Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/BpG08GkHB-QsJpL9txO9DOn8Gqo.roa
File: BpG08GkHB-QsJpL9txO9DOn8Gqo.roa (raw, json)
Hash identifier: qk9A6y/PVuHMQUNTyaAzAHkiLugBm0Npe2/tYgpiKkw=
Subject key identifier: 06:91:B4:F0:69:07:07:E4:2C:26:92:FD:B7:13:BD:0C:E9:FC:1A:AA
Certificate issuer: /CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11
Certificate serial: 01A048DFF7B0F37BB8EDEA948AD8A416AA29
Authority key identifier: E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/BpG08GkHB-QsJpL9txO9DOn8Gqo.roa
Signing time: Fri 28 Aug 2026 14:57:12 +0000
ROA not before: Fri 28 Aug 2026 14:57:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48775
IP address blocks: 212.40.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:df:f7:b0:f3:7b:b8:ed:ea:94:8a:d8:a4:16:aa:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11
Validity
Not Before: Aug 28 14:57:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0691b4f0690707e42c2692fdb713bd0ce9fc1aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:28:a8:fb:a1:55:9c:22:53:4b:3d:eb:01:13:
a2:24:7e:b8:c8:59:64:d3:6a:a9:d1:49:ba:5e:6f:
e8:2f:03:a0:ad:ba:39:d8:9d:e5:8d:b4:4e:0e:7d:
07:b0:4d:57:db:c4:b6:38:a8:33:45:95:d3:3e:26:
c7:7f:01:b3:d5:59:46:fb:e1:b6:49:65:b5:68:2c:
9c:09:b0:47:e6:f9:df:a8:ce:b8:11:e2:b3:f2:0a:
b3:ca:87:05:f7:d5:28:4d:a5:42:04:b0:77:b6:98:
4d:3f:1f:eb:3e:9a:f6:ab:97:20:e7:1c:36:48:12:
43:3f:98:df:4f:f8:bf:9a:e8:1b:02:5f:29:13:cb:
76:56:90:b7:5c:5b:79:0c:9d:3d:87:1f:55:a0:a3:
f1:4c:41:1c:43:e6:92:d0:ad:b9:f8:0c:53:5a:f7:
cc:fa:be:f2:49:8e:ec:6c:18:40:43:42:48:4a:d3:
71:37:c9:c2:0c:0e:f8:2e:9c:65:70:ee:49:1c:8e:
4b:a6:3e:38:90:9f:79:55:6a:6c:a7:63:e8:9c:de:
5b:16:50:aa:49:26:5c:40:ff:d4:b8:6a:a3:b3:80:
69:82:50:08:8e:31:d6:8e:63:32:fe:7b:87:d6:38:
01:29:a1:cd:74:d8:85:34:05:f3:d6:15:24:f6:a0:
ad:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:91:B4:F0:69:07:07:E4:2C:26:92:FD:B7:13:BD:0C:E9:FC:1A:AA
X509v3 Authority Key Identifier:
keyid:E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/BpG08GkHB-QsJpL9txO9DOn8Gqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.40.51.0/24
Signature Algorithm: sha256WithRSAEncryption
66:2e:c0:d5:85:7f:ec:8a:06:84:51:ab:06:7e:c4:96:23:f6:
ee:61:e7:21:35:c6:ca:f6:6f:15:ce:c8:93:3f:c9:39:fb:87:
a4:00:52:f7:e9:5b:d5:2c:d5:bc:76:fb:08:59:98:81:33:39:
