Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BwmYSZRV6pca_0H4TEq4efg-bUE.roa
File: BwmYSZRV6pca_0H4TEq4efg-bUE.roa (raw, json)
Hash identifier: A4A5JYKkAnRdrcrlqGtqQTFBXQ+N+l3kA3ZazOF/OkA=
Subject key identifier: 07:09:98:49:94:55:EA:97:1A:FF:41:F8:4C:4A:B8:79:F8:3E:6D:41
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A168FF7507E85F8664F1316C4AEE8F127A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BwmYSZRV6pca_0H4TEq4efg-bUE.roa
Signing time: Fri 23 Oct 2026 13:42:14 +0000
ROA not before: Fri 23 Oct 2026 13:42:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201861
IP address blocks: 94.183.199.0/24 maxlen: 24
94.183.212.0/24 maxlen: 24
217.60.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:ff:75:07:e8:5f:86:64:f1:31:6c:4a:ee:8f:12:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Oct 23 13:42:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=070998499455ea971aff41f84c4ab879f83e6d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7b:fb:6e:8a:b0:ec:2f:c3:e5:7d:0b:21:91:
ad:c6:1d:ff:2b:5e:6a:89:95:2e:36:53:c8:6c:0c:
98:9e:fe:46:e1:41:a2:40:a4:ca:ee:27:31:53:4a:
d8:0d:84:68:cf:f5:bf:82:5c:a3:75:9e:27:49:e9:
be:de:91:bc:64:6a:6f:d4:96:08:99:31:13:46:f2:
72:bc:c4:bc:e1:63:8f:5c:79:70:2f:c9:6a:a0:3f:
8d:15:a1:a0:fd:b5:2f:22:85:fc:ac:41:2c:e4:05:
03:18:5f:8a:84:71:53:32:e8:8c:b2:60:8e:8a:cb:
3d:d7:e8:8a:0f:e9:73:85:b7:46:20:39:d9:4b:57:
70:e2:50:75:5d:ce:aa:1d:67:24:de:2c:c3:32:0d:
df:6e:80:ed:99:94:ee:c3:4c:88:b9:fb:fc:da:d9:
1d:9e:6b:b7:c4:7e:b1:af:80:9d:c2:aa:b9:eb:f1:
1e:4e:42:71:6e:a5:58:37:f5:ce:1f:9c:12:f7:c2:
c0:17:a2:1a:5f:cb:5c:5d:a9:8c:5d:2f:e7:16:b3:
db:97:e4:26:c3:1a:b8:b5:8b:c9:cb:5b:99:46:69:
48:fd:0d:2a:18:bc:a8:c6:13:65:a8:bb:48:72:ba:
ae:8a:8a:06:8a:52:88:2c:71:1d:28:fa:a0:e4:66:
b0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:09:98:49:94:55:EA:97:1A:FF:41:F8:4C:4A:B8:79:F8:3E:6D:41
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BwmYSZRV6pca_0H4TEq4efg-bUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.199.0/24
94.183.212.0/24
217.60.70.0/24
Signature Algorithm: sha256WithRSAEncryption
53:17:88:81:22:c4:8e:e2:49:dc:70:47:8b:f3:96:b5:f0:e3:
60:cb:fe:4a:9a:7b:b0:db:21:41:7f:8e:6f:61:94:32:d2:ec:
dd:f8:1f:a2:d3:f9:81:43:ba:c2:71:34:dd:ee:5c:54:17:bc:
b0:6f:99:23:88:42:5a:b1:1a:f6:11:02:88:db:24:22:af:ad:
59:f8:9e:c3:5a:50:a0:70:62:a2:7b:4e:cf:c4:93:a7:bb:22:
71:61:6a:ce:ff:77:f0:0c:08:12:14:5c:b0:2c:2e:6f:44:90:
6a:8e:8a:b8:51:54:b6:9d:32:8d:84:5e:26:bf:f4:60:1b:5e:
01:1e:5a:a7:a6:21:d9:3a:e0:b6:8b:b1:2c:ad:44:e4:62:30:
33:e9:b4:d2:92:c7:d8:19:52:f4:6b:99:2a:82:c0:a3:fd:4c:
35:3c:bb:b0:9c:1a:3e:88:bc:ad:94:1d:3f:d2:29:a3:9c:41:
45:de:57:21:48:de:d6:e8:c9:ab:a6:2c:f7:69:55:9f:b9:37:
68:19:24:2d:f7:ca:cf:11:9b:7f:1f:bb:92:78:6e:e8:92:d7:
37:15:e5:8b:fd:d3:fa:f1:4b:8a:a1:83:90:6f:9b:61:e6:3e:
6d:f5:c8:8e:d7:cf:70:e7:d9:10:5c:35:97:b3:32:33:8d:f3:
8f:da:95:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:35:13 2026 by rpki-client