Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/BCUoExG5S0e92RDrAPVZHuPQWo4.roa
File: BCUoExG5S0e92RDrAPVZHuPQWo4.roa (raw, json)
Hash identifier: ga/42q8ZFF14X/F1Dex6MdKyB0ci7C/L853gqTlJbMo=
Subject key identifier: 04:25:28:13:11:B9:4B:47:BD:D9:10:EB:00:F5:59:1E:E3:D0:5A:8E
Certificate issuer: /CN=dfd046af5edc11964096dc20f6af1de55d9c9030
Certificate serial: 01A19D5483910B61C3F72FBC2A73011FD3E1
Authority key identifier: DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/BCUoExG5S0e92RDrAPVZHuPQWo4.roa
Signing time: Mon 02 Nov 2026 17:35:23 +0000
ROA not before: Mon 02 Nov 2026 17:35:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200040
IP address blocks: 131.222.240.0/24 maxlen: 24
131.222.241.0/24 maxlen: 24
131.222.242.0/24 maxlen: 24
185.190.16.0/24 maxlen: 24
185.190.19.0/24 maxlen: 24
195.18.8.0/24 maxlen: 24
2a14:10c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9d:54:83:91:0b:61:c3:f7:2f:bc:2a:73:01:1f:d3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd046af5edc11964096dc20f6af1de55d9c9030
Validity
Not Before: Nov 2 17:35:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0425281311b94b47bdd910eb00f5591ee3d05a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b4:7a:ab:5c:be:86:f2:dc:6a:df:76:11:83:
78:80:ec:75:22:0f:c5:4f:a0:2c:29:8e:00:a6:24:
c3:47:36:9e:71:d8:5a:e7:03:c7:bf:94:ca:f3:df:
d7:1e:b8:d3:9f:08:75:a6:00:e9:a1:3c:7c:e9:90:
5f:06:9b:ef:72:14:f7:e8:13:b9:9a:a4:00:cf:da:
c4:30:38:bd:94:80:0b:9e:2e:e8:df:cc:af:96:0a:
9f:fa:ed:41:ed:2c:d5:fc:16:f2:23:53:91:f8:09:
92:2c:46:a1:f0:7c:ae:2b:8b:d2:58:40:30:c4:cf:
15:41:d1:5c:fd:15:32:6d:c5:71:f6:8a:c0:4b:a7:
57:4b:28:6a:95:a4:b9:97:00:bc:56:a9:37:d7:44:
62:cd:92:a5:25:00:b8:d3:1d:00:9c:08:0f:2c:8e:
6f:d1:74:da:e0:ce:35:61:9b:29:eb:91:a9:33:91:
5a:ba:87:fe:97:c1:91:54:2c:3b:65:8e:82:ba:85:
39:b9:b4:cd:e8:fe:cd:bd:85:66:62:8c:3c:ed:3e:
dc:5a:ae:01:a7:07:00:8a:a3:21:43:02:4f:b8:9b:
ef:d6:32:b3:07:9c:35:45:e0:40:0b:80:f3:c1:c8:
1a:9d:87:2f:dd:47:20:d4:30:3e:fa:5e:cb:8a:eb:
bd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:25:28:13:11:B9:4B:47:BD:D9:10:EB:00:F5:59:1E:E3:D0:5A:8E
X509v3 Authority Key Identifier:
keyid:DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/BCUoExG5S0e92RDrAPVZHuPQWo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.240.0-131.222.242.255
185.190.16.0/24
185.190.19.0/24
195.18.8.0/24
IPv6:
2a14:10c0::/29
Signature Algorithm: sha256WithRSAEncryption
19:73:43:2a:15:6b:06:f9:11:4f:a2:69:44:1b:a3:11:06:66:
2c:60:af:a3:f0:b7:3f:ff:d5:0b:04:9e:1b:21:aa:5b:3d:2d:
7a:6c:ae:07:76:62:89:48:c4:00:37:ae:6e:fe:cc:d1:f2:89:
49:cb:ce:f0:52:f0:b9:cc:23:5f:dc:dd:91:1b:90:f3:a4:b3:
87:cd:6b:08:6a:b9:0c:9b:50:16:ed:0b:2b:73:d7:26:80:3c:
b2:a2:51:a5:6f:d7:e1:54:ab:47:9b:0c:e3:0e:1b:56:18:1d:
46:16:df:43:95:ad:79:7e:0c:78:a5:5d:bf:cd:45:87:07:c8:
91:1a:0d:37:45:cd:a1:2a:27:fc:6a:8b:29:9e:d1:a9:82:86:
14:5f:00:04:0a:e5:ca:d7:02:21:d8:ea:bd:8d:1b:0f:a1:8e:
a5:36:d8:df:c5:26:2c:d8:ed:e7:fc:23:ff:59:4c:f8:b2:19:
17:66:e2:e4:61:31:00:6b:f2:5b:89:65:4e:f9:a9:9c:5f:7e:
2c:41:46:88:7a:95:bc:35:04:fc:a5:45:1a:7e:e8:1c:a3:80:
27:e1:6e:49:be:0d:e9:7b:b7:b8:68:2d:a2:36:57:00:4f:2c:
a0:97:8d:3e:aa:cc:98:6b:65:62:67:5d:80:d6:65:54:1a:3d:
3c:90:ad:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:33:40 2026 by rpki-client