Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/bj5wFXmeRPP2S1wVt1wMSe_BzEY.roa
File: bj5wFXmeRPP2S1wVt1wMSe_BzEY.roa (raw, json)
Hash identifier: musfSfNeEvw07XmluOo2fmHJKdeOK5PAUZXeb2dFuaE=
Subject key identifier: 6E:3E:70:15:79:9E:44:F3:F6:4B:5C:15:B7:5C:0C:49:EF:C1:CC:46
Certificate issuer: /CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Certificate serial: 019F294DFA4CD34A134DFCB7F1B75CF48037
Authority key identifier: 06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/bj5wFXmeRPP2S1wVt1wMSe_BzEY.roa
Signing time: Fri 03 Jul 2026 18:46:43 +0000
ROA not before: Fri 03 Jul 2026 18:46:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41683
IP address blocks: 217.195.195.0/24 maxlen: 24
217.195.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:29:4d:fa:4c:d3:4a:13:4d:fc:b7:f1:b7:5c:f4:80:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Validity
Not Before: Jul 3 18:46:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e3e7015799e44f3f64b5c15b75c0c49efc1cc46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:63:4b:cd:4b:39:69:17:a2:36:d3:a4:27:dc:
77:53:ab:f4:eb:80:d2:11:83:f7:e3:39:dd:14:a1:
a0:22:11:1d:b9:64:08:29:9f:82:9c:a6:80:63:67:
78:a5:bf:77:07:f4:3a:6c:5c:bd:e1:43:6f:e1:14:
67:e0:2a:0b:7d:76:63:ec:2f:8a:af:69:96:b3:ac:
01:18:93:3d:5d:e1:98:eb:c3:79:31:5b:f7:2d:8a:
25:bb:0f:0d:27:f7:cd:c8:89:ab:11:a4:22:0f:b6:
47:8b:9f:90:f3:90:57:79:52:84:eb:87:cf:10:a2:
61:94:3f:e3:68:b4:63:b4:4d:b0:46:7c:cc:3c:de:
f2:0c:55:f7:99:b2:44:b4:05:4b:a7:ee:09:13:72:
03:6b:db:8f:c6:b2:df:43:3a:0f:e3:e0:64:9b:33:
ac:f2:bb:94:90:8c:b5:f7:05:bc:c9:da:68:1e:b1:
65:7a:c8:61:f8:50:fb:b9:d3:9f:a2:4f:bb:02:f1:
c1:1a:31:89:88:d0:99:fa:43:6c:fa:1c:ef:91:85:
88:73:f1:e2:e3:cd:84:ae:9b:44:a8:c7:a6:c1:ba:
03:eb:65:5b:46:42:00:e7:3c:52:ef:20:c4:6a:63:
af:84:9d:18:df:e7:ed:be:61:a5:14:c3:cc:3b:69:
93:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3E:70:15:79:9E:44:F3:F6:4B:5C:15:B7:5C:0C:49:EF:C1:CC:46
X509v3 Authority Key Identifier:
keyid:06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/bj5wFXmeRPP2S1wVt1wMSe_BzEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.195.195.0/24
217.195.197.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:7b:c1:6b:fd:15:a6:e7:6c:22:0a:1f:53:32:d8:be:9c:42:
23:c2:3d:34:0a:59:39:d7:9c:28:0a:aa:a4:9b:4c:ec:7d:73:
82:78:16:cf:45:4c:a5:90:56:1c:ee:97:34:93:a2:73:04:3d:
31:8b:b3:e2:7b:3f:36:64:35:90:47:fb:76:d0:fa:08:a8:fe:
34:8b:2a:94:b8:19:32:3c:6d:0d:2b:e4:e0:4b:69:9e:aa:6f:
4f:26:8f:a3:13:de:ca:fd:76:e9:34:53:63:17:29:a0:3d:f9:
d6:79:35:8d:25:fe:2a:b7:af:93:b3:78:8b:a5:9e:67:ae:b8:
57:9b:8d:25:a6:ee:c4:dc:5d:d2:0d:f1:c7:89:61:df:11:52:
f0:62:ab:11:45:49:c3:e5:aa:6e:f2:e6:3b:35:b6:bf:a2:7d:
8d:2c:29:2a:aa:db:4b:f2:4d:65:7c:5b:f2:b5:f2:18:2f:3c:
a5:ba:fd:5b:90:34:1d:39:51:70:47:f3:41:50:d2:c0:64:2a:
9e:8e:2b:9c:76:12:cf:f8:2c:70:44:a0:ad:e1:bf:6e:ee:a4:
cb:27:13:fa:03:6e:df:9c:09:92:43:a6:f8:77:16:9d:cb:84:
bf:2f:cd:a3:fd:39:a7:47:b0:f7:cb:10:61:26:81:b2:30:fe:
c9:0a:07:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:56:48 2026 by rpki-client