Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/BNMGtjTTYKe2pymUlI-2By8WAuY.roa
File: BNMGtjTTYKe2pymUlI-2By8WAuY.roa (raw, json)
Hash identifier: RrYXesXXO0Vl2bktuDwSHZFyLC3J01YK9f8as6ZBpiA=
Subject key identifier: 04:D3:06:B6:34:D3:60:A7:B6:A7:29:94:94:8F:B6:07:2F:16:02:E6
Certificate issuer: /CN=c9d5b129e06f9524685e700102841f72d6915c33
Certificate serial: 019D2F11EF4EAD003754248C78EC6609BBA2
Authority key identifier: C9:D5:B1:29:E0:6F:95:24:68:5E:70:01:02:84:1F:72:D6:91:5C:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydWxKeBvlSRoXnABAoQfctaRXDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/BNMGtjTTYKe2pymUlI-2By8WAuY.roa
Signing time: Fri 27 Mar 2026 11:33:17 +0000
ROA not before: Fri 27 Mar 2026 11:33:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39944
IP address blocks: 86.54.192.0/24 maxlen: 24
91.212.79.0/24 maxlen: 24
2a13:f280::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydWxKeBvlSRoXnABAoQfctaRXDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2f:11:ef:4e:ad:00:37:54:24:8c:78:ec:66:09:bb:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d5b129e06f9524685e700102841f72d6915c33
Validity
Not Before: Mar 27 11:33:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04d306b634d360a7b6a72994948fb6072f1602e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:47:43:5a:55:35:ef:3b:79:e5:32:16:de:cd:
ca:58:46:0b:f5:46:b0:71:2d:1a:99:d7:d3:a9:6f:
8c:24:18:2d:0d:88:01:38:e6:c5:38:e8:1c:58:d8:
67:b0:8a:21:59:46:69:c9:67:63:35:fb:a3:a5:ea:
c4:c0:ea:ad:e1:8b:4e:b9:05:29:e4:46:7c:5f:99:
a1:8d:cb:04:fd:a6:98:58:7a:28:b9:44:0b:d9:08:
03:76:74:cd:03:ea:0a:21:b1:e1:c4:d7:70:27:52:
86:37:45:bc:81:47:61:65:03:e6:87:ba:3f:14:29:
66:22:6a:13:b0:94:70:44:6d:d5:f7:fb:99:bb:0d:
22:61:34:b0:af:2e:e1:04:a2:a7:16:e5:f6:74:38:
e1:0c:d6:bb:47:53:40:8f:44:d7:b3:9b:6f:54:e9:
a9:ce:55:9d:96:7e:09:11:86:c0:94:cd:e8:74:88:
1a:0b:71:24:94:f4:60:1b:8b:74:b2:bb:2a:fb:0c:
f4:89:b2:3f:46:6e:4c:66:4c:de:f6:2c:25:24:80:
73:ed:53:79:ab:bc:94:85:e8:85:d1:fc:27:d4:2e:
3c:15:74:20:55:09:23:52:fa:8e:c6:82:4f:54:b6:
98:16:1e:31:bf:13:8c:1a:bd:91:0b:c7:e2:13:38:
86:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D3:06:B6:34:D3:60:A7:B6:A7:29:94:94:8F:B6:07:2F:16:02:E6
X509v3 Authority Key Identifier:
keyid:C9:D5:B1:29:E0:6F:95:24:68:5E:70:01:02:84:1F:72:D6:91:5C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydWxKeBvlSRoXnABAoQfctaRXDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/BNMGtjTTYKe2pymUlI-2By8WAuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/19f9d7-4438-4d61-be77-c2eadd5ef3f1/1/ydWxKeBvlSRoXnABAoQfctaRXDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.54.192.0/24
91.212.79.0/24
IPv6:
2a13:f280::/29
Signature Algorithm: sha256WithRSAEncryption
7e:4b:eb:73:f2:41:32:f4:2d:3a:54:d8:ee:24:cd:c2:50:0e:
af:6e:66:57:2c:a5:6c:d2:26:ff:e6:38:3e:0c:de:61:b8:30:
91:6b:be:be:7d:9b:b3:7f:fa:1a:44:a0:fd:2a:23:06:3f:18:
32:d6:5e:59:7c:f0:5a:b4:ff:b7:a1:d5:98:6f:bb:00:76:d1:
67:9e:88:29:24:4c:cb:92:ba:16:ba:1c:b8:60:3d:c9:bf:47:
0e:3a:8d:4c:5e:17:25:24:cb:57:3e:0e:61:1e:ad:b3:2c:b5:
6a:04:07:63:1f:85:f3:7b:49:86:ea:ca:53:65:f6:9b:1a:d4:
fc:96:98:60:51:3a:05:17:f2:7b:e2:61:a8:e4:08:b6:af:3b:
41:84:f3:5a:bc:a8:9c:bd:13:be:08:f9:ea:61:4a:12:0b:f1:
f0:16:77:40:47:97:cb:18:62:10:c2:a7:80:37:5f:d3:ca:ea:
75:46:4b:ec:cc:c8:9b:69:d0:87:1a:de:83:31:d8:11:25:8e:
b1:50:7e:ee:92:1c:55:a2:3a:fe:de:5a:e6:be:03:87:02:84:
c0:0c:6b:2a:22:26:2f:40:36:dc:af:9c:98:e9:b1:a4:47:55:
39:97:59:89:47:57:50:cf:85:03:92:be:13:56:3c:50:63:03:
0b:8f:8f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:17:30 2026 by rpki-client