Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bICprMjNnA32ClKSYNfmCkydKMA.roa
File: bICprMjNnA32ClKSYNfmCkydKMA.roa (raw, json)
Hash identifier: V/cW4qOfspdOM16T3QHGvNFNePshIbI+YgzF3drfzWs=
Subject key identifier: 6C:80:A9:AC:C8:CD:9C:0D:F6:0A:52:92:60:D7:E6:0A:4C:9D:28:C0
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 01A117E41776BBD5B7A926A6BB8DD5AE72E5
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bICprMjNnA32ClKSYNfmCkydKMA.roa
Signing time: Wed 07 Oct 2026 19:43:06 +0000
ROA not before: Wed 07 Oct 2026 19:43:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 153.76.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:e4:17:76:bb:d5:b7:a9:26:a6:bb:8d:d5:ae:72:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Oct 7 19:43:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c80a9acc8cd9c0df60a529260d7e60a4c9d28c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:53:c6:03:85:3b:48:83:94:54:06:eb:17:6f:
b8:d2:40:71:13:aa:54:a4:8d:b1:94:d8:38:6c:09:
37:1e:54:0c:ed:a0:4a:db:b5:d7:9a:8d:c8:58:28:
27:0d:75:3c:66:66:60:5b:e1:0e:bc:21:77:f3:06:
6d:77:bd:7f:a8:bf:a4:1a:34:6f:75:47:a1:5a:ac:
e5:c6:81:41:ba:d3:a6:08:e4:ab:84:e8:f8:eb:34:
40:1a:c2:51:5d:54:59:46:ef:f2:91:28:99:61:71:
ea:f4:dc:06:eb:61:bf:17:a6:60:eb:db:0b:e9:af:
f5:62:d3:df:60:23:89:c2:f3:7f:c9:1d:e6:f3:6a:
06:c7:d4:ce:f3:31:9e:a5:88:3c:38:74:f1:8d:11:
3c:d1:41:7e:ef:98:c6:31:20:95:b3:47:58:03:f3:
84:7a:d6:04:f2:f1:98:ec:fb:1f:da:d5:80:00:6b:
4e:a6:e5:cf:08:01:ae:cd:b4:2c:6e:82:97:50:a3:
46:f1:ef:de:2f:14:31:52:70:4b:55:7b:69:fe:c9:
2c:b7:72:13:32:37:17:a2:ab:56:ab:22:6b:97:79:
66:44:ec:bc:fb:6d:57:e2:af:e7:18:1c:20:2b:50:
67:96:bd:61:79:e8:48:a0:3a:63:37:e2:a9:6c:a0:
49:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:80:A9:AC:C8:CD:9C:0D:F6:0A:52:92:60:D7:E6:0A:4C:9D:28:C0
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bICprMjNnA32ClKSYNfmCkydKMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.76.7.0/24
Signature Algorithm: sha256WithRSAEncryption
66:77:de:a7:08:62:5b:ac:41:bc:0a:48:1b:9d:ba:27:30:e9:
96:e4:c8:10:6f:4a:60:a8:cf:b8:39:ca:bd:bf:48:c9:bf:a0:
82:8a:48:19:26:00:ff:9a:82:f2:56:52:e8:a6:a0:67:bb:61:
29:71:14:f7:23:a2:27:a6:f4:dd:1d:8c:8b:8c:1d:32:e0:bf:
1e:a9:2e:0f:f9:fe:88:67:26:43:0e:57:17:83:c6:15:ec:d3:
5d:90:5d:64:c5:03:e9:60:a9:6e:26:76:24:dd:23:e1:33:16:
98:d0:d8:e0:e6:8f:70:80:d6:81:50:62:13:d6:06:03:45:91:
fa:6a:10:a2:ab:e0:2a:11:66:af:c8:fb:57:9c:e0:22:ce:7f:
80:d8:63:4a:fd:40:8d:85:5e:b6:0f:03:24:db:bf:9b:4c:ba:
3f:e0:be:7a:47:e2:9a:7e:a9:60:d8:32:7f:54:0f:18:5e:af:
6a:77:f7:6d:d3:c1:00:cb:5b:3c:ae:fb:f8:ce:82:bf:be:5f:
3c:32:ee:19:19:03:2d:78:3e:2d:36:a2:0c:d4:d7:d4:58:42:
1a:16:45:64:22:75:bd:ae:51:41:63:b3:49:f6:3a:a3:4f:9c:
78:90:c2:ab:5b:1d:0a:37:18:91:08:aa:ea:68:d6:d6:e9:81:
88:7e:f5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 19:43:57 2026 by rpki-client