Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/1-BXJvjRZK9EAgxmoIL9zEqtie4U.roa
File: 1-BXJvjRZK9EAgxmoIL9zEqtie4U.roa (raw, json)
Hash identifier: eIjaA6tFXeGOC8TZxrzK/xbOybNP9upJeQZsoLhhvCc=
Subject key identifier: F8:15:C9:BE:34:59:2B:D1:00:83:19:A8:20:BF:73:12:AB:62:7B:85
Certificate issuer: /CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51
Certificate serial: 019FFC6CF954B167D9EB70ED4FD95422DF79
Authority key identifier: F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/1-BXJvjRZK9EAgxmoIL9zEqtie4U.roa
Signing time: Thu 13 Aug 2026 18:40:27 +0000
ROA not before: Thu 13 Aug 2026 18:40:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211486
IP address blocks: 77.91.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Aug 2026 09:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fc:6c:f9:54:b1:67:d9:eb:70:ed:4f:d9:54:22:df:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e160f0ce5e035af3cb21f4dfd04eab9ea7ee51
Validity
Not Before: Aug 13 18:40:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f815c9be34592bd1008319a820bf7312ab627b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:81:de:a1:75:d0:5f:fa:c5:aa:5b:0a:a1:c7:
2c:9f:27:bd:77:50:cf:8e:07:62:dd:66:19:06:5f:
9e:75:fc:31:47:51:9c:58:a7:4f:64:91:16:5a:63:
fd:ff:31:72:10:9d:3d:6b:ad:aa:a1:a8:50:c2:9e:
75:c2:a1:50:4a:e9:d9:cf:3a:63:14:74:d4:23:88:
a7:56:76:08:dc:f6:15:f7:0d:df:1b:89:76:f1:62:
be:91:77:af:c5:5e:34:ba:a1:be:ba:ee:14:94:d1:
40:5f:66:cc:6a:b5:76:55:69:6b:2e:be:82:5a:58:
20:3d:82:55:7f:f5:3d:03:49:88:a4:73:0f:e0:8a:
ab:13:fa:93:85:df:17:36:ad:f4:65:d2:3a:ef:83:
da:8a:fa:d0:c6:5b:f1:f3:15:57:eb:ab:bb:11:02:
16:5c:b6:72:4f:9d:c3:42:18:ce:56:b9:68:6b:e8:
b9:2f:bc:98:30:82:b6:a5:34:bf:d6:b7:c3:f1:d8:
17:8c:73:f3:16:b3:c5:6a:38:74:9e:01:15:eb:f8:
70:d0:82:6d:11:ec:05:39:b4:10:24:11:84:7a:91:
e0:89:78:2b:28:18:91:e0:74:4c:eb:d4:37:3e:78:
2f:48:65:af:a1:bf:82:31:22:b3:f3:51:f0:fb:7e:
24:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:15:C9:BE:34:59:2B:D1:00:83:19:A8:20:BF:73:12:AB:62:7B:85
X509v3 Authority Key Identifier:
keyid:F2:E1:60:F0:CE:5E:03:5A:F3:CB:21:F4:DF:D0:4E:AB:9E:A7:EE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uFg8M5eA1rzyyH039BOq56n7lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/1-BXJvjRZK9EAgxmoIL9zEqtie4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3b1544-4b50-4684-ab75-fce214c6ffda/1/8uFg8M5eA1rzyyH039BOq56n7lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.122.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:dd:38:76:48:19:d6:7c:3e:f6:95:f3:3c:8d:75:22:8a:df:
