Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/BUpDXA-9PM8mo_OmL8jDzt9XPiA.roa
File: BUpDXA-9PM8mo_OmL8jDzt9XPiA.roa (raw, json)
Hash identifier: NpL9h5Nuxg+OfKDLIKKIWiYNz0C3WOuf7vs72N+Y/vY=
Subject key identifier: 05:4A:43:5C:0F:BD:3C:CF:26:A3:F3:A6:2F:C8:C3:CE:DF:57:3E:20
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 019EDF50B2764F1FE3887C930711447658B6
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/BUpDXA-9PM8mo_OmL8jDzt9XPiA.roa
Signing time: Fri 19 Jun 2026 09:57:48 +0000
ROA not before: Fri 19 Jun 2026 09:57:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 77.246.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 00:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:df:50:b2:76:4f:1f:e3:88:7c:93:07:11:44:76:58:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jun 19 09:57:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=054a435c0fbd3ccf26a3f3a62fc8c3cedf573e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d6:d3:4c:16:31:37:85:65:d2:8c:bb:03:f1:
fe:3c:60:7b:18:e5:18:0e:c2:64:ba:37:06:59:af:
2a:84:38:8e:7b:58:0c:0c:d3:55:58:1d:41:76:33:
eb:d9:1b:03:0b:10:4e:16:dd:64:90:79:8d:f4:71:
61:a7:ed:75:f4:e8:9b:67:66:77:4c:7f:43:c4:2e:
94:78:f8:21:7c:c7:73:40:2f:4e:e9:4f:4a:f6:0c:
5f:f7:5f:3f:e3:af:b9:1b:ac:4b:11:72:29:26:09:
ef:93:41:c7:2f:87:53:56:38:c2:39:7d:ba:7e:08:
75:62:35:fa:23:65:98:5a:7a:82:cd:57:13:51:1d:
76:dc:75:b7:06:b5:b2:b0:36:fe:58:35:35:8e:e1:
58:4b:18:61:34:8f:04:c4:a2:b0:cd:b6:80:95:bc:
15:00:d7:28:5d:5e:a2:48:68:3d:38:1e:10:ca:c8:
3f:a4:01:5c:df:fb:98:29:33:71:6a:77:ad:e2:01:
3a:72:06:cb:09:60:50:f3:0b:fa:a2:bd:6a:a4:31:
06:03:a9:de:20:a2:56:56:c8:05:12:98:4e:59:10:
37:87:2a:3e:bb:1a:88:2d:fe:54:a7:c1:d4:69:e2:
93:b9:f0:af:50:96:4b:68:9f:d1:4c:6d:09:e0:2f:
2c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4A:43:5C:0F:BD:3C:CF:26:A3:F3:A6:2F:C8:C3:CE:DF:57:3E:20
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/BUpDXA-9PM8mo_OmL8jDzt9XPiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.221.0/24
Signature Algorithm: sha256WithRSAEncryption
63:6c:36:2d:c7:a7:a3:96:bd:9e:76:74:a8:a4:b5:3a:37:30:
19:36:c3:e0:ef:ad:90:82:d8:83:94:09:44:e0:c0:94:ba:11:
ab:88:49:c0:cb:76:40:0f:0d:ef:a1:1a:9f:fc:40:a7:b9:ea:
c0:a2:92:f6:19:73:65:e3:39:84:62:89:69:82:83:e7:4f:18:
6d:65:64:54:18:1e:4b:4a:6a:8e:2b:06:fb:b9:d9:12:e0:06:
6c:83:2e:7c:3e:54:e3:1c:59:ea:d8:b9:fc:8c:28:4b:8b:64:
6b:e1:94:1d:58:1c:d2:07:bb:8d:47:05:2b:ef:54:d6:6e:f4:
e9:e1:2d:2f:65:07:76:e5:81:8a:ab:e8:3c:8f:6e:a4:25:0b:
06:c3:03:88:f2:2b:39:04:26:a2:6c:fb:30:32:28:5f:b4:63:
d0:c5:ad:68:de:dd:3f:ab:d1:f1:9e:79:86:c0:ed:ae:18:91:
23:cc:3b:60:00:f6:b8:94:6c:ad:ea:75:4f:94:4d:86:22:99:
4f:43:a3:5e:13:07:8b:c4:12:e2:7b:81:06:b1:de:fc:21:a2:
52:c0:fd:3e:29:81:09:3a:05:8c:10:b3:64:17:01:a2:6c:7d:
66:11:51:9d:82:d0:71:c5:16:d5:fa:5b:64:a6:45:a4:37:b6:
fb:98:68:50
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7fULJ2Tx/jiHyTBxFEdli2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2
MzFiZmIwHhcNMjYwNjE5MDk1NzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTRhNDM1YzBmYmQzY2NmMjZhM2YzYTYyZmM4YzNjZWRmNTczZTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdbTTBYxN4Vl0oy7A/H+PGB7GOUY
DsJkujcGWa8qhDiOe1gMDNNVWB1BdjPr2RsDCxBOFt1kkHmN9HFhp+119OibZ2Z3
TH9DxC6UePghfMdzQC9O6U9K9gxf918/46+5G6xLEXIpJgnvk0HHL4dTVjjCOX26
fgh1YjX6I2WYWnqCzVcTUR123HW3BrWysDb+WDU1juFYSxhhNI8ExKKwzbaAlbwV
ANcoXV6iSGg9OB4Qysg/pAFc3/uYKTNxanet4gE6cgbLCWBQ8wv6or1qpDEGA6ne
IKJWVsgFEphOWRA3hyo+uxqILf5Up8HUaeKTufCvUJZLaJ/RTG0J4C8saQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAVKQ1wPvTzPJqPzpi/Iw87fVz4gMB8GA1UdIwQY
MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt
YWI4ZjFmMzM4N2VlLzEvQlVwRFhBLTlQTThtb19PbUw4akR6dDlYUGlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl
LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATfbdMA0G
CSqGSIb3DQEBCwUAA4IBAQBjbDYtx6ejlr2ednSopLU6NzAZNsPg762QgtiDlAlE
4MCUuhGriEnAy3ZADw3voRqf/ECnuerAopL2GXNl4zmEYolpgoPnTxhtZWRUGB5L
SmqOKwb7udkS4AZsgy58PlTjHFnq2Ln8jChLi2Rr4ZQdWBzSB7uNRwUr71TWbvTp
4S0vZQd25YGKq+g8j26kJQsGwwOI8is5BCaibPswMihftGPQxa1o3t0/q9HxnnmG
wO2uGJEjzDtgAPa4lGyt6nVPlE2GIplPQ6NeEweLxBLie4EGsd78IaJSwP0+KYEJ
OgWMELNkFwGibH1mEVGdgtBxxRbV+ltkpkWkN7b7mGhQ
-----END CERTIFICATE-----
Generated at Mon Jun 29 09:59:53 2026 by rpki-client