Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/bu-4j1hPN3INZpDvcZoI16gDp2g.roa
File: bu-4j1hPN3INZpDvcZoI16gDp2g.roa (raw, json)
Hash identifier: Ii/6r5LqfpqyaOMJWeXiCGrfmyMC4wynR3UQ/Hc5UPo=
Subject key identifier: 6E:EF:B8:8F:58:4F:37:72:0D:66:90:EF:71:9A:08:D7:A8:03:A7:68
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FAA0532A41F6A75893844E0FB1F92C610
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/bu-4j1hPN3INZpDvcZoI16gDp2g.roa
Signing time: Tue 28 Jul 2026 18:38:14 +0000
ROA not before: Tue 28 Jul 2026 18:38:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399631
IP address blocks: 217.79.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:05:32:a4:1f:6a:75:89:38:44:e0:fb:1f:92:c6:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 28 18:38:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6eefb88f584f37720d6690ef719a08d7a803a768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7e:11:6a:21:72:ee:85:de:da:a2:14:1e:71:
c4:4c:3f:37:88:87:40:fd:65:be:ca:1c:b7:a9:69:
9f:fb:1d:f4:07:f3:f6:64:6b:d4:36:ec:db:0b:79:
70:c8:b5:9c:50:55:94:88:83:d8:dd:c5:7d:29:62:
f0:1f:2a:b5:eb:c6:6e:0e:3f:cc:da:46:3c:62:d6:
8d:3f:a1:fe:4d:6b:00:47:9b:8f:90:18:0a:c4:e5:
04:42:9a:39:f0:a3:a2:14:95:b3:37:ae:a0:b1:41:
30:07:d3:cf:57:21:75:ed:04:ba:85:da:f5:0c:18:
49:e2:04:07:d7:37:75:1b:ee:8f:37:17:aa:ea:10:
fe:14:f4:51:fe:e6:6f:7c:61:67:f2:f8:73:bd:e3:
ca:42:33:b0:5c:40:62:9d:67:ad:98:79:22:c2:c4:
83:0d:e4:a6:41:93:3e:a5:f5:fa:90:9b:de:75:98:
5e:07:6d:91:f5:c5:d9:09:ee:68:90:38:bb:5e:6f:
a5:b0:63:d6:91:ac:a3:9e:59:dd:11:79:23:63:d0:
42:fc:d7:9f:9e:ca:c2:af:02:90:3c:d2:f6:fb:18:
f0:fb:f8:bb:c6:c6:00:c8:17:6a:6c:52:86:78:3a:
c6:65:92:f5:a9:8e:24:ae:40:46:cc:2f:12:0e:4e:
28:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:EF:B8:8F:58:4F:37:72:0D:66:90:EF:71:9A:08:D7:A8:03:A7:68
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/bu-4j1hPN3INZpDvcZoI16gDp2g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.79.99.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:6e:a1:b7:fd:a4:ed:fd:75:2a:60:b1:70:78:01:7b:c5:be:
6e:b7:a9:b2:fb:09:a2:4f:3c:73:67:e4:87:b1:2e:04:bd:86:
16:04:d9:6b:f8:38:88:1c:86:b2:c5:6c:bf:9d:71:36:09:99:
7b:80:33:01:86:fc:5a:1c:af:16:5f:ff:3b:ae:ba:b0:d4:a9:
d7:6f:0a:14:07:9b:40:fe:fe:af:09:ec:49:13:f4:39:b3:4f:
29:88:4e:89:f1:09:ec:20:68:a4:8f:33:ff:ac:99:ba:5a:9c:
1d:9a:69:f7:5a:2a:5c:19:f7:b3:4b:55:08:49:ad:d2:5e:53:
e9:93:e2:e2:f8:55:9d:10:2c:59:2a:db:66:70:65:ca:54:a2:
09:21:54:21:64:44:92:f6:56:72:a4:d3:0d:4f:7d:9f:7e:ff:
38:7c:cc:84:f7:e4:42:a5:33:b8:a7:12:ff:05:78:fe:66:e7:
50:a6:18:b8:03:b0:f9:32:5b:27:11:1d:3e:85:33:a4:f4:97:
35:82:10:8b:57:d1:46:cf:62:81:db:a9:a0:f6:83:c7:05:63:
52:c0:09:42:e6:03:d4:bb:cc:08:b6:d0:d9:3d:b6:18:04:43:
af:27:98:3e:0b:37:7d:35:12:65:2f:4f:60:e1:bd:65:88:53:
a6:c8:e3:86
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+qBTKkH2p1iThE4PsfksYQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwNzI4MTgzODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZWVmYjg4ZjU4NGYzNzcyMGQ2NjkwZWY3MTlhMDhkN2E4MDNhNzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAln4RaiFy7oXe2qIUHnHETD83iIdA
/WW+yhy3qWmf+x30B/P2ZGvUNuzbC3lwyLWcUFWUiIPY3cV9KWLwHyq168ZuDj/M
2kY8YtaNP6H+TWsAR5uPkBgKxOUEQpo58KOiFJWzN66gsUEwB9PPVyF17QS6hdr1
DBhJ4gQH1zd1G+6PNxeq6hD+FPRR/uZvfGFn8vhzvePKQjOwXEBinWetmHkiwsSD
DeSmQZM+pfX6kJvedZheB22R9cXZCe5okDi7Xm+lsGPWkayjnlndEXkjY9BC/Nef
nsrCrwKQPNL2+xjw+/i7xsYAyBdqbFKGeDrGZZL1qY4krkBGzC8SDk4ohQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG7vuI9YTzdyDWaQ73GaCNeoA6doMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvYnUtNGoxaFBOM0lOWnBEdmNab0kxNmdEcDJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2U9jMA0G
CSqGSIb3DQEBCwUAA4IBAQAvbqG3/aTt/XUqYLFweAF7xb5ut6my+wmiTzxzZ+SH
sS4EvYYWBNlr+DiIHIayxWy/nXE2CZl7gDMBhvxaHK8WX/87rrqw1KnXbwoUB5tA
/v6vCexJE/Q5s08piE6J8QnsIGikjzP/rJm6Wpwdmmn3WipcGfezS1UISa3SXlPp
k+Li+FWdECxZKttmcGXKVKIJIVQhZESS9lZypNMNT32ffv84fMyE9+RCpTO4pxL/
BXj+ZudQphi4A7D5MlsnER0+hTOk9Jc1ghCLV9FGz2KB26mg9oPHBWNSwAlC5gPU
u8wIttDZPbYYBEOvJ5g+Czd9NRJlL09g4b1liFOmyOOG
-----END CERTIFICATE-----
Generated at Tue Aug 18 00:08:18 2026 by rpki-client