87:c7:49:4f:3a:9a:4a:f6:54:c3:52:e1:6c:01:b5:f7:61:42:
89:0d:a2:20:cf:bf:90:6b:1f:90:e3:e0:88:67:fe:20:48:e2:
94:08:78:c5:0a:8c:b4:03:0a:52:c1:5e:6d:b5:03:67:a3:bc:
56:ef:ec:75:dc:3e:31:eb:36:52:4b:09:10:6f:ed:7a:b9:9d:
89:7c:59:57:51:f0:17:41:b1:21:1b:4b:2e:70:4a:a7:48:fb:
79:27:b6:02:5e:f6:d0:1b:dc:f4:38:66:a9:0e:d2:e8:d1:77:
03:37:c3:5f:42:c9:60:bf:a2:a6:b7:a5:bb:69:d3:4d:55:07:
ce:74:cb:b2:bb:d2:1e:3e:fa:8b:db:91:28:df:36:e9:cd:52:
49:70:71:40:7a:ee:37:6a:b8:2c:b2:5d:5f:2d:60:1b:5e:7a:
2a:84:e2:93:82:e2:11:73:2b:9e:39:2c:65:88:2e:4e:3f:7b:
4c:b3:b8:5b:d1:9d:51:03:6c:83:43:75:42:e0:94:bc:3a:35:
dc:cf:63:20
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBI3/ew83u47eqUitikFqopMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxY2FkYzhhNDIxYzFmMjJmMWUyOTA0Y2NmZGJiY2VjNWRi
ZTFiMTEwHhcNMjYwODI4MTQ1NzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjkxYjRmMDY5MDcwN2U0MmMyNjkyZmRiNzEzYmQwY2U5ZmMxYWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiio+6FVnCJTSz3rAROiJH64yFlk
02qp0Um6Xm/oLwOgrbo52J3ljbRODn0HsE1X28S2OKgzRZXTPibHfwGz1VlG++G2
SWW1aCycCbBH5vnfqM64EeKz8gqzyocF99UoTaVCBLB3tphNPx/rPpr2q5cg5xw2
SBJDP5jfT/i/mugbAl8pE8t2VpC3XFt5DJ09hx9VoKPxTEEcQ+aS0K25+AxTWvfM
+r7ySY7sbBhAQ0JIStNxN8nCDA74LpxlcO5JHI5Lpj44kJ95VWpsp2PonN5bFlCq
SSZcQP/UuGqjs4BpglAIjjHWjmMy/nuH1jgBKaHNdNiFNAXz1hUk9qCtXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAaRtPBpBwfkLCaS/bcTvQzp/BqqMB8GA1UdIwQY
MBaAFOHK3IpCHB8i8eKQTM/bvOxdvhsRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGNyY2lrSWNIeUx4NHBCTXo5dTg3RjItR3hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xMWFmNDItZDNlZC00M2NkLTgyNzQt
NzQyZGMwYzk3MGMwLzEvQnBHMDhHa0hCLVFzSnBMOXR4TzlET244R3FvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xMWFmNDItZDNlZC00M2NkLTgyNzQtNzQyZGMwYzk3MGMw
LzEvNGNyY2lrSWNIeUx4NHBCTXo5dTg3RjItR3hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1CgzMA0G
CSqGSIb3DQEBCwUAA4IBAQBmLsDVhX/sigaEUasGfsSWI/buYechNcbK9m8VzsiT
P8k5+4ekAFL36VvVLNW8dvsIWZiBMzmHx0lPOppK9lTDUuFsAbX3YUKJDaIgz7+Q
ax+Q4+CIZ/4gSOKUCHjFCoy0AwpSwV5ttQNno7xW7+x13D4x6zZSSwkQb+16uZ2J
fFlXUfAXQbEhG0sucEqnSPt5J7YCXvbQG9z0OGapDtLo0XcDN8NfQslgv6Kmt6W7
adNNVQfOdMuyu9IePvqL25Eo3zbpzVJJcHFAeu43argssl1fLWAbXnoqhOKTguIR
cyueOSxliC5OP3tMs7hb0Z1RA2yDQ3VC4JS8OjXcz2Mg
-----END CERTIFICATE-----
Generated at Thu Sep 10 11:59:14 2026 by rpki-client