Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/RgpyMW5WLsoOZ7X6sjR7zZpkUiw.roa
File: RgpyMW5WLsoOZ7X6sjR7zZpkUiw.roa (raw, json)
Hash identifier: 9bAWFuzWHv7cpnjzkHad1zJjL6nxP74Kh6dQAZysh0A=
Subject key identifier: 46:0A:72:31:6E:56:2E:CA:0E:67:B5:FA:B2:34:7B:CD:9A:64:52:2C
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 019EDFCFF43DD2D491DD2E1CCDE53D410238
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/RgpyMW5WLsoOZ7X6sjR7zZpkUiw.roa
Signing time: Fri 19 Jun 2026 12:16:48 +0000
ROA not before: Fri 19 Jun 2026 12:16:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212112
IP address blocks: 213.21.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:df:cf:f4:3d:d2:d4:91:dd:2e:1c:cd:e5:3d:41:02:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Jun 19 12:16:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=460a72316e562eca0e67b5fab2347bcd9a64522c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:db:56:d4:6c:e8:c2:3f:49:50:24:69:86:28:
81:62:24:f5:f2:66:3b:a3:0d:d4:20:53:6f:1d:ed:
32:6f:6f:ff:a6:1e:e9:78:f3:c8:cd:77:3f:15:d3:
f2:3d:7f:d6:41:d3:e3:d6:85:df:91:b1:fc:02:5c:
aa:66:b8:c6:1d:7a:bb:78:29:e2:0d:22:cb:a9:76:
c0:42:45:6c:83:9f:53:91:97:af:50:5c:1c:4c:4c:
d5:f4:4c:30:94:b0:9a:0c:70:1f:c1:1c:3b:05:17:
63:73:56:b3:67:83:8d:07:3c:91:31:b8:1a:96:a3:
f3:ed:8b:1a:dc:1a:7b:3f:7f:92:8a:8f:f2:09:b6:
03:5f:cf:3b:6b:9e:1d:1b:c6:bd:b0:95:bf:b4:43:
92:14:30:78:b7:35:55:88:18:e5:5b:3e:77:d1:16:
2a:75:69:79:ea:c6:7a:8d:f8:d5:8a:68:65:d7:15:
d1:79:34:b9:8b:e6:c2:f8:db:41:31:f6:1c:3f:b8:
93:43:48:c1:f8:1e:84:59:6b:e7:91:d8:a2:14:09:
65:24:6f:fc:5a:62:3f:16:d7:78:99:88:43:22:78:
4a:ec:e2:f1:e5:90:6d:b0:8a:25:92:9a:f3:d9:1b:
85:47:71:5f:23:73:b0:66:ea:08:b9:c6:dc:a2:be:
15:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:0A:72:31:6E:56:2E:CA:0E:67:B5:FA:B2:34:7B:CD:9A:64:52:2C
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/RgpyMW5WLsoOZ7X6sjR7zZpkUiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.245.0/24
Signature Algorithm: sha256WithRSAEncryption
91:18:65:1e:ff:d2:69:47:e9:a3:e8:be:94:e4:e7:c7:e1:14:
4b:c2:0a:03:39:f7:77:4e:13:55:0f:e4:c7:aa:f8:ba:89:d9:
db:f6:35:2d:8d:cd:40:fe:07:67:8d:20:6a:03:a9:52:67:20:
fc:6b:26:f5:7b:c7:7f:27:5e:0e:e2:21:c4:5f:74:c7:7a:6f:
27:e8:1c:a1:46:d8:63:d2:5f:92:47:fe:41:d6:19:35:be:60:
89:15:5a:fd:10:01:22:61:66:a4:8e:59:94:e9:90:03:a2:4b:
35:be:78:40:dd:17:f1:c8:6f:01:e8:33:2d:ea:f2:a5:1d:b2:
99:f2:fa:51:a8:20:75:2a:bb:c1:d8:33:18:7b:87:c7:a6:28:
98:ff:69:be:fb:5e:8c:9e:7e:bc:e4:ee:e3:fa:5d:d5:7a:a9:
15:34:08:dd:7f:df:a0:49:3c:6c:dc:53:72:cd:6e:a0:83:8a:
52:75:e1:7f:ef:72:bf:d3:b5:b9:e3:ad:4b:62:eb:f8:37:ff:
b2:7b:48:57:8f:e8:e2:6b:a2:70:c8:ae:53:3a:df:33:40:c3:
54:18:1a:9d:7e:49:fe:1c:d9:e3:b0:a9:00:b7:91:93:1a:d0:
c8:15:a6:67:79:59:21:a7:b2:4b:60:47:ef:ba:db:80:5d:8a:
5d:b3:6b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:25 2026 by rpki-client