Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/BZZUm6qrJKfYc7nAZIW-tBb1Q0A.roa
File: BZZUm6qrJKfYc7nAZIW-tBb1Q0A.roa (raw, json)
Hash identifier: J0HXMc7pIla8YuNWPidlQmOeqorhIpoVTFFpm1d/RLM=
Subject key identifier: 05:96:54:9B:AA:AB:24:A7:D8:73:B9:C0:64:85:BE:B4:16:F5:43:40
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019DB42D166BD4ABB81FAFD4A845ADD44C97
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/BZZUm6qrJKfYc7nAZIW-tBb1Q0A.roa
Signing time: Wed 22 Apr 2026 07:52:26 +0000
ROA not before: Wed 22 Apr 2026 07:52:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215496
IP address blocks: 91.217.166.0/24 maxlen: 24
2a05:9080:12::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b4:2d:16:6b:d4:ab:b8:1f:af:d4:a8:45:ad:d4:4c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Apr 22 07:52:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0596549baaab24a7d873b9c06485beb416f54340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1e:30:f2:a3:62:37:a7:1f:06:23:d4:6e:14:
04:20:f1:b7:c8:44:f8:db:82:0c:92:15:5b:de:3d:
49:6b:57:d3:bd:3b:9a:f0:a4:26:dd:a4:13:c0:ab:
be:8e:94:04:e8:b0:a3:4a:d3:bf:54:28:36:93:a9:
91:86:37:a4:9e:08:a5:9c:75:96:e0:66:5a:88:08:
4b:70:ef:1c:a4:0e:e1:a3:1c:d4:d0:df:8f:f4:7b:
c4:dd:25:21:3c:35:69:bd:17:1f:c7:c4:de:1e:ef:
4b:9b:e8:6d:da:a1:1d:bd:06:fa:73:11:b4:21:9e:
a8:7a:1e:13:5c:22:a8:54:40:44:05:f4:2b:f0:6b:
92:22:a0:5f:ba:6f:81:01:03:c7:0e:f2:54:e9:fd:
fc:b0:62:26:d1:5c:00:62:fd:61:c2:64:97:0e:15:
72:59:ac:c9:b8:ed:1b:b8:3b:31:de:d9:ec:2b:51:
a3:8f:82:23:e7:e5:35:f3:6f:42:19:94:a0:a6:73:
47:dc:51:62:7e:d2:75:06:00:67:6c:7e:ca:21:f7:
14:69:f8:e5:44:f0:90:74:53:8e:52:90:c7:b7:a6:
5a:f5:e8:2b:9a:39:1c:db:2a:db:3f:bb:f2:f6:b8:
ef:79:16:06:a5:5d:09:27:54:80:c4:77:ea:56:48:
f3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:96:54:9B:AA:AB:24:A7:D8:73:B9:C0:64:85:BE:B4:16:F5:43:40
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/BZZUm6qrJKfYc7nAZIW-tBb1Q0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.166.0/24
IPv6:
2a05:9080:12::/48
Signature Algorithm: sha256WithRSAEncryption
83:e2:d5:53:ed:2f:4b:47:f5:89:6b:e0:66:bc:5a:41:24:32:
eb:91:59:32:7f:05:59:8f:d2:3e:7f:e2:77:e0:4a:90:56:9b:
15:5f:00:78:89:e2:08:b9:34:53:52:25:5e:1f:68:86:92:b4:
ea:f5:3e:cc:0c:10:61:51:2d:03:64:52:5f:57:51:25:53:66:
b4:1a:31:af:3e:0a:7f:bf:dc:0d:b8:66:30:16:1d:88:36:a9:
2f:1e:b4:f7:d6:d6:6c:69:23:7b:e7:94:f2:c3:76:3b:87:72:
50:bf:52:d2:b4:eb:e6:6c:68:0f:15:39:6f:df:b2:c1:fa:c5:
cc:0c:73:3d:3d:32:2d:2d:9c:51:42:fd:4c:31:55:0c:3a:76:
7e:90:ef:1f:1b:40:0b:f0:98:0e:5f:8c:14:be:51:50:d9:ae:
d8:3b:81:57:85:37:81:0a:aa:23:e6:0a:6f:89:c9:cc:13:16:
a2:1f:6c:c5:6e:5e:8d:b6:75:7f:dd:20:8e:d9:67:4c:aa:bb:
42:cc:f7:1d:4e:d3:70:60:04:94:bb:4f:b3:46:28:80:93:65:
f7:7a:30:62:c8:8a:c2:3c:20:c2:94:d4:60:a9:de:25:5b:13:
99:73:bc:4e:7d:2a:c6:d6:a8:35:e7:ba:a0:33:9d:50:12:c0:
b6:f4:0f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 25 02:15:54 2026 by rpki-client