Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/BiM5LxW5qvRjEp2keJNzm9u7VPc.roa
File: BiM5LxW5qvRjEp2keJNzm9u7VPc.roa (raw, json)
Hash identifier: +2yiPexL5iLD0vdODbDPQRtRM0VrKm5eDi0szvUR44s=
Subject key identifier: 06:23:39:2F:15:B9:AA:F4:63:12:9D:A4:78:93:73:9B:DB:BB:54:F7
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 019F7F6A8287F3565588CC42A0A5F2ABE266
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/BiM5LxW5qvRjEp2keJNzm9u7VPc.roa
Signing time: Mon 20 Jul 2026 12:05:14 +0000
ROA not before: Mon 20 Jul 2026 12:05:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 77.246.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7f:6a:82:87:f3:56:55:88:cc:42:a0:a5:f2:ab:e2:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jul 20 12:05:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0623392f15b9aaf463129da47893739bdbbb54f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:25:be:ed:0c:e4:ff:8e:36:f3:c8:29:44:71:
2e:47:6f:1a:45:53:61:1a:bb:e9:b4:37:c8:39:8e:
ff:01:03:9f:8e:ac:ed:94:ea:8d:78:e5:78:9c:ef:
1d:b4:ab:16:e5:29:71:07:8d:2d:b8:7f:14:7e:70:
cb:97:4f:d7:68:dd:bc:15:eb:2a:78:8e:d2:f3:22:
ef:53:e7:8a:29:8c:d1:bb:4a:10:0f:f9:5e:94:6f:
ae:90:39:af:e1:4a:3e:57:f6:65:0d:14:84:46:52:
2d:f4:90:2d:d9:74:93:ec:98:10:03:0f:d3:eb:8c:
17:d6:9e:5b:4b:b4:c0:5e:12:45:b4:82:d3:06:f6:
f9:85:df:14:46:1a:08:d3:32:71:ab:c0:8e:49:9d:
c0:18:01:aa:d3:68:35:16:12:2d:e6:ea:67:6b:60:
ac:d7:98:06:d8:56:53:b1:24:8b:87:06:67:f0:e0:
ac:c6:8d:92:ad:a5:86:07:2c:b1:fb:20:a2:52:f0:
2e:e4:75:18:b0:b6:94:07:45:73:09:24:43:db:2c:
58:11:c2:66:66:bd:cd:b9:ec:98:b9:5a:93:c5:84:
68:98:cd:66:33:ee:b6:36:4e:88:97:b1:9a:1c:1a:
27:f0:6f:c7:ec:f5:e3:b8:26:f7:ea:4c:c7:8b:9e:
80:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:23:39:2F:15:B9:AA:F4:63:12:9D:A4:78:93:73:9B:DB:BB:54:F7
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/BiM5LxW5qvRjEp2keJNzm9u7VPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.221.0/24
Signature Algorithm: sha256WithRSAEncryption
18:c9:57:3f:6f:71:80:d3:65:04:9a:9f:22:44:49:ae:23:34:
55:bd:1b:db:f1:c6:b7:3f:99:2c:b1:2a:db:0b:90:b6:c4:ad:
aa:fa:2d:20:11:85:b7:45:d8:66:94:25:84:53:aa:92:82:70:
e4:83:5c:06:86:fe:15:0a:f2:ab:e6:f9:3f:99:a5:79:47:32:
82:50:a8:2c:cd:dc:19:0b:85:e9:76:34:5c:78:23:02:64:a7:
e2:e5:6b:26:44:f5:fe:5c:69:22:fd:e9:e5:ce:72:68:65:a3:
ad:6d:a0:f6:f3:a1:cd:c7:30:6d:12:df:47:b5:ee:ce:da:ce:
97:13:e1:a8:d1:ff:61:29:a5:f8:b4:5c:fa:5e:e6:17:ab:75:
87:79:a3:3d:49:25:1a:fe:2b:d1:a7:2d:fa:4e:84:e4:7f:42:
79:a0:46:5e:da:92:0d:90:ea:b3:4a:75:d8:2e:7e:8d:1d:fa:
37:a3:b7:41:f2:df:8d:bf:c2:f0:49:22:69:df:48:ef:6c:30:
9f:79:30:d0:43:99:1d:13:16:76:1d:f8:8b:a6:65:87:63:1d:
85:f4:91:8a:3f:ef:4a:41:77:78:1a:5d:58:c3:48:a3:f6:eb:
ba:8c:d7:57:54:1f:da:02:5b:64:68:ac:d3:ca:7b:48:d4:18:
17:32:f3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:37 2026 by rpki-client