Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/bgVdDIP4FIow1zAwSao7be6KrC8.roa
File: bgVdDIP4FIow1zAwSao7be6KrC8.roa (raw, json)
Hash identifier: 8F5clBuL/Te3i0D4X6PaEO16p9rv+ETHYqT2HNqrKbQ=
Subject key identifier: 6E:05:5D:0C:83:F8:14:8A:30:D7:30:30:49:AA:3B:6D:EE:8A:AC:2F
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 01A05E5763C4EB78D44B8CD9FF696CF0E4FE
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/bgVdDIP4FIow1zAwSao7be6KrC8.roa
Signing time: Tue 01 Sep 2026 18:59:40 +0000
ROA not before: Tue 01 Sep 2026 18:59:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61317
IP address blocks: 91.103.124.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5e:57:63:c4:eb:78:d4:4b:8c:d9:ff:69:6c:f0:e4:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Sep 1 18:59:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e055d0c83f8148a30d7303049aa3b6dee8aac2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:fb:b0:6e:66:e9:c9:25:15:31:23:80:b1:c5:
0b:71:a9:48:b7:1e:a0:f0:7e:ab:18:6f:4a:e1:82:
43:e4:c0:aa:6a:e5:cf:39:33:bb:04:17:37:5e:ce:
78:48:0b:ab:d2:ca:3e:b2:f9:41:03:6e:c3:36:1e:
42:6a:4d:e4:3a:ac:09:ba:33:fb:44:d5:a6:40:d0:
d4:fa:d6:6c:b8:54:9b:70:7a:0a:fd:0e:f6:04:66:
28:5f:97:75:22:10:c6:3f:d1:8b:43:ec:48:4d:b8:
5a:92:3e:48:68:a7:39:3b:e5:29:ea:c1:84:78:e3:
01:f3:48:f6:56:91:f8:b2:ed:aa:9a:82:9f:4d:e4:
51:f9:29:cf:57:3a:d7:dd:e0:5e:e9:65:fe:e4:02:
b9:07:67:06:df:90:0a:da:5d:0b:b9:71:2c:d4:09:
61:66:80:3a:df:43:91:b1:09:cb:90:0b:93:86:1e:
71:30:e8:6a:7d:bf:39:6a:f9:68:11:31:c7:37:2d:
70:cd:7b:36:cd:b2:85:a1:4e:2e:e5:9a:a7:ef:08:
14:88:d0:8a:29:1d:d2:51:08:37:e4:ca:e3:ea:c6:
42:33:58:9f:4d:19:bb:f9:7e:f4:e7:3f:51:3e:62:
8d:10:c9:b5:bd:71:1f:86:4a:b6:6f:fe:d3:e1:92:
ef:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:05:5D:0C:83:F8:14:8A:30:D7:30:30:49:AA:3B:6D:EE:8A:AC:2F
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/bgVdDIP4FIow1zAwSao7be6KrC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.103.124.0/22
Signature Algorithm: sha256WithRSAEncryption
74:a6:40:9e:74:cb:ef:d8:36:f0:95:d5:1a:3b:92:47:0f:7b:
c4:9c:07:67:56:a2:48:25:69:e9:7d:5c:81:0b:0e:07:96:ed:
43:4d:0c:e3:6b:30:5a:65:5e:ff:a8:47:6b:dc:de:02:77:58:
1b:74:4a:79:f0:b4:49:15:e5:a8:ca:a9:ff:87:30:3a:e1:e5:
dd:45:3d:4b:a5:be:a8:55:38:33:91:1a:84:d7:b0:68:eb:c8:
c8:48:43:e0:cb:fe:b9:99:13:5f:f7:a6:a9:11:d2:a5:b0:9a:
61:b7:f0:ca:93:69:ec:ba:bf:e5:35:70:e4:2c:00:59:d9:a1:
78:26:0f:ca:10:81:39:ad:2f:64:c9:d1:ee:0c:87:5b:32:2b:
8d:ef:70:25:2b:6f:da:b1:00:ef:3d:73:47:32:14:65:52:16:
92:2b:25:32:ce:c6:78:39:f9:5e:a2:9b:db:0d:9b:5d:e4:0f:
4a:c4:8b:01:2f:47:2d:83:dd:1d:25:a7:e2:bb:cd:5e:90:a3:
b8:3b:97:8e:25:15:e8:d7:b1:c7:3e:20:e7:a3:01:1a:27:42:
9e:8b:0f:94:1f:ff:9b:3b:4b:84:ea:56:9b:89:23:a3:42:8d:
95:3b:e1:87:45:f2:24:6d:25:94:4c:3c:6c:f1:6d:0f:b5:e0:
05:3e:00:44
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBeV2PE63jUS4zZ/2ls8OT+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MTY2YjcwNDg0M2QzZDk3NTQwOTVjODNhOTFiNDkzODI4
MjAwYTIwHhcNMjYwOTAxMTg1OTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTA1NWQwYzgzZjgxNDhhMzBkNzMwMzA0OWFhM2I2ZGVlOGFhYzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PuwbmbpySUVMSOAscULcalItx6g
8H6rGG9K4YJD5MCqauXPOTO7BBc3Xs54SAur0so+svlBA27DNh5Cak3kOqwJujP7
RNWmQNDU+tZsuFSbcHoK/Q72BGYoX5d1IhDGP9GLQ+xITbhakj5IaKc5O+Up6sGE
eOMB80j2VpH4su2qmoKfTeRR+SnPVzrX3eBe6WX+5AK5B2cG35AK2l0LuXEs1Alh
ZoA630ORsQnLkAuThh5xMOhqfb85avloETHHNy1wzXs2zbKFoU4u5Zqn7wgUiNCK
KR3SUQg35Mrj6sZCM1ifTRm7+X705z9RPmKNEMm1vXEfhkq2b/7T4ZLvywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG4FXQyD+BSKMNcwMEmqO23uiqwvMB8GA1UdIwQY
MBaAFJQWa3BIQ9PZdUCVyDqRtJOCggCiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYt
NGJlMThlZjEyOGI0LzEvYmdWZERJUDRGSW93MXpBd1NhbzdiZTZLckM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYtNGJlMThlZjEyOGI0
LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW2d8MA0G
CSqGSIb3DQEBCwUAA4IBAQB0pkCedMvv2DbwldUaO5JHD3vEnAdnVqJIJWnpfVyB
Cw4Hlu1DTQzjazBaZV7/qEdr3N4Cd1gbdEp58LRJFeWoyqn/hzA64eXdRT1Lpb6o
VTgzkRqE17Bo68jISEPgy/65mRNf96apEdKlsJpht/DKk2nsur/lNXDkLABZ2aF4
Jg/KEIE5rS9kydHuDIdbMiuN73AlK2/asQDvPXNHMhRlUhaSKyUyzsZ4Ofleopvb
DZtd5A9KxIsBL0ctg90dJafiu81ekKO4O5eOJRXo17HHPiDnowEaJ0Keiw+UH/+b
O0uE6labiSOjQo2VO+GHRfIkbSWUTDxs8W0PteAFPgBE
-----END CERTIFICATE-----
Generated at Mon Sep 21 22:15:11 2026 by rpki-client