Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/BBHTjw15NAF2rxWNcQdysv45Lss.roa
File: BBHTjw15NAF2rxWNcQdysv45Lss.roa (raw, json)
Hash identifier: Lous+sIenMIAO4lBR3nlDw+F0FCln0Ka+oVIfjt59kM=
Subject key identifier: 04:11:D3:8F:0D:79:34:01:76:AF:15:8D:71:07:72:B2:FE:39:2E:CB
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 019F60C62731F65097B3F8FC8A2ADF8C9823
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/BBHTjw15NAF2rxWNcQdysv45Lss.roa
Signing time: Tue 14 Jul 2026 13:17:06 +0000
ROA not before: Tue 14 Jul 2026 13:17:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399486
IP address blocks: 185.118.79.0/24 maxlen: 24
213.21.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:60:c6:27:31:f6:50:97:b3:f8:fc:8a:2a:df:8c:98:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Jul 14 13:17:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0411d38f0d79340176af158d710772b2fe392ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:da:2b:ee:20:8c:da:26:d8:fc:0c:3b:6f:57:
65:57:58:ae:b4:f4:14:7a:0e:d1:a0:f7:7e:0c:36:
b1:92:04:6c:33:a9:c5:53:bf:91:e3:bb:68:b8:88:
26:78:65:a2:fa:8f:b5:79:42:9d:50:27:c4:24:e6:
1d:03:9c:e5:d8:3e:d1:a5:6d:ac:0e:fa:b5:93:f6:
ae:56:c5:a8:f6:aa:07:5a:1c:8b:0c:0a:f2:50:92:
07:07:2e:97:c2:e3:75:a0:7d:f9:88:22:86:a0:56:
9e:16:3d:ea:50:5c:f5:05:0c:a5:c9:6b:d4:d4:e3:
24:52:25:e9:b1:d5:12:09:0e:03:d5:a1:7f:ca:22:
16:ef:22:92:3b:ab:59:47:83:3c:54:36:8d:de:97:
55:a9:6d:ff:18:d0:6a:1a:60:fb:96:ca:1c:dd:24:
31:f7:22:ab:6e:bb:41:26:e8:9c:c0:67:92:92:04:
cc:16:e4:97:a3:a4:48:12:25:e4:54:f1:fe:95:bd:
02:b4:3f:3a:e4:06:64:08:aa:14:8f:6d:ef:02:ad:
c4:a5:c7:70:19:ef:e3:50:fd:69:52:99:7e:85:0f:
76:46:6f:bd:46:9a:57:8f:9c:94:8d:da:2e:c3:72:
e8:1c:d9:01:19:5f:73:00:22:24:50:a2:8d:a6:c8:
0f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:11:D3:8F:0D:79:34:01:76:AF:15:8D:71:07:72:B2:FE:39:2E:CB
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/BBHTjw15NAF2rxWNcQdysv45Lss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.79.0/24
213.21.232.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:47:4f:d0:49:5e:4b:f4:6a:50:89:7f:75:7c:55:07:fd:2b:
25:8a:8a:4b:da:e6:ab:ea:cc:05:ae:46:20:cd:fc:e7:5f:b5:
23:cf:9a:c2:81:be:66:ba:a9:94:87:72:4a:0c:14:72:cb:9b:
b1:08:8a:c3:ce:4e:2d:24:40:7c:e5:85:ac:f6:bb:92:a2:04:
2f:72:a0:e1:ea:51:e7:c6:ea:ae:cb:1e:41:af:63:6d:69:85:
dc:50:13:0d:b1:59:b2:a5:c3:56:2b:14:16:d1:03:9c:c4:da:
33:90:3b:7e:d9:94:e7:05:6f:cd:0f:5b:8a:68:a0:ec:77:2f:
63:69:32:cb:b9:b7:ae:4e:c9:35:41:e1:3d:cb:e1:d5:ea:47:
c5:e9:6a:e8:1b:fe:8f:12:da:3a:0c:72:a7:21:1e:75:97:e7:
91:d2:60:d4:ae:e7:7c:45:ed:b5:d1:97:2a:7b:7a:81:f7:0b:
e5:7e:7a:cd:bb:8a:11:2b:65:9e:a7:c2:0f:a8:a7:06:41:e9:
89:98:53:3c:71:d9:47:0e:4d:95:44:2c:a0:7e:3a:df:cd:95:
f3:4a:4b:3e:25:81:c2:88:a1:1a:70:6e:b2:c8:73:b9:cc:47:
20:57:91:cb:e3:f3:88:4c:d9:de:04:b9:2a:a8:3d:88:63:1c:
b3:54:62:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:56 2026 by rpki-client