Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/BxE0oxtvqXmO1bQZoQI_gTQS_C8.roa
File: BxE0oxtvqXmO1bQZoQI_gTQS_C8.roa (raw, json)
Hash identifier: ln+WNj0W7ZN9S9+cEYgNpoBWUc6P+OBSc3bp8RM8MTo=
Subject key identifier: 07:11:34:A3:1B:6F:A9:79:8E:D5:B4:19:A1:02:3F:81:34:12:FC:2F
Certificate issuer: /CN=9ba94bc14937bb0b3632374355a446724104a981
Certificate serial: 019F94A5FDF51CA628F5C87CBED88C42FE6A
Authority key identifier: 9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/BxE0oxtvqXmO1bQZoQI_gTQS_C8.roa
Signing time: Fri 24 Jul 2026 15:02:14 +0000
ROA not before: Fri 24 Jul 2026 15:02:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 185.59.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a5:fd:f5:1c:a6:28:f5:c8:7c:be:d8:8c:42:fe:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ba94bc14937bb0b3632374355a446724104a981
Validity
Not Before: Jul 24 15:02:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=071134a31b6fa9798ed5b419a1023f813412fc2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:30:6d:4b:80:1f:aa:d0:4b:cf:35:e6:64:86:
cc:a5:31:5b:37:dc:45:47:3b:73:b1:e5:2a:44:bf:
50:9e:3d:d7:89:b5:9c:2d:a5:a4:6f:c3:07:4b:7c:
96:b6:85:52:1f:db:4e:15:6d:3a:99:d0:71:2a:c3:
e7:3c:cc:47:89:f6:32:af:a8:17:6c:2c:51:66:ce:
2c:ac:03:a6:0b:11:3c:70:31:87:c3:2b:0d:e0:a0:
77:99:d0:a5:e5:6a:a8:68:d6:5a:0c:fb:a7:ec:29:
12:20:30:3d:14:74:33:f7:57:2e:ad:1e:c2:aa:27:
96:7e:e4:89:76:bc:df:eb:57:32:f2:2e:2e:40:99:
47:3a:82:9d:3d:eb:fe:1c:f2:9a:45:da:b0:50:f3:
bd:c8:30:7c:96:7b:e2:88:a7:28:1d:a7:4e:86:16:
ef:f2:0b:a2:34:6a:4a:f9:a0:03:38:1c:77:88:f8:
08:99:84:6f:52:5b:f7:e7:56:dd:10:73:25:92:c0:
46:98:bb:2f:25:b3:f4:d7:2b:28:72:d7:76:de:ac:
b5:5c:ac:20:df:19:6d:bd:ad:46:89:5f:53:bc:0a:
fd:e0:e5:c1:4c:6f:76:d8:d7:a1:20:bf:57:12:54:
85:6a:a5:28:a2:8c:d7:52:6e:ee:55:09:dd:08:75:
1b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:11:34:A3:1B:6F:A9:79:8E:D5:B4:19:A1:02:3F:81:34:12:FC:2F
X509v3 Authority Key Identifier:
keyid:9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/BxE0oxtvqXmO1bQZoQI_gTQS_C8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.59.136.0/24
Signature Algorithm: sha256WithRSAEncryption
52:58:e2:e9:3d:5b:79:80:3d:a6:cd:d6:93:33:68:4d:34:d5:
f2:a5:1c:8d:02:30:35:f0:d0:7a:83:b2:52:83:43:a2:aa:fd:
39:8e:66:5f:a7:61:17:cf:07:02:7a:67:13:7a:ea:27:56:9d:
f4:f8:f8:67:c4:d1:06:b6:8d:c2:17:1a:0c:27:c9:3e:07:fb:
e6:55:59:7a:0d:16:30:3e:16:5b:24:44:fa:b7:8e:f9:83:cd:
7c:d3:e4:ca:c7:36:52:e7:5c:d9:40:e8:b8:67:30:3e:be:79:
96:a2:aa:0c:89:fe:a5:89:f0:ad:af:12:fd:bf:e8:5a:f0:7e:
d9:7e:94:31:d0:e1:99:34:11:95:95:3e:06:12:a9:50:de:57:
fb:f4:b5:1a:43:a5:23:c2:fb:c7:9e:3b:48:ea:66:75:81:14:
8e:35:c1:bf:f6:61:c8:90:0b:bc:bb:21:5d:e6:33:68:00:6d:
51:20:bc:2f:86:bc:80:1f:f4:91:bf:9a:10:89:20:1e:45:40:
cf:5e:8d:49:0a:d7:23:36:e6:90:a1:63:c6:6f:c1:84:d5:db:
92:21:fd:c1:5b:61:43:86:38:93:bc:84:b0:64:90:38:d5:4a:
ac:09:4e:47:b5:9d:17:86:c3:5f:fe:6a:5e:11:37:db:f7:22:
dc:eb:29:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:06:02 2026 by rpki-client