d3:8d:8c:61:b5:91:93:9c:a6:b6:f0:63:bd:6f:c5:76:6d:d6:
0c:c2:8d:95:22:b6:8d:9f:32:b6:51:27:c7:11:74:c5:6c:6a:
92:d5:ca:aa:47:52:85:8b:38:5e:0b:27:5e:b2:05:fa:9d:ac:
ef:ef:8c:7d:2d:cc:b2:5f:15:c3:90:9c:11:96:3c:03:b9:5b:
dd:a9:28:89:71:c5:71:16:c5:ab:27:b5:de:f7:b5:67:71:73:
f3:06:d4:11:3d:21:13:e2:d2:94:90:7f:79:26:91:b0:4b:6b:
13:e3:fe:20:ad:05:7c:80:a6:12:91:db:ab:da:7c:24:ae:c1:
7f:a5:78:8c:c3:bc:02:a7:43:8d:80:91:9d:4b:7a:6d:31:75:
07:d3:04:d3:07:f9:ea:2e:91:34:64:68:5a:f5:4f:96:82:f9:
9c:1b:9e:6e:17:07:78:56:0e:cc:c7:db:eb:1d:5f:7c:ca:cf:
09:22:ac:52:31:4b:b9:69:f7:f1:ba:1c:67:1d:49:42:0b:14:
7c:01:29:40:2c:10:36:0e:bd:f5:51:1c:ca:d4:00:15:d0:c8:
79:a2:33:37:48:97:be:14:94:28:c8:01:0e:1e:4b:f4:a2:be:
74:96:10:be
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ/8bPlUsWfZ63DtT9lUIt95MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZTE2MGYwY2U1ZTAzNWFmM2NiMjFmNGRmZDA0ZWFiOWVh
N2VlNTEwHhcNMjYwODEzMTg0MDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODE1YzliZTM0NTkyYmQxMDA4MzE5YTgyMGJmNzMxMmFiNjI3Yjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoHeoXXQX/rFqlsKoccsnye9d1DP
jgdi3WYZBl+edfwxR1GcWKdPZJEWWmP9/zFyEJ09a62qoahQwp51wqFQSunZzzpj
FHTUI4inVnYI3PYV9w3fG4l28WK+kXevxV40uqG+uu4UlNFAX2bMarV2VWlrLr6C
WlggPYJVf/U9A0mIpHMP4IqrE/qThd8XNq30ZdI674PaivrQxlvx8xVX66u7EQIW
XLZyT53DQhjOVrloa+i5L7yYMIK2pTS/1rfD8dgXjHPzFrPFajh0ngEV6/hw0IJt
EewFObQQJBGEepHgiXgrKBiR4HRM69Q3PngvSGWvob+CMSKz81Hw+34kfQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPgVyb40WSvRAIMZqCC/cxKrYnuFMB8GA1UdIwQY
MBaAFPLhYPDOXgNa88sh9N/QTquep+5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHVGZzhNNWVBMXJ6eXlIMDM5Qk9xNTZuN2xFLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zYjE1NDQtNGI1MC00Njg0LWFiNzUt
ZmNlMjE0YzZmZmRhLzEvMS1CWEp2alJaSzlFQWd4bW9JTDl6RXF0aWU0VS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYjUvM2IxNTQ0LTRiNTAtNDY4NC1hYjc1LWZjZTIxNGM2ZmZk
YS8xLzh1Rmc4TTVlQTFyenl5SDAzOUJPcTU2bjdsRS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE1bejAN
BgkqhkiG9w0BAQsFAAOCAQEAoN04dkgZ1nw+9pXzPI11Iorf042MYbWRk5ymtvBj
vW/Fdm3WDMKNlSK2jZ8ytlEnxxF0xWxqktXKqkdShYs4XgsnXrIF+p2s7++MfS3M
sl8Vw5CcEZY8A7lb3akoiXHFcRbFqye13ve1Z3Fz8wbUET0hE+LSlJB/eSaRsEtr
E+P+IK0FfICmEpHbq9p8JK7Bf6V4jMO8AqdDjYCRnUt6bTF1B9ME0wf56i6RNGRo
WvVPloL5nBuebhcHeFYOzMfb6x1ffMrPCSKsUjFLuWn38bocZx1JQgsUfAEpQCwQ
Ng699VEcytQAFdDIeaIzN0iXvhSUKMgBDh5L9KK+dJYQvg==
-----END CERTIFICATE-----
Generated at Sat Aug 29 13:43:01 2026 by rpki-client