Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/bjOfSR2MqsV8F2u47GaaSTilb7o.roa
File: bjOfSR2MqsV8F2u47GaaSTilb7o.roa (raw, json)
Hash identifier: CSQqwPLLCYB1G620MY/nxSIeK4G85F9XmfdOOy9X5uE=
Subject key identifier: 6E:33:9F:49:1D:8C:AA:C5:7C:17:6B:B8:EC:66:9A:49:38:A5:6F:BA
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 019FA3B71DB3E083F98681DD2F05AAE477A5
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/bjOfSR2MqsV8F2u47GaaSTilb7o.roa
Signing time: Mon 27 Jul 2026 13:15:14 +0000
ROA not before: Mon 27 Jul 2026 13:15:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 85.204.125.0/24 maxlen: 24
188.215.72.0/24 maxlen: 24
188.215.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:b7:1d:b3:e0:83:f9:86:81:dd:2f:05:aa:e4:77:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jul 27 13:15:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e339f491d8caac57c176bb8ec669a4938a56fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2f:6b:01:eb:af:65:6a:64:01:20:09:a0:0e:
c3:c1:64:42:9b:d6:d4:14:d3:83:47:21:c7:e3:b3:
2c:19:f2:36:be:e7:5b:60:d9:01:99:99:1e:20:74:
17:59:18:27:4d:b5:da:ff:84:c4:c0:6e:86:98:4a:
8b:9a:99:07:84:16:88:8c:1c:fe:0e:04:e2:03:59:
34:64:05:52:62:2d:50:73:e6:31:74:ae:8b:24:eb:
48:39:3e:bf:09:69:5a:79:83:dc:d1:16:8c:82:12:
8b:14:9a:9d:b9:dd:e2:09:7d:c3:ea:ff:0d:ed:fb:
ac:11:bb:11:37:6b:5e:3c:43:21:38:39:c2:bb:a3:
56:b1:97:7c:b8:34:ec:72:34:20:00:68:a3:d1:c9:
ea:34:26:93:be:d6:89:3a:6e:1b:49:c9:01:fb:d1:
29:00:9c:77:75:97:6a:2f:22:e6:49:64:48:dd:52:
a0:f9:ec:df:38:1d:36:b4:9e:43:12:96:8c:d0:fb:
04:a6:08:67:b5:02:df:06:ea:59:f9:bf:6c:1a:0a:
d9:76:84:2f:2e:11:7e:94:15:e6:e2:86:ed:85:60:
49:53:9b:59:0f:77:9c:4e:f6:7e:d6:00:17:aa:46:
d7:29:e6:a2:b0:66:7d:b2:8d:eb:d9:55:3a:34:60:
37:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:33:9F:49:1D:8C:AA:C5:7C:17:6B:B8:EC:66:9A:49:38:A5:6F:BA
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/bjOfSR2MqsV8F2u47GaaSTilb7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.125.0/24
188.215.72.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:9c:39:b7:3e:1f:35:10:9b:9e:59:16:c2:3c:5f:e4:d7:53:
ec:3f:95:db:f9:2a:43:a2:a9:3a:7c:7f:f6:0b:10:ab:44:20:
5d:c4:94:5d:bd:2f:e3:83:c3:c6:da:92:d2:e3:d4:e4:80:57:
42:f8:4c:8a:31:0e:eb:cf:a6:32:c6:60:a4:8e:e5:aa:10:d0:
fd:48:dd:33:90:70:74:fa:03:c9:a0:9d:a6:00:69:c9:c9:24:
cc:d7:3e:6b:47:3b:ab:5d:8d:32:e7:c5:c0:b3:ba:28:24:34:
34:cd:f9:07:e7:34:02:11:f0:fa:81:8d:8e:ee:f3:ab:b5:e8:
c7:e4:84:cc:b9:ad:ee:79:7a:cc:c9:a9:63:19:ce:a8:d4:78:
40:69:94:1a:5e:04:97:fa:64:07:4e:ee:da:ca:22:cb:62:77:
3b:f6:a7:3e:21:31:a2:40:46:5a:a0:7f:08:22:ac:a2:2c:07:
62:9c:76:55:07:fd:ab:04:ef:d3:73:09:f8:6b:70:8d:27:9a:
af:5b:b1:dd:d1:51:27:8c:b3:ab:ab:be:7c:23:d6:8c:2a:33:
3c:90:fe:c0:52:18:08:83:63:b3:38:bb:c7:33:06:68:54:01:
06:49:66:c7:c9:6f:25:99:19:72:08:17:0b:3b:6a:56:40:ba:
a9:e7:87:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:36:06 2026 by rpki-client