Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/BAPCmmT3wNJgALTVvTMImSO8iDQ.roa
File: BAPCmmT3wNJgALTVvTMImSO8iDQ.roa (raw, json)
Hash identifier: wgyQIK5jmyZyOI8wfJWMZzT+wJa4tSZyIGo9bqSA+0A=
Subject key identifier: 04:03:C2:9A:64:F7:C0:D2:60:00:B4:D5:BD:33:08:99:23:BC:88:34
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019EC13ABB6301623070869C54D239F7ACA0
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/BAPCmmT3wNJgALTVvTMImSO8iDQ.roa
Signing time: Sat 13 Jun 2026 13:45:11 +0000
ROA not before: Sat 13 Jun 2026 13:45:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46829
IP address blocks: 82.108.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 19:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:3a:bb:63:01:62:30:70:86:9c:54:d2:39:f7:ac:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 13 13:45:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0403c29a64f7c0d26000b4d5bd33089923bc8834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:92:77:d5:0a:71:47:85:86:9c:be:46:25:a2:
55:a1:aa:c2:4e:3a:76:ff:81:f8:93:7f:dc:e0:85:
43:a6:ad:f6:6e:25:03:93:01:38:e9:e0:a8:25:9a:
48:29:16:0d:ff:35:b0:a5:3d:b9:4a:98:7b:27:88:
0d:f0:a4:4d:da:ea:01:dd:97:52:a3:80:1d:fc:19:
78:e8:18:eb:69:35:d9:75:b0:19:3a:4e:ac:c3:bb:
35:a5:34:8f:80:e2:58:e0:75:72:72:eb:37:7d:56:
78:8c:82:48:28:1f:20:55:1e:29:b9:80:f0:1c:98:
a4:65:ab:d4:18:f8:31:b4:07:15:08:36:51:bd:61:
f4:34:e7:f4:84:b3:87:6b:0a:fe:3d:16:04:7c:ba:
92:fb:14:b4:a2:e4:2f:d3:b3:2b:0a:1b:cd:2c:e0:
b5:9e:7d:03:7b:39:55:6d:31:57:1a:22:72:8f:df:
ed:8d:22:e0:c5:8b:e7:b4:75:cb:3e:80:2e:f6:b8:
04:cd:f6:89:41:43:0b:dd:7c:fb:b0:c1:72:f1:ab:
1b:14:2a:08:31:8b:65:c1:4b:2b:33:2a:d9:74:f0:
c1:43:9c:c4:92:11:0d:7d:92:e1:37:67:0d:60:b6:
29:33:30:7a:a0:05:1c:ff:14:25:4f:99:00:35:53:
c6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:03:C2:9A:64:F7:C0:D2:60:00:B4:D5:BD:33:08:99:23:BC:88:34
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/BAPCmmT3wNJgALTVvTMImSO8iDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.155.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:b5:93:b3:0a:54:7d:75:48:6e:bd:c9:1d:40:83:50:a1:bd:
67:87:22:4c:f7:1d:b8:08:e7:90:26:cd:8d:93:7d:9d:ed:6d:
c8:41:a8:ab:a7:44:bb:22:60:c5:17:ce:75:3f:6c:35:00:c2:
63:5f:78:0b:7f:a4:b2:be:2d:28:46:83:57:01:a6:fe:44:c9:
db:56:ec:ef:1d:82:66:3d:29:ab:75:62:69:1f:2d:14:b3:2f:
4a:ff:7f:02:1f:41:c7:5c:24:01:cf:2e:b9:8c:02:9a:16:a7:
e7:28:7b:f7:7f:e5:56:68:24:a5:28:46:86:bd:59:c8:97:ec:
f4:8e:af:f2:68:27:c1:f2:49:5c:7a:1c:e2:eb:eb:61:e3:8e:
3d:c2:76:13:8a:60:98:7d:a7:75:b3:c8:44:e3:3c:4c:52:e9:
61:9c:f1:55:05:9a:7b:ec:22:78:a8:36:31:96:56:76:92:9c:
37:ec:fc:91:0a:e3:ec:68:20:7a:06:06:e5:d4:0c:69:29:ae:
11:7b:9b:42:23:f1:73:48:48:f6:11:fd:83:7f:97:2f:56:68:
d1:f4:bc:d4:d6:04:5a:24:aa:61:8b:11:4d:e4:7e:7d:dc:26:
51:18:b9:b1:c8:b2:53:91:77:d0:0e:f7:58:b8:32:cd:67:26:
33:95:79:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:29:06 2026 by rpki-client