Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/BBw31CGCFd3R5e4j36ORrrcbywU.roa
File: BBw31CGCFd3R5e4j36ORrrcbywU.roa (raw, json)
Hash identifier: g0pSpOBLxDuGQEQ0EATaxm906R4hGpq56kY8iwUlxJo=
Subject key identifier: 04:1C:37:D4:21:82:15:DD:D1:E5:EE:23:DF:A3:91:AE:B7:1B:CB:05
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F46C8AEBDAB9BA6E9C0B9CDF750F10A99
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/BBw31CGCFd3R5e4j36ORrrcbywU.roa
Signing time: Thu 09 Jul 2026 12:09:44 +0000
ROA not before: Thu 09 Jul 2026 12:09:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17497
IP address blocks: 212.135.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 16:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:c8:ae:bd:ab:9b:a6:e9:c0:b9:cd:f7:50:f1:0a:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 9 12:09:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=041c37d4218215ddd1e5ee23dfa391aeb71bcb05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:32:78:e0:ea:6e:08:d9:a4:ed:ca:83:5e:1d:
73:2e:bd:ef:4d:b5:b4:1a:2a:6a:46:bb:28:4d:d9:
7f:f7:f2:1d:f8:81:49:1e:c9:12:8a:45:fb:3b:38:
24:23:14:e1:da:28:86:3d:e1:eb:0c:f8:a6:7e:11:
aa:c1:75:72:96:c2:ab:d2:95:4f:f4:30:53:4c:e4:
58:e0:43:ea:4d:c6:f1:39:9f:dd:31:6d:62:77:08:
bd:5b:b0:cc:1e:ea:62:75:fa:71:a6:34:99:41:81:
f9:cb:54:9e:2c:4b:26:44:e9:bf:74:3c:5f:af:71:
3c:66:e1:49:e6:8c:ed:06:e6:37:0b:15:18:69:23:
a1:dc:67:44:e7:01:32:86:fc:f3:ac:ea:5d:63:6c:
c3:ba:0d:fd:57:52:c5:b1:15:f6:b1:46:98:d4:fc:
1f:10:3b:7c:96:49:8a:fc:09:cc:09:4f:46:8b:74:
9a:61:f0:fc:c8:e2:eb:f3:7d:27:6f:f6:1f:86:ca:
aa:76:80:8b:ba:88:d4:4b:c4:78:6b:7b:0a:74:3d:
da:bb:aa:0d:96:e7:22:2c:22:d2:4d:da:38:2a:5a:
05:aa:23:46:18:37:7b:1e:fd:ca:96:0c:cb:cd:29:
5f:55:2e:8e:33:c2:68:68:41:20:b3:61:06:56:0d:
5e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1C:37:D4:21:82:15:DD:D1:E5:EE:23:DF:A3:91:AE:B7:1B:CB:05
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/BBw31CGCFd3R5e4j36ORrrcbywU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.135.19.0/24
Signature Algorithm: sha256WithRSAEncryption
33:78:4f:7a:65:4d:31:0a:92:0e:f7:2f:a5:a3:b0:21:c7:ff:
91:5e:92:4d:7f:5d:bd:0e:89:35:c0:c8:6e:3c:52:f9:1b:b7:
96:01:86:50:46:a8:32:36:b2:f4:99:bb:8b:0c:eb:8e:1d:0a:
8f:7c:fe:78:0f:b6:63:41:61:00:82:33:f2:b4:ba:18:0e:d3:
2e:aa:69:77:85:bc:41:92:66:b0:66:a2:ae:1f:93:46:0b:5c:
5d:d0:8d:e3:e1:6d:be:de:b9:a2:fd:95:a3:3d:48:61:a2:a4:
0a:52:58:f9:de:f6:bc:b9:9b:3b:39:63:2d:9d:7a:79:e5:0b:
46:86:8a:f7:c4:46:3f:bf:ca:53:1d:01:c4:3d:b0:ed:3d:44:
cd:9f:53:17:90:bb:b6:bb:19:7c:24:d4:74:ee:99:c7:1c:6a:
79:9a:68:48:3d:72:be:12:87:5f:b6:0b:a9:57:bc:9f:33:09:
79:7c:58:6a:73:ed:91:e8:eb:ad:23:30:cb:35:4c:97:2f:4d:
17:16:33:64:6a:35:6f:9a:a2:ea:47:b5:01:19:05:09:1f:37:
02:c8:03:c1:29:46:a3:13:56:38:f5:63:39:2a:02:22:0d:a5:
7e:ed:74:3a:3a:e4:a7:f3:54:ac:04:cd:93:eb:38:7d:ed:b6:
99:31:90:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:57:45 2026 by rpki-client