Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/BMZ2_I7t3Uk18P2C5vRCypypRj0.roa
File: BMZ2_I7t3Uk18P2C5vRCypypRj0.roa (raw, json)
Hash identifier: d5qYA/OjZSPe9yt6LzCnOFrzvvZD/VDmlduoTvQkrdY=
Subject key identifier: 04:C6:76:FC:8E:ED:DD:49:35:F0:FD:82:E6:F4:42:CA:9C:A9:46:3D
Certificate issuer: /CN=a2893a4b284acb5d8a4164289045492109511688
Certificate serial: 01A07C1892B86041BC7B0751D13265B63652
Authority key identifier: A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/BMZ2_I7t3Uk18P2C5vRCypypRj0.roa
Signing time: Mon 07 Sep 2026 13:39:40 +0000
ROA not before: Mon 07 Sep 2026 13:39:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397451
IP address blocks: 45.67.100.0/24 maxlen: 24
185.25.156.0/24 maxlen: 24
2a09:e880::/48 maxlen: 48
2a09:e880::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.mft
rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7c:18:92:b8:60:41:bc:7b:07:51:d1:32:65:b6:36:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2893a4b284acb5d8a4164289045492109511688
Validity
Not Before: Sep 7 13:39:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04c676fc8eeddd4935f0fd82e6f442ca9ca9463d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f2:89:55:60:9c:80:0b:eb:b6:0f:a6:06:db:
d3:c9:7d:c4:f9:74:21:7c:2b:08:c5:34:4b:b6:c9:
2a:63:03:53:3d:fc:94:cb:00:7b:d0:08:ed:6e:d5:
b9:d5:32:1d:50:a6:ed:b7:4a:a8:30:fe:76:cc:67:
56:ee:46:76:3f:4f:e8:1f:7c:01:fd:b2:10:dd:bc:
4c:4e:8f:f9:09:17:43:0c:87:b9:89:d2:6b:f3:d7:
65:64:04:54:8e:9d:c5:64:0a:56:cf:c6:27:b8:66:
d1:37:d6:07:ce:aa:3b:e7:62:cb:06:1b:da:a1:9b:
87:b9:4a:01:6a:d9:2e:e8:e3:e3:04:d6:ee:e4:cb:
8e:c3:8a:c7:3c:9d:36:fb:ff:6f:6f:e9:f3:a4:ed:
9d:b2:47:b2:b6:d3:15:10:8f:86:00:8c:ec:d6:e1:
b0:b9:67:3d:43:df:73:1d:1a:72:7e:fa:03:00:48:
a2:2f:63:75:56:25:8c:28:32:6a:c2:20:d2:5b:09:
63:70:76:3d:2a:b8:8e:47:2b:24:9b:67:19:f9:47:
dc:f3:35:d7:7a:b4:4f:63:25:da:b9:8f:92:c1:12:
f8:48:85:67:9b:47:a3:06:73:61:f7:e0:ee:b4:86:
46:71:3f:8b:ea:02:b1:0c:4f:6c:e7:b9:15:b2:c3:
1a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C6:76:FC:8E:ED:DD:49:35:F0:FD:82:E6:F4:42:CA:9C:A9:46:3D
X509v3 Authority Key Identifier:
keyid:A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/BMZ2_I7t3Uk18P2C5vRCypypRj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.100.0/24
185.25.156.0/24
IPv6:
2a09:e880::/48
Signature Algorithm: sha256WithRSAEncryption
71:59:3e:3c:ed:29:1d:40:22:9c:f4:97:0e:5a:37:33:a6:ef:
93:dd:d6:f0:c1:be:4d:ee:e1:cf:84:48:d3:3a:9d:96:99:6c:
