Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/BGqJYKbvXZQ9-EfJqdZJcmAAnEg.roa
File: BGqJYKbvXZQ9-EfJqdZJcmAAnEg.roa (raw, json)
Hash identifier: qwCTOzoAcAD8dBvfuZm2kT8FIK+IVROmdCz+Tdiv4eY=
Subject key identifier: 04:6A:89:60:A6:EF:5D:94:3D:F8:47:C9:A9:D6:49:72:60:00:9C:48
Certificate issuer: /CN=c6740122c6030b38985423d7c7c668ef2dbae91c
Certificate serial: 019F2368C2C6C312721D1D4006720223E4D4
Authority key identifier: C6:74:01:22:C6:03:0B:38:98:54:23:D7:C7:C6:68:EF:2D:BA:E9:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnQBIsYDCziYVCPXx8Zo7y266Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/BGqJYKbvXZQ9-EfJqdZJcmAAnEg.roa
Signing time: Thu 02 Jul 2026 15:18:15 +0000
ROA not before: Thu 02 Jul 2026 15:18:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15517
IP address blocks: 62.65.128.0/19 maxlen: 19
62.65.137.0/24 maxlen: 24
94.78.0.0/18 maxlen: 18
2a01:330::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/xnQBIsYDCziYVCPXx8Zo7y266Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/xnQBIsYDCziYVCPXx8Zo7y266Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnQBIsYDCziYVCPXx8Zo7y266Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c2:c6:c3:12:72:1d:1d:40:06:72:02:23:e4:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6740122c6030b38985423d7c7c668ef2dbae91c
Validity
Not Before: Jul 2 15:18:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=046a8960a6ef5d943df847c9a9d6497260009c48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:27:d0:2e:0f:50:44:07:c7:c0:57:14:7b:08:
4a:23:1e:48:c0:2a:37:20:98:78:55:bd:4a:f8:e9:
24:52:e4:fe:1b:87:2a:23:b8:aa:88:ae:52:ca:12:
72:33:22:d8:89:cc:26:77:6a:c9:de:a4:ed:7b:82:
93:32:1f:44:99:09:0f:16:d4:5b:18:20:73:98:27:
27:68:4d:4c:ca:e0:8b:a8:36:f2:d4:c8:10:be:d3:
14:e0:b1:c0:6a:da:41:98:d9:fd:5d:31:62:97:92:
9d:0a:f9:52:27:57:dc:1d:9a:46:90:3c:1f:87:23:
91:12:4a:ab:4c:0d:41:69:31:66:4f:6b:f6:84:0d:
0a:1f:9c:9a:6f:f4:19:86:0d:b5:15:e2:04:a2:6a:
a3:cb:86:20:14:f7:c4:4c:be:1c:35:8a:75:ce:78:
54:e9:0e:8a:38:ba:be:66:ff:50:fb:4c:e6:d4:30:
f7:f0:52:6e:af:9a:ff:a4:35:e2:27:81:fd:48:12:
78:9f:51:8c:ce:da:64:fa:f4:56:a4:3c:94:a2:3f:
0a:83:5e:fb:4b:7f:16:74:bf:5d:f7:77:c4:f6:2c:
24:f2:74:14:f4:f3:b5:d3:ee:aa:ac:05:2c:57:c1:
1a:26:1b:dd:bd:96:9f:65:18:3b:93:de:04:da:3e:
66:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:6A:89:60:A6:EF:5D:94:3D:F8:47:C9:A9:D6:49:72:60:00:9C:48
X509v3 Authority Key Identifier:
keyid:C6:74:01:22:C6:03:0B:38:98:54:23:D7:C7:C6:68:EF:2D:BA:E9:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnQBIsYDCziYVCPXx8Zo7y266Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/BGqJYKbvXZQ9-EfJqdZJcmAAnEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b431ca-5275-42b5-8d54-d196f9291732/1/xnQBIsYDCziYVCPXx8Zo7y266Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.65.128.0/19
94.78.0.0/18
IPv6:
2a01:330::/32
Signature Algorithm: sha256WithRSAEncryption
62:76:b1:a9:5a:95:ba:1b:46:e0:e0:05:7d:b2:37:bf:e2:d5:
5a:71:1c:d0:93:0c:28:cc:50:b7:a9:67:5b:4e:89:f0:57:00:
10:64:b0:d2:02:54:d9:2f:35:e3:ae:5e:d6:18:97:39:ad:13:
72:85:5f:83:dc:c1:c7:c0:0e:ce:bb:7c:98:ef:6b:1b:1b:25:
d6:30:93:44:bd:40:00:6d:6c:3a:43:f0:08:2c:c2:2d:17:0d:
ca:a1:43:dc:9e:eb:66:be:72:f4:42:6e:1b:22:0f:d0:73:75:
2a:c0:98:8e:82:c3:49:d0:e7:2c:14:53:bb:93:40:d8:95:43:
b8:ee:b7:4b:46:68:8f:00:f6:bd:d9:d5:f9:17:b9:78:37:f6:
0a:d3:6e:ec:bd:7a:3b:f1:8e:ef:3c:db:e3:33:40:43:dc:ad:
7b:fb:81:34:56:aa:44:e4:ad:48:86:89:6d:75:80:81:94:1f:
fa:7e:8b:69:63:1c:a7:0c:07:6d:9c:29:83:b3:02:7a:d2:d3:
08:b7:a4:e8:35:0a:ba:07:16:a6:6d:bd:59:98:61:db:ff:ac:
46:42:ef:69:23:0b:4b:4a:5e:32:a5:ba:00:ed:9f:bf:c1:c5:
e6:c0:50:1d:17:86:fd:fd:59:ef:9c:fd:10:06:e1:4b:c0:37:
94:94:25:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:44:19 2026 by rpki-client