Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/BZcTqW9h-TqkOEJnFJVm54KRWss.roa
File: BZcTqW9h-TqkOEJnFJVm54KRWss.roa (raw, json)
Hash identifier: a61xBK4mgmU3Q3bQWo/ycSDH1A24pedOIqXoZ2mDoTI=
Subject key identifier: 05:97:13:A9:6F:61:F9:3A:A4:38:42:67:14:95:66:E7:82:91:5A:CB
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A0329FCCD147048599AE0BBDC41C8026C8
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/BZcTqW9h-TqkOEJnFJVm54KRWss.roa
Signing time: Mon 24 Aug 2026 07:15:28 +0000
ROA not before: Mon 24 Aug 2026 07:15:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 32043
IP address blocks: 217.204.76.0/22 maxlen: 22
217.204.80.0/22 maxlen: 22
217.204.84.0/22 maxlen: 22
217.204.88.0/22 maxlen: 22
217.204.92.0/22 maxlen: 22
217.204.96.0/22 maxlen: 22
217.204.100.0/22 maxlen: 22
217.204.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 12:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:32:9f:cc:d1:47:04:85:99:ae:0b:bd:c4:1c:80:26:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 24 07:15:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=059713a96f61f93aa4384267149566e782915acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e8:7e:bc:c9:b9:67:1d:43:d6:8c:f8:b1:cc:
58:99:db:a3:6d:5b:92:6d:b6:f1:7a:42:03:57:ef:
cf:0b:b2:23:43:4c:a0:10:24:08:9b:3f:03:c5:a5:
58:c9:f2:82:9f:7f:7b:e1:30:19:4a:48:4a:c2:a3:
f1:13:70:db:6d:7d:d5:45:56:79:37:68:cf:ee:b2:
54:c9:1c:69:88:b4:f9:91:55:38:99:f6:e3:cb:b0:
39:62:df:31:72:60:02:4a:d6:af:af:62:53:14:d8:
67:f7:66:36:52:59:bf:ef:17:7b:44:29:e1:1a:9f:
4a:08:c3:4a:a7:aa:50:e6:6a:80:54:38:b9:5e:10:
98:c0:4b:72:57:7d:06:df:93:8c:19:43:68:3b:db:
2f:3d:6a:d6:5d:eb:b8:b3:fc:8d:8c:26:ed:c4:22:
ef:b7:14:20:dc:44:9e:33:11:67:e6:18:d9:4b:fd:
6e:af:fc:70:b4:5d:a8:a4:1c:fe:9c:87:52:8a:a5:
8f:af:5d:e0:c7:c3:76:35:44:2c:a4:2c:94:ea:f8:
31:82:5e:58:b5:fe:95:b9:f4:ae:cb:d1:eb:d2:cb:
cd:ea:21:95:e9:00:1a:d6:75:21:76:a5:ae:06:71:
5a:c3:4f:b8:7a:54:44:92:2c:17:4a:68:c3:4d:c9:
20:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:97:13:A9:6F:61:F9:3A:A4:38:42:67:14:95:66:E7:82:91:5A:CB
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/BZcTqW9h-TqkOEJnFJVm54KRWss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.204.76.0-217.204.103.255
217.204.140.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:50:e9:6a:99:57:6d:ab:3b:7d:81:ea:54:c1:5f:45:ab:b3:
1d:8a:98:65:a3:1a:1d:18:93:5e:b3:aa:12:ec:02:e5:d1:27:
44:7e:14:ad:c3:4f:ee:32:4b:9e:8e:e9:75:de:86:2f:dd:6a:
f7:1f:ce:dd:d2:0e:2d:7d:f7:7d:01:7e:32:32:80:b8:d9:bd:
ef:6f:ef:40:a5:1b:7d:6b:ab:71:b3:54:83:e5:73:7f:fc:95:
5a:14:0c:93:24:cb:52:94:8a:a3:e4:ea:a5:05:26:ba:2f:c0:
89:aa:b2:21:6f:43:32:70:97:e0:01:c3:e9:20:c4:92:5c:db:
f5:74:53:10:10:c5:5d:17:91:3d:f8:cd:b3:4f:fc:22:e2:5c:
2d:20:14:f3:54:3d:ba:45:ad:46:c8:b3:e8:a1:91:73:0c:ca:
ab:28:a9:b0:32:fc:86:ce:35:03:25:d5:34:bc:3e:48:09:ca:
d6:88:d9:26:61:4a:17:b1:fc:d5:97:af:f7:a5:43:e7:c7:e0:
57:05:7b:ef:11:4b:c5:af:ae:0c:fb:17:45:82:a5:d3:26:0f:
09:fa:fb:04:83:9e:4f:8d:10:ed:e9:f0:eb:0e:13:a3:64:0e:
ab:88:64:cf:2f:5c:93:80:16:e5:5d:15:27:01:8f:4b:d2:e2:
cc:cf:be:a0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 3 17:38:44 2026 by rpki-client