Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/BBM9sj2aHZiRz60TeqW5Wa-IJ8o.roa
File: BBM9sj2aHZiRz60TeqW5Wa-IJ8o.roa (raw, json)
Hash identifier: WspIzfn1vQtxUcMcmc5RxSSMDkgk8I0cm+s55s8LWLg=
Subject key identifier: 04:13:3D:B2:3D:9A:1D:98:91:CF:AD:13:7A:A5:B9:59:AF:88:27:CA
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 019F9D2374A4B7D5665ABB0AD6B645A14606
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/BBM9sj2aHZiRz60TeqW5Wa-IJ8o.roa
Signing time: Sun 26 Jul 2026 06:36:14 +0000
ROA not before: Sun 26 Jul 2026 06:36:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204203
IP address blocks: 94.184.34.0/24 maxlen: 24
94.184.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9d:23:74:a4:b7:d5:66:5a:bb:0a:d6:b6:45:a1:46:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Jul 26 06:36:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04133db23d9a1d9891cfad137aa5b959af8827ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:17:2d:ca:e6:7e:64:5a:7a:cb:ee:72:80:7e:
1a:c0:b0:7d:7c:8b:64:35:06:88:05:a3:61:59:b3:
41:35:86:5d:0b:07:6c:a4:ef:11:91:b0:f9:81:0a:
f8:52:41:0d:77:27:9e:bf:db:de:45:a6:30:26:59:
4a:df:54:1b:89:54:fd:56:9d:4f:d3:22:15:25:3f:
70:46:e4:62:74:6f:30:53:9b:3f:2d:f3:29:97:e5:
0d:c6:78:f8:f6:e6:d4:0f:8b:4f:a9:93:36:af:69:
a8:ed:fc:8f:42:ad:5e:12:9e:63:8d:3a:12:43:6e:
17:1e:80:32:ec:cc:24:d9:1f:a0:a6:50:43:c5:37:
f1:dd:e0:2f:c9:60:12:56:1c:24:77:02:19:58:bf:
0b:e0:4d:3d:94:8f:34:87:92:5d:1e:0b:b6:5a:57:
65:c9:91:08:a5:90:ec:87:ee:23:42:c2:d5:ce:05:
ce:d7:77:8a:d3:50:09:86:ce:6d:df:e6:22:5b:80:
e7:29:2d:93:e0:bf:3b:3e:7d:5d:6c:02:d6:85:d9:
21:8d:1e:9b:7d:18:b8:e6:b9:9a:ac:e5:d7:42:0c:
f1:f3:8e:5b:4f:ef:90:43:d9:35:bc:2a:12:bf:1e:
bd:79:21:3d:f7:5e:87:9c:1b:dd:61:3c:cc:e5:ef:
48:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:13:3D:B2:3D:9A:1D:98:91:CF:AD:13:7A:A5:B9:59:AF:88:27:CA
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/BBM9sj2aHZiRz60TeqW5Wa-IJ8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.34.0/23
Signature Algorithm: sha256WithRSAEncryption
03:69:d0:8d:c5:3e:bc:d6:05:94:db:31:14:99:12:5d:32:94:
51:b1:b3:b0:4f:fb:66:fc:f3:29:77:4c:4b:d7:d9:23:ad:11:
8b:f1:3f:7e:7f:87:8f:74:68:b9:c2:a7:01:fd:eb:43:d5:92:
3e:b0:78:e4:78:99:3f:20:14:b4:95:a7:8f:c1:06:b8:49:ad:
69:89:9f:7a:00:c3:23:29:25:96:df:47:82:1b:cf:e8:3f:e1:
25:ff:9e:81:87:56:9b:ce:87:d2:79:06:50:c2:73:ea:35:7a:
a9:da:31:70:13:7d:51:d5:c1:71:0e:19:21:80:8e:46:ac:65:
ea:f5:b7:82:4e:19:20:23:07:b7:48:a9:5f:0c:31:9f:44:9e:
01:53:11:90:08:03:91:5f:24:aa:90:8a:ca:0a:0c:bc:36:c4:
25:28:ff:fb:42:14:96:ce:e3:7d:8f:90:7d:b3:d7:36:c6:11:
23:eb:ea:b1:40:67:7b:fe:83:a1:4e:fe:da:d7:eb:80:88:d9:
92:4d:65:11:92:a8:e3:6d:0a:26:d4:b8:71:5c:e6:16:13:d7:
62:09:0d:28:69:06:7f:fc:3f:71:09:13:a8:d7:f5:c4:8e:d4:
f7:2f:24:61:2d:11:68:e9:a4:da:5c:5c:15:26:bb:b3:f1:f1:
04:dc:5e:8e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+dI3Skt9VmWrsK1rZFoUYGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4M2Q3NjA1MTAxN2QwYWZhOTE1ZmNmYjc5MGEwMGY0NjY3
YjBhODgwHhcNMjYwNzI2MDYzNjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDEzM2RiMjNkOWExZDk4OTFjZmFkMTM3YWE1Yjk1OWFmODgyN2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BctyuZ+ZFp6y+5ygH4awLB9fItk
NQaIBaNhWbNBNYZdCwdspO8RkbD5gQr4UkENdyeev9veRaYwJllK31QbiVT9Vp1P
0yIVJT9wRuRidG8wU5s/LfMpl+UNxnj49ubUD4tPqZM2r2mo7fyPQq1eEp5jjToS
Q24XHoAy7Mwk2R+gplBDxTfx3eAvyWASVhwkdwIZWL8L4E09lI80h5JdHgu2Wldl
yZEIpZDsh+4jQsLVzgXO13eK01AJhs5t3+YiW4DnKS2T4L87Pn1dbALWhdkhjR6b
fRi45rmarOXXQgzx845bT++QQ9k1vCoSvx69eSE9916HnBvdYTzM5e9INwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAQTPbI9mh2Ykc+tE3qluVmviCfKMB8GA1UdIwQY
MBaAFFg9dgUQF9CvqRX8+3kKAPRmewqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGIt
ZGE2MTUzODg1ZjNiLzEvQkJNOXNqMmFIWmlSejYwVGVxVzVXYS1JSjhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGItZGE2MTUzODg1ZjNi
LzEvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXrgiMA0G
CSqGSIb3DQEBCwUAA4IBAQADadCNxT681gWU2zEUmRJdMpRRsbOwT/tm/PMpd0xL
19kjrRGL8T9+f4ePdGi5wqcB/etD1ZI+sHjkeJk/IBS0laePwQa4Sa1piZ96AMMj
KSWW30eCG8/oP+El/56Bh1abzofSeQZQwnPqNXqp2jFwE31R1cFxDhkhgI5GrGXq
9beCThkgIwe3SKlfDDGfRJ4BUxGQCAORXySqkIrKCgy8NsQlKP/7QhSWzuN9j5B9
s9c2xhEj6+qxQGd7/oOhTv7a1+uAiNmSTWURkqjjbQom1LhxXOYWE9diCQ0oaQZ/
/D9xCROo1/XEjtT3LyRhLRFo6aTaXFwVJruz8fEE3F6O
-----END CERTIFICATE-----
Generated at Mon Jul 27 07:50:33 2026 by rpki-client