Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/BmmyqjzhhXCXtNHXQfS0o58DPKI.roa
File: BmmyqjzhhXCXtNHXQfS0o58DPKI.roa (raw, json)
Hash identifier: DmbfSz+gKQgjE19mwt2GeyXLjwNpk6u4gHjc47wtCuE=
Subject key identifier: 06:69:B2:AA:3C:E1:85:70:97:B4:D1:D7:41:F4:B4:A3:9F:03:3C:A2
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 019C62588077BB6C888335368C7E190235EC
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/BmmyqjzhhXCXtNHXQfS0o58DPKI.roa
Signing time: Sun 15 Feb 2026 17:28:13 +0000
ROA not before: Sun 15 Feb 2026 17:28:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199524
IP address blocks: 178.239.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:62:58:80:77:bb:6c:88:83:35:36:8c:7e:19:02:35:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Feb 15 17:28:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0669b2aa3ce1857097b4d1d741f4b4a39f033ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:69:43:53:c5:45:ec:36:d6:34:2b:ef:04:12:
01:a9:1d:7d:1f:64:0c:56:84:71:e6:c9:02:65:5e:
4d:62:43:a0:3b:4c:d7:40:6e:bb:d6:5f:98:8d:2f:
7b:9e:fd:26:01:e5:e5:f8:f4:99:36:db:e0:b9:47:
f0:2f:90:11:c2:a1:6a:7d:c2:2e:29:48:03:8a:89:
f3:41:0f:c0:49:88:d2:a3:0f:4f:16:59:9b:98:ca:
08:f3:ca:ef:1b:8f:ba:dd:ca:a0:e4:e7:55:50:b5:
e4:ac:3b:f1:4a:1c:96:b7:82:28:08:99:9c:90:df:
68:0e:31:57:e7:97:33:86:ed:1d:0e:08:03:5a:b7:
9d:ae:56:9a:6c:a2:c9:89:98:a7:1a:26:a8:b1:78:
4a:d8:5f:ec:b0:f9:25:78:43:14:7f:3b:f1:14:9f:
75:9f:d4:2a:69:64:1e:9c:3e:4d:fd:a9:8d:b4:cd:
07:92:da:21:0d:66:60:b7:2d:58:ec:e2:2e:ef:39:
39:0e:11:28:d8:20:e0:ae:d0:11:38:b2:9b:f0:e5:
94:4f:f7:70:cf:dd:93:f6:02:4a:6e:68:42:e1:73:
f2:76:95:cc:00:78:a0:b4:c0:c3:e0:4b:9a:5c:1a:
e2:e4:0d:9d:57:1b:62:11:90:5b:ba:3b:cd:39:48:
0f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:69:B2:AA:3C:E1:85:70:97:B4:D1:D7:41:F4:B4:A3:9F:03:3C:A2
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/BmmyqjzhhXCXtNHXQfS0o58DPKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.118.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:c7:01:93:96:d5:a2:88:7d:e3:44:8a:1c:fa:99:93:69:2f:
98:3c:30:da:e9:c0:dc:cc:b5:82:17:2f:b9:f2:e9:92:a2:da:
df:15:97:79:06:46:9b:fb:c4:8c:34:85:89:84:20:95:74:39:
de:66:2a:91:55:37:29:f8:a8:7c:e8:58:2d:12:e0:05:70:03:
8a:77:66:e4:54:33:1b:f9:35:ab:b7:01:d7:55:92:83:fa:7d:
30:8b:31:7a:7f:0c:9c:53:b4:8d:ff:63:e0:ec:d8:74:fc:eb:
38:dc:4d:04:92:c6:e8:0e:05:e4:72:6b:5b:56:38:45:d1:41:
cc:e0:c7:2c:4f:53:8b:38:ae:89:62:5c:98:7e:91:f6:18:2b:
9e:0d:b3:60:40:78:9b:44:ec:e9:bc:46:92:2f:49:cb:06:c2:
20:d2:17:b9:06:91:8c:48:48:ac:57:b5:20:a3:96:ea:7b:74:
20:05:89:e6:73:8e:18:18:9a:c9:1c:20:71:b7:5b:80:d7:59:
63:c8:68:3d:5a:fd:45:51:2d:d3:bc:be:15:83:bd:16:15:65:
62:20:54:6d:14:72:49:1b:22:60:41:8e:bf:f0:08:14:ac:26:
bf:65:f7:46:84:fe:c2:7a:23:ea:c8:f0:3f:78:b7:51:ef:25:
a0:7c:f9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:07:39 2026 by rpki-client