Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/f5a17c-3e11-4db7-bad7-74a6af3430ca/1/BONGVQ_9tgmglyy8pCmz956qiQA.roa
File: BONGVQ_9tgmglyy8pCmz956qiQA.roa (raw, json)
Hash identifier: 249RJPU6WsqlPULSdeyom3LL1gKe2oZo+grA22c8hWs=
Subject key identifier: 04:E3:46:55:0F:FD:B6:09:A0:97:2C:BC:A4:29:B3:F7:9E:AA:89:00
Certificate issuer: /CN=b8f9f74fa3eb46b6f7403b2650216a7bb45f93fb
Certificate serial: 01A0F73594C3170423829A2E84F79B62A2A8
Authority key identifier: B8:F9:F7:4F:A3:EB:46:B6:F7:40:3B:26:50:21:6A:7B:B4:5F:93:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPn3T6PrRrb3QDsmUCFqe7Rfk_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f5a17c-3e11-4db7-bad7-74a6af3430ca/1/BONGVQ_9tgmglyy8pCmz956qiQA.roa
Signing time: Thu 01 Oct 2026 11:24:38 +0000
ROA not before: Thu 01 Oct 2026 11:24:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208437
IP address blocks: 213.217.5.0/24 maxlen: 24
213.217.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f5a17c-3e11-4db7-bad7-74a6af3430ca/1/uPn3T6PrRrb3QDsmUCFqe7Rfk_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/f5a17c-3e11-4db7-bad7-74a6af3430ca/1/uPn3T6PrRrb3QDsmUCFqe7Rfk_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uPn3T6PrRrb3QDsmUCFqe7Rfk_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:35:94:c3:17:04:23:82:9a:2e:84:f7:9b:62:a2:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8f9f74fa3eb46b6f7403b2650216a7bb45f93fb
Validity
Not Before: Oct 1 11:24:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04e346550ffdb609a0972cbca429b3f79eaa8900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9f:3f:49:a3:da:b8:3e:00:bf:0c:b9:2e:25:
64:fd:df:e7:a8:5b:cf:14:21:3b:f6:c7:f8:e2:74:
1c:c1:29:33:dc:bf:e5:51:13:ad:44:c0:a5:a5:b1:
a0:3d:51:2a:49:bd:4a:63:a9:1e:4c:c2:92:69:d2:
ea:5f:10:7d:8f:d7:52:2b:70:5b:1f:7d:2e:a6:8c:
b3:67:24:9a:2f:f0:43:78:b9:47:6d:b6:b8:4d:06:
1d:d8:b6:74:8b:63:07:ea:1a:fc:bd:73:ed:42:29:
38:57:bc:76:e7:4b:73:14:56:88:3e:26:ce:99:b1:
ea:ff:98:f3:7a:da:f0:58:05:5b:c4:2e:f9:e1:a5:
52:6c:a4:97:61:2d:fc:b6:ac:78:86:9a:b4:3e:e1:
c3:f7:b9:6c:c4:c1:c8:1a:80:d9:68:8f:94:6f:1d:
97:03:2b:21:08:ac:f3:63:66:02:7c:f9:50:1e:52:
04:bf:90:5a:ad:2b:6e:6e:ed:7d:28:fc:9d:5f:d1:
04:9b:af:16:6f:b8:79:83:7c:e8:00:66:23:6c:dd:
d3:af:a8:7f:7e:db:54:2a:88:c9:30:20:5b:b7:d6:
bd:4b:60:b4:20:61:8b:ad:be:82:8c:4b:5b:80:19:
a3:07:75:c1:dc:15:f0:53:b2:9c:4e:c7:fa:8c:50:
bb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E3:46:55:0F:FD:B6:09:A0:97:2C:BC:A4:29:B3:F7:9E:AA:89:00
X509v3 Authority Key Identifier:
keyid:B8:F9:F7:4F:A3:EB:46:B6:F7:40:3B:26:50:21:6A:7B:B4:5F:93:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPn3T6PrRrb3QDsmUCFqe7Rfk_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f5a17c-3e11-4db7-bad7-74a6af3430ca/1/BONGVQ_9tgmglyy8pCmz956qiQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f5a17c-3e11-4db7-bad7-74a6af3430ca/1/uPn3T6PrRrb3QDsmUCFqe7Rfk_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.217.5.0-213.217.6.255
Signature Algorithm: sha256WithRSAEncryption
a6:65:ea:86:14:67:12:26:16:40:45:65:78:17:c9:1e:77:d5:
da:0f:66:83:94:6e:72:fb:f8:5f:6e:2e:1e:f7:9d:55:14:3c:
7f:d3:93:d7:32:06:b2:c4:b9:5d:16:f2:7b:4d:bc:12:69:b8:
3d:7a:d3:19:d2:35:8a:92:ee:9f:28:cd:79:9e:c5:99:cb:61:
27:19:40:b6:18:46:48:02:eb:c9:cd:39:13:8f:3e:db:a5:8a:
60:58:ba:6b:3d:66:98:fe:29:9b:9f:c4:3a:f8:29:9f:2b:cf:
71:d5:ed:90:84:72:a2:ae:6c:3a:0c:cc:53:c8:45:be:b5:7c:
93:fe:f6:8d:6c:6e:58:ce:81:af:62:20:6d:59:08:14:3a:3d:
a2:e7:05:44:ed:b6:2e:3f:29:d0:43:1a:e4:08:1e:ee:c7:fa:
52:9c:dc:a0:88:86:f7:6d:9f:cd:ac:9a:2d:03:06:36:d3:a6:
16:29:fa:50:5f:06:db:6d:71:77:e2:df:55:3b:bf:b2:d2:9d:
48:28:05:0c:ec:40:43:3d:3b:39:d3:cd:6b:46:d1:70:a8:97:
2e:4b:0e:ae:3f:cc:f3:2b:66:df:0e:fc:78:81:c0:a8:42:ac:
3c:52:ee:30:f3:c2:51:24:aa:3f:e7:5c:af:f1:4a:f6:11:19:
13:cd:99:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 05:28:32 2026 by rpki-client