Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/vd2NQOBj5lSde-m3HqUwXoo_Q5Y.roa
File: vd2NQOBj5lSde-m3HqUwXoo_Q5Y.roa (raw, json)
Hash identifier: YTexY3/D7amaR9YR6Y4Hve22o/zq6VGa3rMg4qGGB1Y=
Subject key identifier: BD:DD:8D:40:E0:63:E6:54:9D:7B:E9:B7:1E:A5:30:5E:8A:3F:43:96
Certificate issuer: /CN=bc2044ed31f0548148babfe06f2ce042a1296f01
Certificate serial: 019F23688ED50C1B9DB63427FBC0B8BE2AAB
Authority key identifier: BC:20:44:ED:31:F0:54:81:48:BA:BF:E0:6F:2C:E0:42:A1:29:6F:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCBE7THwVIFIur_gbyzgQqEpbwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/vd2NQOBj5lSde-m3HqUwXoo_Q5Y.roa
Signing time: Thu 02 Jul 2026 15:18:02 +0000
ROA not before: Thu 02 Jul 2026 15:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199408
IP address blocks: 91.194.0.0/23 maxlen: 23
91.194.14.0/23 maxlen: 23
91.194.14.0/24 maxlen: 24
91.194.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/vCBE7THwVIFIur_gbyzgQqEpbwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/vCBE7THwVIFIur_gbyzgQqEpbwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCBE7THwVIFIur_gbyzgQqEpbwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:8e:d5:0c:1b:9d:b6:34:27:fb:c0:b8:be:2a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc2044ed31f0548148babfe06f2ce042a1296f01
Validity
Not Before: Jul 2 15:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bddd8d40e063e6549d7be9b71ea5305e8a3f4396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:31:bd:eb:d4:e8:99:eb:f7:08:01:88:10:1d:
1e:b6:63:94:a3:b2:17:05:7c:f7:69:07:6f:22:64:
09:c9:e7:35:ec:eb:e9:6f:19:43:46:1e:66:7a:78:
be:9b:2e:13:e7:5b:d3:65:1f:77:88:9b:af:d4:54:
a2:6c:47:61:49:22:7e:01:2d:bb:9b:82:8f:2a:5b:
e5:6e:d8:56:b0:16:ab:fc:a3:fc:e2:c7:e8:2b:47:
06:0a:b6:38:bb:83:de:d2:81:c1:fc:03:ac:82:65:
e1:8a:42:b0:68:9d:76:72:f0:0c:48:7c:44:ab:5b:
f4:8b:36:ea:e4:e6:83:3a:c4:a1:76:6a:5f:87:87:
9a:80:f1:95:c5:4f:24:5c:77:f5:35:25:ff:ff:e6:
21:13:62:40:9e:f6:07:f7:56:0c:8a:0a:9f:ec:93:
77:74:f9:ad:dd:5e:f1:e8:5a:5e:f0:79:70:65:f4:
ef:d1:4a:96:c5:41:fd:67:cc:d0:53:0b:bb:40:30:
c8:dd:cc:50:f9:76:ba:f9:e9:97:35:7d:54:aa:f0:
50:74:c5:08:d3:3c:83:d9:a7:21:29:3c:3c:43:f5:
2c:e0:d8:3a:b8:d6:95:ee:a6:9a:2e:9c:8d:96:4c:
dd:89:80:2c:02:6b:e5:de:d9:84:1a:4f:29:e9:c4:
ca:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DD:8D:40:E0:63:E6:54:9D:7B:E9:B7:1E:A5:30:5E:8A:3F:43:96
X509v3 Authority Key Identifier:
keyid:BC:20:44:ED:31:F0:54:81:48:BA:BF:E0:6F:2C:E0:42:A1:29:6F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCBE7THwVIFIur_gbyzgQqEpbwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/vd2NQOBj5lSde-m3HqUwXoo_Q5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/vCBE7THwVIFIur_gbyzgQqEpbwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.0.0/23
91.194.14.0/23
Signature Algorithm: sha256WithRSAEncryption
41:d0:e0:41:92:18:3c:23:23:b9:f7:8d:ce:a0:6b:51:db:1f:
ca:a7:26:56:61:4c:f7:ca:c6:53:3c:74:75:83:c9:91:fe:1b:
60:d9:c7:08:55:a6:ee:ef:30:64:26:43:53:ce:e4:74:31:bb:
5b:b9:19:51:80:d4:d6:a0:29:88:39:da:49:4b:3b:22:96:0e:
fe:c7:27:bf:e4:21:a1:07:1e:da:ad:8b:dd:90:db:ad:6d:ca:
65:6b:fd:05:ad:2a:8e:f2:5c:68:34:e3:05:4d:cd:98:19:24:
9b:51:72:1e:05:2b:da:70:53:2b:1d:52:d0:0a:12:bf:c4:1c:
fa:3e:d3:bd:29:8a:43:74:22:8c:2a:f2:2a:df:27:ca:ed:d5:
6a:12:8c:64:0f:19:b2:94:5f:c5:65:4e:0f:eb:ec:2c:fc:e3:
15:84:0a:37:89:a7:4c:27:ff:5a:28:19:c0:d5:26:3a:3c:fc:
fb:cc:e1:40:3e:3d:9f:3a:90:82:89:31:e0:ad:d4:d6:5f:b0:
38:d4:03:41:38:13:fd:a5:a2:1a:aa:9c:d4:41:86:af:e7:7f:
37:e2:7c:13:04:05:75:10:af:19:b3:91:a4:c1:18:96:86:f9:
9d:3e:f4:57:66:f6:7b:99:42:73:d1:ff:1f:e1:8d:ce:8a:33:
05:c1:f2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 21:45:43 2026 by rpki-client