCSqGSIb3DQEBCwUAA4IBAQAcyY89sFF6gG3dbnRGtLNrWMIRbVjljCkM
T5sSUTLakmD2bgEMx6FaR2iXZp6aqqLT3G31epAQa5joJtWrIKwtY7o4Tz3sbNnZ
IVwXDvIP4I4BwtBnHCIgF5ckOfwSGSEjMmFRstrSHDvsz7zrtcdqaT3h0CihBBTl
PB6GvKcNABBZiWY42K9x7LtpBwHyAmvedwNDQMoKqrDsWzXKjUyUAR9XAAsC5Cz+
5m68Atm05uryxsp2yKs7pKu5hZbxEiD+LAJq57byuDAkV67oNZ4Hm0AviQnKKaYR
ajfPilgkWzsGTPo39eSVqAuwqqwNjbUSCSEXD4DynEDI7SugVHSG
-----END CERTIFICATE-----
Generated at Sat Sep 5 04:30:29 2026 by rpki-client