Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/BuIfMJvSiTJ1G8jTVNwo0_f9xTc.roa
File: BuIfMJvSiTJ1G8jTVNwo0_f9xTc.roa (raw, json)
Hash identifier: 05vt9fKeq/KeqsC+KCtUCmGwZwle34vu62iXl6HflOY=
Subject key identifier: 06:E2:1F:30:9B:D2:89:32:75:1B:C8:D3:54:DC:28:D3:F7:FD:C5:37
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 019EA7F85412DE62C8AC066927878C72B27D
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/BuIfMJvSiTJ1G8jTVNwo0_f9xTc.roa
Signing time: Mon 08 Jun 2026 16:02:09 +0000
ROA not before: Mon 08 Jun 2026 16:02:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213529
IP address blocks: 216.162.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a7:f8:54:12:de:62:c8:ac:06:69:27:87:8c:72:b2:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: Jun 8 16:02:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06e21f309bd28932751bc8d354dc28d3f7fdc537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8d:04:69:be:35:55:6e:91:4e:89:cf:67:eb:
04:66:b5:93:b8:d6:24:70:c0:94:48:f9:87:18:56:
58:ba:a3:6f:96:a0:d5:37:4c:9a:86:6a:e2:e8:83:
5c:7c:25:8c:0d:cd:db:c2:42:01:71:96:c8:70:15:
88:0c:74:f8:48:a0:e7:2b:db:65:c1:63:97:18:9d:
d0:57:69:df:72:8d:b8:e0:f1:73:41:79:88:ee:a4:
0f:a7:66:75:db:86:8b:91:3e:6d:62:94:b5:a9:f0:
41:d1:36:4b:b5:0a:d3:5d:73:2a:29:e9:cc:14:c9:
32:a8:06:89:3f:eb:81:00:bc:da:3c:72:23:ca:38:
f3:09:d5:21:a4:18:3c:69:ad:96:8a:dc:48:f3:21:
97:d3:03:59:06:b1:a1:49:d0:72:36:0e:75:8a:b4:
c6:30:bc:55:78:8a:73:d2:e6:0e:49:27:0d:43:2d:
7a:e4:3f:4a:c3:ea:d2:b2:86:74:e0:40:cf:08:6d:
cf:01:44:74:d0:a3:9b:0c:60:4e:6f:bd:a4:c6:9f:
05:7c:47:81:ce:d2:fc:b8:35:81:f9:e2:20:84:4b:
92:76:ff:45:8b:9c:81:68:c6:53:2c:1a:27:8e:af:
be:d5:b5:34:71:2b:33:38:54:bd:39:f9:de:4a:5a:
c6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E2:1F:30:9B:D2:89:32:75:1B:C8:D3:54:DC:28:D3:F7:FD:C5:37
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/BuIfMJvSiTJ1G8jTVNwo0_f9xTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.162.44.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:24:dd:74:69:bd:72:a9:ce:8e:e6:fa:48:3f:bb:61:08:5d:
01:9a:d5:ee:3e:c4:e1:08:ec:3e:56:6c:c8:c7:37:f3:38:40:
75:cb:19:5c:36:82:01:54:1f:ca:7d:6c:1a:4c:60:94:30:0c:
de:a0:e0:e0:34:af:ec:98:70:ef:86:af:72:04:6c:7b:1a:a4:
cd:98:62:e6:22:c8:b9:ec:f0:49:75:f4:08:c3:30:45:cc:b4:
6a:32:7f:df:6e:b0:08:74:90:27:0d:65:e8:f5:a8:84:b6:bc:
b9:41:44:64:be:06:2a:f6:cd:8f:e0:5c:32:9a:37:90:1b:20:
4b:d0:2a:57:5d:d4:9b:0e:50:d9:8b:60:f1:c7:4d:d4:b5:4e:
f3:94:af:ba:37:02:a5:71:8a:5d:3a:df:c5:b4:ae:59:bb:7c:
95:0f:b6:76:34:bd:36:0b:26:7b:65:f7:bd:d5:e9:c9:84:a6:
75:25:c1:30:87:5b:7b:df:1a:7b:3a:a1:1b:41:df:29:c4:0b:
03:0e:16:f6:34:44:34:78:45:ce:13:33:9e:5b:51:e7:56:b0:
88:cf:b9:61:56:ad:53:c1:56:d6:51:6f:65:cf:e8:df:b2:52:
b8:b3:2a:4f:0b:13:c6:a3:22:7d:2c:16:84:e1:23:07:21:ae:
97:94:b4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:14:50 2026 by rpki-client