84:4b:58:a6:dc:05:25:d6:ce:13:cf:70:28:30:c8:db:0c:56:
d8:18:56:a4:41:12:08:f0:cd:d2:d3:96:b0:0f:30:b1:bd:ee:
f7:c0:7c:b4:4a:a4:30:1d:71:ac:04:96:35:0e:27:27:52:6f:
7f:59:e5:0e:b9:02:bc:e5:8a:13:e1:3c:03:55:9f:64:b7:75:
27:f0:a1:33:a6:ca:28:06:64:22:88:a3:65:e1:91:1b:b6:8f:
9c:09:0d:62:37:a5:e0:cc:70:40:c6:6e:a0:2a:50:25:42:af:
20:4f:b0:da:43:56:be:ba:34:61:ff:a5:de:dd:13:41:2e:12:
f1:7b:ef:ff:57:6b:8f:be:6a:31:20:6c:c7:65:56:81:2a:a9:
58:89:48:5e:78:5b:cf:01:31:32:c1:d0:5a:d9:40:2a:ca:31:
0c:46:62:1c:00:d5:f2:78:53:92:6f:02:68:a4:a7:18:fb:27:
e2:0f:2c:ac:31:75:64:bd:ea:e9:02:c2:63:43:f3:07:f1:7f:
17:af:d0:28:a3:2e:a0:62:00:f3:80:8d:f7:ba:b9:9f:20:88:
4b:2d:fc:58
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAaB8GJK4YEG8ewdR0TJltjZSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyODkzYTRiMjg0YWNiNWQ4YTQxNjQyODkwNDU0OTIxMDk1
MTE2ODgwHhcNMjYwOTA3MTMzOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNGM2NzZmYzhlZWRkZDQ5MzVmMGZkODJlNmY0NDJjYTljYTk0NjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/KJVWCcgAvrtg+mBtvTyX3E+XQh
fCsIxTRLtskqYwNTPfyUywB70AjtbtW51TIdUKbtt0qoMP52zGdW7kZ2P0/oH3wB
/bIQ3bxMTo/5CRdDDIe5idJr89dlZARUjp3FZApWz8YnuGbRN9YHzqo752LLBhva
oZuHuUoBatku6OPjBNbu5MuOw4rHPJ02+/9vb+nzpO2dskeyttMVEI+GAIzs1uGw
uWc9Q99zHRpyfvoDAEiiL2N1ViWMKDJqwiDSWwljcHY9KriORyskm2cZ+Ufc8zXX
erRPYyXauY+SwRL4SIVnm0ejBnNh9+DutIZGcT+L6gKxDE9s57kVssMaHQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFATGdvyO7d1JNfD9gub0QsqcqUY9MB8GA1UdIwQY
MBaAFKKJOksoSstdikFkKJBFSSEJURaIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb29rNlN5aEt5MTJLUVdRb2tFVkpJUWxSRm9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iNDg3YWItNWUzMS00MTE3LWFkYTgt
YTVkM2NiOTE4MjA2LzEvQk1aMl9JN3QzVWsxOFAyQzV2UkN5cHlwUmowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9iNDg3YWItNWUzMS00MTE3LWFkYTgtYTVkM2NiOTE4MjA2
LzEvb29rNlN5aEt5MTJLUVdRb2tFVkpJUWxSRm9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQALUNkAwQA
uRmcMA8EAgACMAkDBwAqCeiAAAAwDQYJKoZIhvcNAQELBQADggEBAHFZPjztKR1A
Ipz0lw5aNzOm75Pd1vDBvk3u4c+ESNM6nZaZbIRLWKbcBSXWzhPPcCgwyNsMVtgY
VqRBEgjwzdLTlrAPMLG97vfAfLRKpDAdcawEljUOJydSb39Z5Q65ArzlihPhPANV
n2S3dSfwoTOmyigGZCKIo2XhkRu2j5wJDWI3peDMcEDGbqAqUCVCryBPsNpDVr66
NGH/pd7dE0EuEvF77/9Xa4++ajEgbMdlVoEqqViJSF54W88BMTLB0FrZQCrKMQxG
YhwA1fJ4U5JvAmikpxj7J+IPLKwxdWS96ukCwmND8wfxfxev0CijLqBiAPOAjfe6
uZ8giEst/Fg=
-----END CERTIFICATE-----
Generated at Tue Sep 22 10:31:42 2026 by rpki-client