Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bgNjcV-wYLRPP-RWu1Nm3gNtDno.roa
File: bgNjcV-wYLRPP-RWu1Nm3gNtDno.roa (raw, json)
Hash identifier: nw1+2WL27dsRzEAFMBypU1jR57FSlAtOSbTCRFxz5Gg=
Subject key identifier: 6E:03:63:71:5F:B0:60:B4:4F:3F:E4:56:BB:53:66:DE:03:6D:0E:7A
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F23692466D9DBD8C4B94A0B48A652ABB1
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bgNjcV-wYLRPP-RWu1Nm3gNtDno.roa
Signing time: Thu 02 Jul 2026 15:18:40 +0000
ROA not before: Thu 02 Jul 2026 15:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401922
IP address blocks: 82.152.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:24:66:d9:db:d8:c4:b9:4a:0b:48:a6:52:ab:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e0363715fb060b44f3fe456bb5366de036d0e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c3:e9:a8:5c:05:1c:89:22:80:ab:be:b0:c3:
b1:94:6f:87:d9:9a:b8:c1:b8:40:27:fc:d4:ae:6f:
40:bd:8a:38:fd:ba:93:a6:cd:35:b0:50:81:b6:05:
3e:ee:5e:2c:bd:30:f7:b2:a4:c2:6f:f4:13:0f:99:
95:ad:28:f5:82:1a:c0:7e:7e:e7:e6:8f:19:63:3c:
43:3c:61:7b:c5:ab:c9:6f:bc:5c:f9:24:ef:8c:40:
9d:97:9a:25:af:86:c5:26:2f:0d:1a:67:8f:1f:a4:
20:4b:ae:7e:82:fe:25:83:8c:cb:24:83:3d:72:b6:
b5:cc:c6:33:da:a2:ac:4a:0c:aa:3b:d8:66:a7:f9:
2d:51:72:68:86:8a:7a:9a:83:7f:f4:79:11:54:d3:
89:7b:53:99:34:cf:b5:f9:3b:08:71:3a:48:8d:68:
d9:98:19:ea:c0:a9:d0:82:87:b1:c4:b4:f7:06:60:
16:cc:5d:c2:1c:8f:71:d0:0a:a1:17:04:0d:90:5c:
2f:c4:0f:b4:4a:e7:e8:15:6f:d1:5a:5b:df:25:3d:
8a:0e:ac:b4:4b:27:24:f0:53:5d:12:2d:f0:7c:1c:
d4:63:d5:f6:d0:17:ec:42:ed:94:68:43:97:3a:b1:
6a:c2:d7:6f:99:25:09:7d:17:25:43:6e:c1:03:dc:
33:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:03:63:71:5F:B0:60:B4:4F:3F:E4:56:BB:53:66:DE:03:6D:0E:7A
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/bgNjcV-wYLRPP-RWu1Nm3gNtDno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.62.0/24
Signature Algorithm: sha256WithRSAEncryption
84:02:ed:29:92:3d:44:c0:92:d8:40:44:51:c7:1c:04:aa:70:
17:50:dc:bc:68:fc:61:39:a8:a3:9e:b8:36:6f:46:65:b7:8d:
5a:0f:92:13:2f:a3:3b:ec:31:a3:de:e2:b9:55:dc:2e:7f:53:
12:24:e5:60:ac:23:4f:a5:01:3e:af:62:a6:a5:eb:57:8f:39:
23:af:25:aa:ec:db:44:1a:5a:3e:6f:d5:e9:7b:9c:5e:80:43:
ec:45:d1:10:4b:6a:14:b0:17:51:18:e7:0f:c0:72:73:e5:16:
ac:18:ae:73:94:cb:2d:5c:d2:84:78:4f:09:04:4f:89:87:00:
a8:c6:d5:f5:d9:70:15:50:e7:24:e8:01:cd:67:fc:f7:c7:81:
4d:52:78:1d:a8:49:d1:2b:59:c5:df:5c:d4:69:54:9c:3c:6f:
fe:97:86:e7:fd:2b:c2:3f:4f:2a:bd:bb:44:4f:67:92:a3:d5:
21:a0:a1:8f:56:00:43:d7:4b:e2:e8:cd:81:4d:c7:65:c9:a0:
d1:1f:83:6c:b5:49:ce:96:49:ed:da:6c:1b:7c:d8:da:0b:7d:
08:b8:20:e9:74:1d:e9:ab:1d:3a:83:8d:43:21:cf:2f:3c:5f:
44:86:64:1d:7d:aa:20:dd:a9:28:86:11:51:e2:66:4f:c1:71:
0c:9d:2d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:21:51 2026 by rpki-client