Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BF0wsmjaVan4fsSd3pUMLK1imEs.roa
File: BF0wsmjaVan4fsSd3pUMLK1imEs.roa (raw, json)
Hash identifier: GR42g8rL74IrZzkew6qGW5nLH30PNmRcRV2rTWLUne0=
Subject key identifier: 04:5D:30:B2:68:DA:55:A9:F8:7E:C4:9D:DE:95:0C:2C:AD:62:98:4B
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F23690428FA92FC278B7B59E6BF363AC2
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BF0wsmjaVan4fsSd3pUMLK1imEs.roa
Signing time: Thu 02 Jul 2026 15:18:32 +0000
ROA not before: Thu 02 Jul 2026 15:18:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213751
IP address blocks: 109.176.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:04:28:fa:92:fc:27:8b:7b:59:e6:bf:36:3a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=045d30b268da55a9f87ec49dde950c2cad62984b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9b:de:3d:b4:4a:6d:5a:db:f7:fd:58:59:d4:
37:78:43:b9:b9:eb:56:50:bc:23:b6:4d:5a:ee:91:
cc:ff:68:6d:ad:08:f0:46:e6:48:5b:13:f6:45:81:
99:be:47:83:e3:e3:2d:15:45:34:25:c7:70:b8:29:
53:d3:c1:97:67:98:62:d5:8b:03:ec:90:24:30:9a:
b7:5a:19:10:28:08:fe:0d:89:db:62:4b:24:72:c4:
73:76:bb:f8:a8:06:d3:1b:e4:78:5d:96:a1:ff:16:
ad:a9:10:c2:f1:b8:1e:be:58:b1:31:48:39:90:cc:
9f:68:c5:67:0f:ba:60:e6:70:65:47:c6:40:a0:4a:
a1:81:73:e5:af:cd:9c:c5:98:6e:33:26:3e:15:36:
6f:17:4e:c5:24:08:90:89:28:c1:95:19:48:2d:d0:
a0:a3:70:8b:1c:45:18:60:4f:1f:fa:56:07:3d:62:
d2:7d:53:b3:39:f0:15:68:ab:a4:3f:b4:a5:42:f6:
f8:22:25:fd:9b:f8:a4:3d:dd:5b:86:e1:2b:74:27:
b5:88:e1:26:7e:a7:c3:38:70:32:c7:24:6e:c8:25:
ab:e7:b5:92:01:b0:9d:31:4c:64:cd:ce:53:83:fc:
a4:65:bb:f4:39:09:24:21:8e:ef:24:41:85:1c:c4:
de:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5D:30:B2:68:DA:55:A9:F8:7E:C4:9D:DE:95:0C:2C:AD:62:98:4B
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BF0wsmjaVan4fsSd3pUMLK1imEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.253.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:b4:19:94:f6:1d:2c:57:2c:37:24:d9:a0:5a:57:a9:a2:58:
e5:ef:3d:6e:be:1e:aa:d2:05:4d:fb:da:f3:f0:4e:a4:ed:42:
53:ca:2e:28:52:9f:49:5e:8e:d0:9d:0c:f5:c5:a0:b3:e3:7c:
4e:5f:b7:58:a9:45:ad:fa:24:56:c0:7c:5d:88:23:2d:9c:5b:
98:71:5b:c7:51:f7:68:37:18:40:c7:60:01:c7:a2:eb:89:c4:
c2:6a:b5:07:f5:58:b4:6c:87:c0:21:4e:a4:c7:f5:fa:9d:f0:
1e:08:5f:e4:db:8e:7d:56:8b:69:a8:37:fd:bd:8a:a3:5f:34:
7a:ef:d2:0a:e1:40:24:6b:4a:f2:2e:8a:c6:01:8c:d0:77:d1:
c3:ae:a2:c2:00:c3:76:5c:e1:71:0d:fc:8d:35:6a:43:6b:70:
77:b0:dc:26:4b:49:00:c0:ac:eb:36:bd:f5:05:7d:c9:a0:d7:
06:6d:85:bf:6c:45:93:ca:5e:a3:cd:d5:75:a9:96:23:15:3f:
d5:fd:83:7a:e7:02:af:d6:d3:71:ff:35:39:8b:8a:62:3e:86:
53:4a:a5:88:65:89:4a:79:b9:2f:5b:b0:a0:0c:a5:8c:14:3e:
56:09:42:b7:45:eb:2d:1c:e7:d2:ac:2e:96:11:c3:b8:df:72:
5a:23:24:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:16:50 2026 by rpki-client