Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/bBMC-Jl9ZMdEMbHiKoX6e8xbdGQ.roa
File: bBMC-Jl9ZMdEMbHiKoX6e8xbdGQ.roa (raw, json)
Hash identifier: FZlvu/V5G6Rj6/p4659ddbcuZLsyU/qT6XCVQg1Pc8U=
Subject key identifier: 6C:13:02:F8:99:7D:64:C7:44:31:B1:E2:2A:85:FA:7B:CC:5B:74:64
Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e
Certificate serial: 019FC6D80CE234902B0A8B28BEB773BD26A5
Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/bBMC-Jl9ZMdEMbHiKoX6e8xbdGQ.roa
Signing time: Mon 03 Aug 2026 08:57:55 +0000
ROA not before: Mon 03 Aug 2026 08:57:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203919
IP address blocks: 80.91.65.0/24 maxlen: 24
80.91.79.0/24 maxlen: 24
80.91.86.0/24 maxlen: 24
80.91.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:d8:0c:e2:34:90:2b:0a:8b:28:be:b7:73:bd:26:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e
Validity
Not Before: Aug 3 08:57:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c1302f8997d64c74431b1e22a85fa7bcc5b7464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0d:13:27:ef:b5:43:49:3c:ad:8d:e0:02:18:
cf:f6:58:a3:7e:9c:8b:61:9c:d8:5f:17:45:e2:13:
1c:eb:91:92:4d:6e:86:33:74:ab:74:fd:88:45:02:
87:44:35:70:74:f4:50:a9:48:ea:14:be:d3:6c:07:
fa:c9:28:42:5b:25:a4:ae:3d:2b:9f:48:02:8e:d6:
bd:5c:f9:04:13:d1:0d:e0:c8:71:8b:69:10:75:23:
78:1b:f6:81:37:b5:2e:ea:cd:af:66:6d:88:88:5c:
a4:df:d6:96:92:bb:58:38:34:c9:1f:f8:1d:2f:a2:
48:d5:2a:33:be:1e:21:6d:89:60:c3:84:30:b6:4a:
d1:25:cd:0d:e6:b1:cf:42:3a:7b:d5:72:a9:fc:be:
f9:d9:2c:3f:63:1f:63:c3:d8:21:bd:7a:15:96:37:
b2:cb:a0:31:80:c6:3c:bc:45:02:74:64:f4:dd:28:
a5:fc:ae:3c:bc:bd:a6:8c:bc:3c:eb:f0:5f:8d:e2:
48:5f:4a:60:08:3a:5b:17:6f:ce:d1:12:36:de:a3:
73:16:e1:5c:b1:40:89:9a:40:94:d1:b0:4b:7a:ba:
11:5e:17:ee:7f:c3:5a:c6:69:d5:2c:f6:21:25:04:
b0:98:1b:78:00:c1:30:fc:a9:53:9e:ee:dd:5c:dd:
69:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:13:02:F8:99:7D:64:C7:44:31:B1:E2:2A:85:FA:7B:CC:5B:74:64
X509v3 Authority Key Identifier:
keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/bBMC-Jl9ZMdEMbHiKoX6e8xbdGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.65.0/24
80.91.79.0/24
80.91.86.0/24
80.91.88.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:01:6f:47:44:f9:75:a5:f1:27:b1:60:e5:1c:8b:31:7c:db:
44:86:ee:cb:c9:e8:f7:53:c7:a3:26:6e:bf:87:62:80:96:0e:
63:dc:81:da:54:4d:ee:db:ed:aa:6a:74:bc:42:2f:56:d6:88:
ff:06:bc:f6:f1:e2:83:a8:d0:53:81:3d:38:d3:c2:0e:b1:71:
27:f1:2e:e6:af:19:36:ed:a7:ae:8e:d5:dc:9e:bf:56:5d:d0:
93:57:66:c5:22:71:89:97:69:18:3a:fe:b9:37:d5:ef:12:98:
d8:89:f3:34:74:8c:ff:00:ec:01:cf:80:64:d4:bb:9f:91:d7:
c1:d9:30:4f:af:0a:ae:e1:97:3c:0e:50:ff:00:d1:7e:87:39:
33:a2:d3:b6:29:00:aa:28:e8:f5:b0:be:f3:bd:4d:87:3c:ad:
d9:85:e0:65:c5:39:7b:23:73:35:f7:e0:50:58:0f:8b:4f:8e:
f7:87:6c:20:e9:3a:8d:83:32:53:81:df:f9:5b:a9:d2:7c:63:
6a:fe:79:38:39:8f:2b:90:e2:59:7f:49:1f:b6:b7:79:c3:1d:
16:9e:86:a5:60:f2:1b:bb:03:50:d1:b8:ad:76:71:c0:19:a4:
aa:2d:c8:a3:2b:83:e1:8b:ec:e6:bd:57:4a:e5:44:b9:53:60:
a2:b7:cd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:33:08 2026 by rpki-client