Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/bGuxhSGNwgOAE409_r8NGTXiRcM.roa
File: bGuxhSGNwgOAE409_r8NGTXiRcM.roa (raw, json)
Hash identifier: UKYB3TTnNg3ZdksMgyMmBDUdkrO20cZdZTx++0tp9rM=
Subject key identifier: 6C:6B:B1:85:21:8D:C2:03:80:13:8D:3D:FE:BF:0D:19:35:E2:45:C3
Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Certificate serial: 019EA7F8540210887162B1EDAC9D395DEF5C
Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/bGuxhSGNwgOAE409_r8NGTXiRcM.roa
Signing time: Mon 08 Jun 2026 16:02:09 +0000
ROA not before: Mon 08 Jun 2026 16:02:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210538
IP address blocks: 212.180.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a7:f8:54:02:10:88:71:62:b1:ed:ac:9d:39:5d:ef:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Validity
Not Before: Jun 8 16:02:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c6bb185218dc20380138d3dfebf0d1935e245c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ab:5a:3e:f9:78:25:b8:b6:23:52:5c:3c:29:
5d:86:b3:38:bf:f2:9b:bc:fb:af:c9:54:46:c9:94:
5a:13:d5:e2:2f:21:63:8c:51:e3:58:40:56:27:67:
7d:59:26:57:c4:bc:e0:4b:09:a7:e6:98:02:fa:1d:
ca:83:19:1f:60:2b:17:41:33:7d:cc:67:c0:2c:1a:
02:de:e2:0a:d8:c2:4a:e7:93:70:6d:b3:a3:f0:b6:
01:a2:0d:db:cf:1d:91:15:c0:71:10:cd:94:2e:a3:
0a:a6:82:65:5f:4c:ae:77:d9:c1:49:33:47:33:8b:
71:61:c8:c1:85:d8:00:0f:95:c3:78:3b:97:79:52:
1e:94:47:07:50:59:63:fb:13:79:45:c4:3f:c0:0d:
ea:04:e8:84:34:df:4a:cd:17:72:e5:e2:f5:7a:97:
aa:c3:e4:24:e8:b5:d8:7a:ba:e7:e8:32:9e:ab:2d:
91:77:a0:f2:42:e3:d0:c6:7f:7a:b9:e3:38:13:0e:
35:73:12:69:11:5b:8c:95:8f:da:cb:db:c9:62:47:
de:e3:b9:4b:7c:87:c2:f6:be:9d:da:f3:2e:66:31:
ad:3b:ac:b5:2d:51:5b:e6:da:46:f9:1a:ca:4b:23:
f8:4c:fa:81:fe:72:6b:68:6a:29:84:e7:23:57:67:
52:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6B:B1:85:21:8D:C2:03:80:13:8D:3D:FE:BF:0D:19:35:E2:45:C3
X509v3 Authority Key Identifier:
keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/bGuxhSGNwgOAE409_r8NGTXiRcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.180.120.0/24
Signature Algorithm: sha256WithRSAEncryption
26:53:2d:97:2f:32:22:61:bc:ac:15:f2:a1:2d:e4:58:a9:7f:
a8:02:7f:98:b8:fd:79:4d:e6:65:f0:6b:3a:34:b9:66:6d:1b:
0d:4d:1e:07:8f:b4:dc:eb:95:75:62:23:71:3a:3f:b8:91:c0:
4b:b3:21:a1:cc:f6:45:71:24:22:82:b3:aa:ed:96:a8:a9:a4:
ff:5a:00:4a:5a:01:c3:f6:ae:c9:3c:3c:ac:4e:d5:b4:41:2d:
01:7e:5b:57:0d:ba:b5:fe:03:b2:99:44:97:93:b5:8d:35:af:
c1:44:8c:3e:2a:2a:d5:7c:21:6b:ce:c5:e4:38:73:7c:23:99:
1f:40:a8:5a:13:18:61:58:a7:d1:89:e5:47:b0:d2:4f:9b:3d:
82:1a:19:ab:4a:6f:dd:18:b8:ee:f9:95:3a:a8:24:b9:2b:df:
8b:54:15:43:5d:ab:47:b5:55:96:16:5a:19:62:62:4b:5d:74:
66:07:bc:ce:c9:fc:45:7e:aa:79:c2:31:10:b4:11:fa:0e:fc:
a9:cc:ec:34:75:48:53:5d:51:01:9d:c7:1d:de:ff:77:d8:3e:
3a:ad:10:9c:56:01:35:f2:1b:75:ff:23:28:fe:94:35:d7:05:
dc:22:7e:e8:4e:7b:da:d4:6c:49:98:14:98:54:95:74:23:36:
ab:e8:14:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ6n+FQCEIhxYrHtrJ05Xe9cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NTRiNjE4M2U0NTk3NDhjODllZTU0MzFiOGYzMWRlNjky
YWUzYjcwHhcNMjYwNjA4MTYwMjA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzZiYjE4NTIxOGRjMjAzODAxMzhkM2RmZWJmMGQxOTM1ZTI0NWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ataPvl4Jbi2I1JcPCldhrM4v/Kb
vPuvyVRGyZRaE9XiLyFjjFHjWEBWJ2d9WSZXxLzgSwmn5pgC+h3KgxkfYCsXQTN9
zGfALBoC3uIK2MJK55NwbbOj8LYBog3bzx2RFcBxEM2ULqMKpoJlX0yud9nBSTNH
M4txYcjBhdgAD5XDeDuXeVIelEcHUFlj+xN5RcQ/wA3qBOiENN9KzRdy5eL1epeq
w+Qk6LXYerrn6DKeqy2Rd6DyQuPQxn96ueM4Ew41cxJpEVuMlY/ay9vJYkfe47lL
fIfC9r6d2vMuZjGtO6y1LVFb5tpG+RrKSyP4TPqB/nJraGophOcjV2dSbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGxrsYUhjcIDgBONPf6/DRk14kXDMB8GA1UdIwQY
MBaAFFlUthg+RZdIyJ7lQxuPMd5pKuO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMt
ZDJhZGVlZDc1NWQ4LzEvYkd1eGhTR053Z09BRTQwOV9yOE5HVFhpUmNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83ZGU2NWMtOTBmNS00ZGVmLWI4NzMtZDJhZGVlZDc1NWQ4
LzEvV1ZTMkdENUZsMGpJbnVWREc0OHgzbWtxNDdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1LR4MA0G
CSqGSIb3DQEBCwUAA4IBAQAmUy2XLzIiYbysFfKhLeRYqX+oAn+YuP15TeZl8Gs6
NLlmbRsNTR4Hj7Tc65V1YiNxOj+4kcBLsyGhzPZFcSQigrOq7ZaoqaT/WgBKWgHD
9q7JPDysTtW0QS0BfltXDbq1/gOymUSXk7WNNa/BRIw+KirVfCFrzsXkOHN8I5kf
QKhaExhhWKfRieVHsNJPmz2CGhmrSm/dGLju+ZU6qCS5K9+LVBVDXatHtVWWFloZ
YmJLXXRmB7zOyfxFfqp5wjEQtBH6DvypzOw0dUhTXVEBnccd3v932D46rRCcVgE1
8ht1/yMo/pQ11wXcIn7oTnva1GxJmBSYVJV0Izar6BRj
-----END CERTIFICATE-----
Generated at Sat Jun 13 15:54:39 2026 by rpki-client