Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/BLxG_9aNcl61DnDRQOS-DhrV8xQ.roa
File: BLxG_9aNcl61DnDRQOS-DhrV8xQ.roa (raw, json)
Hash identifier: LExdEQ5VC8/M9uctTrGTrEOA+lYTiyS4I7rkKa10kEA=
Subject key identifier: 04:BC:46:FF:D6:8D:72:5E:B5:0E:70:D1:40:E4:BE:0E:1A:D5:F3:14
Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Certificate serial: 019D7184783D55F090C061416035414973AF
Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/BLxG_9aNcl61DnDRQOS-DhrV8xQ.roa
Signing time: Thu 09 Apr 2026 09:13:20 +0000
ROA not before: Thu 09 Apr 2026 09:13:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205960
IP address blocks: 153.51.177.0/24 maxlen: 24
153.51.178.0/24 maxlen: 24
153.51.179.0/24 maxlen: 24
153.51.180.0/22 maxlen: 24
153.51.188.0/24 maxlen: 24
153.51.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:71:84:78:3d:55:f0:90:c0:61:41:60:35:41:49:73:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1
Validity
Not Before: Apr 9 09:13:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04bc46ffd68d725eb50e70d140e4be0e1ad5f314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:27:43:75:5a:b4:b1:44:1b:bc:ef:f0:15:0b:
8f:85:10:7f:46:d4:26:aa:e2:be:b4:e8:3b:96:5b:
b9:b4:56:9a:3a:b4:67:cd:fd:f5:b9:e0:37:78:a9:
f4:a0:27:ec:8a:b4:2f:9c:13:ed:d1:e4:3c:47:63:
93:e6:b8:66:5e:f4:dd:8a:30:46:44:37:3a:ef:48:
cf:a4:6d:40:a3:06:59:4a:dc:7f:72:a0:a6:79:ee:
48:25:85:20:b7:99:f2:6d:66:e9:42:89:57:12:9c:
a3:c4:cd:51:2f:e0:dd:97:80:43:97:11:67:d4:30:
93:5b:c3:df:eb:98:74:f6:48:11:24:2a:ec:47:89:
c2:29:f1:7b:86:0d:bd:76:ca:db:fb:07:d9:d9:93:
f7:78:c6:aa:c6:7b:e0:5e:06:76:be:9b:b5:c7:3f:
50:cf:75:b2:36:6a:d2:2e:6f:7c:fd:3a:0a:a6:8d:
67:f7:36:c9:18:07:3b:26:5a:68:5e:ab:68:c0:da:
d4:3c:58:b9:39:b9:c4:f0:cd:3e:a2:3c:57:f8:be:
75:24:17:2e:cc:26:8c:45:d8:c1:fd:41:eb:00:9b:
04:9f:f0:13:ae:67:29:c0:91:e1:51:a7:b0:ef:da:
84:02:da:40:07:10:95:ab:82:63:64:2a:22:9b:40:
4f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BC:46:FF:D6:8D:72:5E:B5:0E:70:D1:40:E4:BE:0E:1A:D5:F3:14
X509v3 Authority Key Identifier:
keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/BLxG_9aNcl61DnDRQOS-DhrV8xQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.51.177.0-153.51.183.255
153.51.188.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:97:59:9b:20:24:64:18:7e:e7:d7:f7:e9:e6:50:30:ef:d2:
a9:1d:c8:64:c0:51:52:29:60:8d:b9:d0:27:06:2f:67:0f:51:
d3:66:d0:ba:9f:be:ef:23:94:70:9f:97:8f:cc:24:ac:20:19:
1f:ce:07:17:04:7e:2f:32:a3:e4:c9:45:92:50:6e:83:69:17:
c6:80:1b:68:8f:c0:0c:bc:3a:5f:45:26:40:3f:8b:7c:50:29:
e8:dd:bd:c4:81:08:b3:8e:12:0e:5d:53:bf:a9:7b:3f:47:52:
ab:48:4a:70:3d:02:03:0d:88:e0:f0:f2:48:6e:e6:dc:d2:47:
ef:31:ec:d2:05:cf:40:00:e4:27:d7:2c:01:45:d8:6e:d4:97:
5b:f4:ad:d9:1c:c8:37:05:e8:09:dd:f1:72:dc:02:6d:e8:6f:
d5:6a:45:4e:f6:43:3b:ac:12:7e:95:0c:b0:3b:5b:98:99:30:
d8:9c:80:43:59:91:e1:ec:6a:cb:5b:85:68:5a:db:dc:31:37:
76:53:fa:f9:9c:9a:73:d4:ea:2d:ea:36:77:36:17:87:73:6a:
b4:fb:7c:c7:ff:b8:8a:6e:34:08:db:87:91:6d:3c:27:95:d0:
a8:06:14:f3:8d:4c:e1:50:a2:67:99:62:af:04:a8:8e:61:c6:
17:36:7b:1a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:42:33 2026 by rpki-client