Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/556f47-fd2e-4cd7-971c-034933e77d47/1/Bg9n0gii5VGuKPgixFAAxwUw1c0.roa
File: Bg9n0gii5VGuKPgixFAAxwUw1c0.roa (raw, json)
Hash identifier: YnUCPC7aLILACen8W1gwEmDS+WICUNIudh6A+6b4DvA=
Subject key identifier: 06:0F:67:D2:08:A2:E5:51:AE:28:F8:22:C4:50:00:C7:05:30:D5:CD
Certificate issuer: /CN=069c876e6c180dae4a4625c813373a19c0d4ce54
Certificate serial: 01A15465C7A58C1C4D064A5CF48E786B254A
Authority key identifier: 06:9C:87:6E:6C:18:0D:AE:4A:46:25:C8:13:37:3A:19:C0:D4:CE:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpyHbmwYDa5KRiXIEzc6GcDUzlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/556f47-fd2e-4cd7-971c-034933e77d47/1/Bg9n0gii5VGuKPgixFAAxwUw1c0.roa
Signing time: Mon 19 Oct 2026 13:41:58 +0000
ROA not before: Mon 19 Oct 2026 13:41:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61421
IP address blocks: 149.245.254.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/556f47-fd2e-4cd7-971c-034933e77d47/1/BpyHbmwYDa5KRiXIEzc6GcDUzlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/556f47-fd2e-4cd7-971c-034933e77d47/1/BpyHbmwYDa5KRiXIEzc6GcDUzlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpyHbmwYDa5KRiXIEzc6GcDUzlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:65:c7:a5:8c:1c:4d:06:4a:5c:f4:8e:78:6b:25:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=069c876e6c180dae4a4625c813373a19c0d4ce54
Validity
Not Before: Oct 19 13:41:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=060f67d208a2e551ae28f822c45000c70530d5cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:48:15:45:18:34:98:6f:60:0e:6a:ea:54:3a:
19:b1:e0:90:6e:05:08:9a:c7:6a:89:5f:e2:81:23:
09:8d:67:10:57:a3:93:81:7d:fd:75:a5:9d:bb:80:
cc:b4:94:8b:eb:98:9d:0c:e2:5d:15:64:5c:d5:42:
7f:23:a3:5b:d1:32:18:b4:47:cf:a3:ad:86:80:10:
c4:45:3e:ef:35:60:9b:81:e6:73:3a:66:a6:a6:70:
8a:bd:eb:0a:ce:d4:43:14:cc:ba:1e:1d:cc:c2:ac:
88:6b:61:e3:bc:a8:cf:7d:25:7a:50:79:da:c9:60:
dc:c1:a0:ca:ae:d2:47:44:21:63:bb:33:8a:0b:55:
55:b8:84:6a:16:bc:83:b5:ad:79:66:a2:be:33:9d:
f1:53:91:c1:ac:8b:20:e2:f4:39:8c:f4:f0:64:ff:
ea:54:42:59:7a:94:9e:35:2e:28:3d:02:05:a0:90:
1d:10:33:60:1c:2c:20:c4:15:2b:20:7f:5f:81:10:
9f:8c:d0:f6:7b:04:70:68:b2:3e:63:bd:e4:07:08:
ad:25:13:b5:4f:e1:7d:11:bd:7b:18:ca:97:24:fd:
91:39:6f:9d:39:12:c2:37:cd:5b:34:34:e6:40:3d:
6b:57:25:88:f5:82:0a:fb:41:a9:ef:0e:74:f2:ef:
d0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:0F:67:D2:08:A2:E5:51:AE:28:F8:22:C4:50:00:C7:05:30:D5:CD
X509v3 Authority Key Identifier:
keyid:06:9C:87:6E:6C:18:0D:AE:4A:46:25:C8:13:37:3A:19:C0:D4:CE:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpyHbmwYDa5KRiXIEzc6GcDUzlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/556f47-fd2e-4cd7-971c-034933e77d47/1/Bg9n0gii5VGuKPgixFAAxwUw1c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/556f47-fd2e-4cd7-971c-034933e77d47/1/BpyHbmwYDa5KRiXIEzc6GcDUzlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.245.254.0/23
Signature Algorithm: sha256WithRSAEncryption
44:6a:52:b4:e8:b4:96:9c:7b:9f:2d:e9:2b:7d:29:6b:52:06:
ea:2e:ee:17:f7:39:51:3a:f2:f6:7a:2b:ac:7b:7f:49:fc:69:
4d:e9:37:9a:ca:4b:e0:c1:13:e6:cb:91:a4:0b:96:fe:1f:22:
c5:15:f6:4c:df:5b:35:a2:d2:0e:6d:c6:61:38:54:69:58:ef:
34:2e:f4:52:4c:d4:4e:48:ad:97:00:1c:9c:e7:16:4c:79:8b:
4f:0c:4a:56:5d:15:22:30:70:6c:1d:3e:7b:ed:64:d2:75:86:
1a:ab:f9:74:d4:28:7e:2b:82:42:6a:04:8e:ff:f0:3d:0e:8f:
10:3b:dd:09:df:93:db:4f:02:90:a9:17:28:20:fa:68:46:df:
e6:e9:a1:06:b1:ff:9b:a0:ff:4a:9f:49:f4:85:57:56:2f:cf:
cf:9c:77:27:69:2b:d4:e0:ff:06:8d:e0:1a:a1:84:21:cb:0a:
81:c7:1c:61:9e:8e:1c:35:60:78:02:3d:4b:f6:99:19:79:e0:
b9:64:72:33:69:70:79:ce:c6:b3:f1:87:e0:df:41:25:60:f5:
a6:09:3c:3b:8a:dd:75:7b:23:e6:3d:6e:b0:bc:f0:b6:66:1c:
cd:1c:e5:37:a6:15:b2:c5:b2:5b:2b:55:3f:20:f4:de:fc:e3:
ca:0a:c7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:20:47 2026 by rpki-client