Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/bPJNx790BdM7lWVPM7t4qMpCkxw.roa
File: bPJNx790BdM7lWVPM7t4qMpCkxw.roa (raw, json)
Hash identifier: qY+E3N1KE27h40OnKJUXzubABiWwbtmOwnpweHn6jsA=
Subject key identifier: 6C:F2:4D:C7:BF:74:05:D3:3B:95:65:4F:33:BB:78:A8:CA:42:93:1C
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 01A0757387B0B65D8E1320414B01A1F86855
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/bPJNx790BdM7lWVPM7t4qMpCkxw.roa
Signing time: Sun 06 Sep 2026 06:41:40 +0000
ROA not before: Sun 06 Sep 2026 06:41:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.11.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:75:73:87:b0:b6:5d:8e:13:20:41:4b:01:a1:f8:68:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Sep 6 06:41:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6cf24dc7bf7405d33b95654f33bb78a8ca42931c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:23:79:e2:ed:69:98:6e:bf:1c:03:bc:e5:e4:
3c:53:f1:1a:8c:63:2e:d7:ae:15:7b:7b:b3:57:34:
1e:49:ef:ad:6d:ae:62:22:2f:cb:89:e7:f0:cf:a4:
48:2f:51:96:7e:71:4e:65:cb:9b:88:c8:81:8e:e4:
a0:68:fd:49:e8:03:34:39:28:68:a4:90:fd:5c:1b:
29:11:38:34:c8:20:2a:e5:6d:12:cc:2d:c6:23:12:
41:55:29:47:90:54:f0:bd:6d:48:a9:8c:94:60:3a:
33:8e:c6:f3:1e:40:d5:32:e5:e1:8d:d5:96:8e:8c:
a1:72:ed:cf:6c:3b:ba:75:fc:83:15:bd:aa:68:58:
09:db:a4:8f:17:db:bf:28:be:08:4e:ab:1d:24:b6:
1c:a0:e8:9d:b6:b2:b8:a4:a9:15:24:f5:88:a1:d8:
de:e0:ba:f1:b7:5b:ca:b6:2d:ec:ae:fc:c9:9d:15:
6f:24:e0:bb:bb:0a:e6:25:28:9d:fa:08:bc:46:ec:
63:bf:97:df:8c:05:dd:fa:06:f3:27:1b:16:ea:a6:
b2:1e:a7:b5:32:8e:d1:4f:8b:9e:57:42:f6:f9:b5:
7b:f8:2d:9d:c4:8c:09:a1:16:32:a0:0a:4c:7d:8c:
aa:a2:77:48:83:56:e4:31:96:98:bf:2b:b3:b1:8a:
a2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F2:4D:C7:BF:74:05:D3:3B:95:65:4F:33:BB:78:A8:CA:42:93:1C
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/bPJNx790BdM7lWVPM7t4qMpCkxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.186.0/24
Signature Algorithm: sha256WithRSAEncryption
94:de:c7:81:57:c7:80:7a:52:98:48:3c:65:cb:cb:3d:db:03:
18:e8:68:9b:5a:c8:3b:68:0d:c9:97:82:66:53:27:a5:08:29:
5e:36:73:2d:cf:a4:cf:35:cb:b5:e8:de:4f:0a:b0:89:bf:fc:
17:79:ab:19:c1:c4:fb:2f:50:82:2d:fc:ad:34:89:88:de:02:
90:5d:4d:3a:a3:6f:23:90:9b:6b:40:68:56:22:3c:93:2c:ad:
81:20:24:3a:6e:43:a8:a8:9b:34:94:ec:c3:a5:50:f1:02:df:
7d:1c:84:8e:e0:71:ac:29:bc:dc:a8:6b:82:b6:42:d8:92:01:
37:da:48:76:d6:89:1b:1f:dc:9c:e0:d5:2a:9d:5b:d4:86:86:
e0:c6:64:a3:20:5c:dc:3a:48:be:d2:81:ee:75:92:ea:16:03:
2f:07:e6:3e:93:3a:bc:f5:17:3c:0c:8c:20:ea:4b:47:e8:e4:
d2:84:dd:e7:ac:6b:fb:3d:b0:85:9e:33:01:cd:49:58:a0:f4:
03:7d:69:95:92:68:f0:c0:a5:5c:9b:a9:67:bb:e2:6d:a2:d5:
21:bc:e2:79:60:7d:7b:b3:4a:1b:a2:1a:07:fc:41:75:f3:fd:
2c:aa:fd:12:fc:87:d1:73:22:20:4f:81:6d:6d:e2:3d:a2:44:
15:5f:3f:e5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaB1c4ewtl2OEyBBSwGh+GhVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw
Y2MzNGIwHhcNMjYwOTA2MDY0MTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Y2YyNGRjN2JmNzQwNWQzM2I5NTY1NGYzM2JiNzhhOGNhNDI5MzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiN54u1pmG6/HAO85eQ8U/EajGMu
164Ve3uzVzQeSe+tba5iIi/Liefwz6RIL1GWfnFOZcubiMiBjuSgaP1J6AM0OSho
pJD9XBspETg0yCAq5W0SzC3GIxJBVSlHkFTwvW1IqYyUYDozjsbzHkDVMuXhjdWW
joyhcu3PbDu6dfyDFb2qaFgJ26SPF9u/KL4ITqsdJLYcoOidtrK4pKkVJPWIodje
4Lrxt1vKti3srvzJnRVvJOC7uwrmJSid+gi8Ruxjv5ffjAXd+gbzJxsW6qayHqe1
Mo7RT4ueV0L2+bV7+C2dxIwJoRYyoApMfYyqondIg1bkMZaYvyuzsYqiUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGzyTce/dAXTO5VlTzO7eKjKQpMcMB8GA1UdIwQY
MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt
MDk0ODk4OWU2ZDU1LzEvYlBKTng3OTBCZE03bFdWUE03dDRxTXBDa3h3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1
LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQu6MA0G
CSqGSIb3DQEBCwUAA4IBAQCU3seBV8eAelKYSDxly8s92wMY6GibWsg7aA3Jl4Jm
UyelCCleNnMtz6TPNcu16N5PCrCJv/wXeasZwcT7L1CCLfytNImI3gKQXU06o28j
kJtrQGhWIjyTLK2BICQ6bkOoqJs0lOzDpVDxAt99HISO4HGsKbzcqGuCtkLYkgE3
2kh21okbH9yc4NUqnVvUhobgxmSjIFzcOki+0oHudZLqFgMvB+Y+kzq89Rc8DIwg
6ktH6OTShN3nrGv7PbCFnjMBzUlYoPQDfWmVkmjwwKVcm6lnu+JtotUhvOJ5YH17
s0obohoH/EF18/0sqv0S/IfRcyIgT4FtbeI9okQVXz/l
-----END CERTIFICATE-----
Generated at Sat Sep 12 15:00:54 2026 by rpki-client