Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/BMGXf9f_qbhuRwiQytVnDKfHkI0.roa
File: BMGXf9f_qbhuRwiQytVnDKfHkI0.roa (raw, json)
Hash identifier: VIXtdHebQiEiTinZZZ7tIYsh2GMyBEQsf5A/5lQNbng=
Subject key identifier: 04:C1:97:7F:D7:FF:A9:B8:6E:47:08:90:CA:D5:67:0C:A7:C7:90:8D
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 019F83D44605B5D5216827138A3BF8361D57
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/BMGXf9f_qbhuRwiQytVnDKfHkI0.roa
Signing time: Tue 21 Jul 2026 08:39:14 +0000
ROA not before: Tue 21 Jul 2026 08:39:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202492
IP address blocks: 37.128.200.0/22 maxlen: 22
85.158.148.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:d4:46:05:b5:d5:21:68:27:13:8a:3b:f8:36:1d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jul 21 08:39:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04c1977fd7ffa9b86e470890cad5670ca7c7908d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:95:aa:f3:2c:4e:64:e7:ef:e6:85:a9:91:77:
a6:03:83:45:f3:9a:4f:da:1c:bb:5c:03:31:da:56:
56:41:39:c2:da:0d:68:8a:45:60:8c:5e:76:ec:48:
e5:16:6d:65:92:05:ea:dd:99:a2:c1:ed:3b:53:3c:
fa:5d:97:e1:95:e4:e7:12:e5:cf:c2:27:0b:b6:59:
f8:1d:fe:17:db:46:b4:45:10:0f:67:15:f4:5e:8e:
fd:f0:9c:a8:33:e0:e6:b7:7b:fb:d0:78:0d:59:9b:
07:af:24:c1:71:77:fc:95:ec:57:1b:e8:aa:c8:50:
1a:53:25:b1:b8:c7:0a:df:54:76:42:73:89:a5:58:
76:8d:8c:59:92:03:e8:27:4a:49:d1:62:28:6e:df:
06:84:0b:a7:ed:36:92:f4:85:63:30:07:2e:ba:13:
00:1f:5f:e9:80:03:cf:b8:4a:a0:d1:b5:49:8e:e1:
41:a2:db:9b:e4:63:5a:c3:d0:eb:d8:3e:bf:5e:c9:
83:e9:ea:06:97:83:f1:26:d1:69:3f:3a:d7:8e:a6:
23:60:af:b8:71:64:a8:e2:f4:1a:28:cf:53:89:84:
ba:53:16:b0:ef:69:98:64:5b:2e:b3:10:f5:cd:48:
7d:6c:66:45:1d:de:24:5a:5f:61:b4:61:f0:c5:d1:
7b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C1:97:7F:D7:FF:A9:B8:6E:47:08:90:CA:D5:67:0C:A7:C7:90:8D
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/BMGXf9f_qbhuRwiQytVnDKfHkI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.200.0/22
85.158.148.0/22
Signature Algorithm: sha256WithRSAEncryption
27:f0:fd:04:64:b8:26:d6:be:a0:9f:6c:7e:11:81:b7:8e:d6:
ba:c6:ed:a9:9c:3b:b1:32:c8:8a:8f:fe:d6:be:8d:64:b7:c7:
13:ec:95:88:d1:17:ba:c6:53:16:d1:c7:0a:38:b3:e4:61:41:
c9:3d:dd:aa:e5:c3:45:23:74:15:fa:02:ae:ef:14:e0:3b:d3:
6a:48:a5:0e:b3:16:af:9e:fa:1b:06:9c:45:df:02:b4:e1:78:
25:ae:15:ca:1c:39:bb:6a:73:d2:64:86:01:15:7e:d9:36:5d:
e2:65:56:2f:c2:87:68:4f:8e:23:cf:c9:af:5d:6f:92:da:86:
cb:dd:8c:96:f6:75:bf:00:ce:85:98:71:df:13:a4:c2:55:22:
99:1f:9e:1f:98:fe:b6:c4:ef:52:81:d7:a0:c8:da:b9:22:ad:
32:1c:57:07:76:42:ea:ca:6e:6c:9a:26:92:33:ce:7b:e7:7e:
68:23:92:4b:d5:9d:67:25:a6:77:5d:de:4b:13:c2:3a:50:34:
12:76:91:79:bc:e3:51:69:07:65:ab:ac:6f:96:c0:de:0d:58:
df:5d:87:41:29:ac:44:1a:77:28:72:ef:04:dc:c3:e9:3d:ae:
b6:dc:57:fa:cc:15:8a:fa:5d:f4:dd:88:98:8d:9e:37:93:df:
91:17:ea:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:20 2026 by rpki-client