Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/BJcMIiaYwZsR9mPteAB5dsM3bzc.roa
File: BJcMIiaYwZsR9mPteAB5dsM3bzc.roa (raw, json)
Hash identifier: JeBWCLeQFt40VAXjZQDirxYeq8Okbjt8isPxGm2B9Tk=
Subject key identifier: 04:97:0C:22:26:98:C1:9B:11:F6:63:ED:78:00:79:76:C3:37:6F:37
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01A08E8357FFB177EE505DBCC19CD9AC1525
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/BJcMIiaYwZsR9mPteAB5dsM3bzc.roa
Signing time: Fri 11 Sep 2026 03:29:27 +0000
ROA not before: Fri 11 Sep 2026 03:29:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205489
IP address blocks: 5.1.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:83:57:ff:b1:77:ee:50:5d:bc:c1:9c:d9:ac:15:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Sep 11 03:29:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04970c222698c19b11f663ed78007976c3376f37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:88:2a:df:de:2f:c2:ba:15:16:f2:f5:dc:18:
5c:9b:b2:e7:a3:87:19:34:c6:85:bc:b6:9e:44:f4:
87:3a:24:fd:b8:f0:12:bb:0f:c0:97:bf:39:6c:56:
b0:fc:ad:6b:bf:03:34:12:51:54:e2:5b:a3:a8:00:
bc:70:5d:45:70:16:e6:1a:a7:89:de:17:9a:0b:3f:
f0:1f:c0:b3:fb:f9:fb:b0:e7:53:b6:a4:51:64:ac:
2c:45:e8:f6:76:57:a2:ee:c0:f3:a3:d1:9e:76:c5:
21:17:6c:f9:2c:1d:db:bc:4a:e9:27:e3:e6:00:f4:
91:d9:44:cb:a2:8d:04:d7:e1:bb:4c:e5:a5:3e:db:
46:41:87:49:9c:07:64:81:ac:52:6d:e5:0d:e5:cc:
55:4f:b9:c9:44:5b:bd:1c:a3:20:0e:9f:01:66:f8:
f1:8f:8d:af:1b:d9:a3:38:56:e6:90:04:f8:19:99:
84:0a:27:d2:22:22:6f:e1:ae:8f:37:d9:27:a9:19:
b5:a8:03:3c:50:52:75:12:04:21:a1:97:8b:de:7e:
16:0b:b5:f3:60:9b:99:25:83:27:6c:63:aa:0a:20:
77:b1:c0:2c:a7:c0:1b:ff:eb:43:a7:63:d4:14:85:
f1:73:32:18:fe:fc:1a:9d:2b:01:6e:94:59:3c:e8:
6a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:97:0C:22:26:98:C1:9B:11:F6:63:ED:78:00:79:76:C3:37:6F:37
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/BJcMIiaYwZsR9mPteAB5dsM3bzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.40.0/24
Signature Algorithm: sha256WithRSAEncryption
51:7a:ef:5e:1e:12:88:70:a3:dd:21:e7:97:a1:9a:5e:c0:97:
7b:7e:d3:c8:52:59:17:b6:a7:c4:8c:07:8e:25:2f:5f:51:05:
b8:f6:71:4d:dd:0c:5a:1c:7c:c7:08:a4:a9:18:2f:2c:01:fb:
66:40:57:8e:6d:08:99:75:e8:55:d6:87:4b:eb:96:60:6e:40:
bb:53:fe:e2:6e:1b:3b:a3:6e:21:64:54:c2:b8:26:21:69:71:
53:64:85:4f:6a:00:52:a6:de:a3:bd:39:a4:69:4b:94:99:70:
33:91:7e:7d:7e:9c:eb:b4:35:68:c9:d1:06:6f:d1:d8:b8:1a:
2d:09:d4:d4:cc:62:fe:0f:21:d7:1c:06:4d:00:81:83:49:71:
73:6a:5a:f6:69:d5:c1:e9:39:29:25:6c:38:a9:f0:47:70:f1:
74:b9:e8:2d:0c:5d:03:fd:75:57:09:e2:a9:32:f5:dc:b5:02:
18:11:f8:e3:10:b3:21:9e:e6:51:44:73:b0:dd:6f:7d:24:6e:
7e:a8:aa:0b:fc:96:00:a8:53:a7:53:d3:c7:74:2f:5b:be:c8:
a1:6b:62:16:59:d4:a1:72:fe:2d:b9:d5:cc:4a:8a:cc:9b:2c:
e8:4e:37:b0:7b:19:e4:9a:4c:70:71:33:df:95:9c:35:ca:36:
2c:9e:41:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:09:46 2026 by rpki-client