Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/Bga40NLFs-oNsdLSCybRNnC_plc.roa
File: Bga40NLFs-oNsdLSCybRNnC_plc.roa (raw, json)
Hash identifier: nw8QqSDhZLs/ZxfWTljSeJkxJYpk/iQ+hlJe4URoTP0=
Subject key identifier: 06:06:B8:D0:D2:C5:B3:EA:0D:B1:D2:D2:0B:26:D1:36:70:BF:A6:57
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019EA313E42193C744281DFF33E8093D3849
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/Bga40NLFs-oNsdLSCybRNnC_plc.roa
Signing time: Sun 07 Jun 2026 17:14:10 +0000
ROA not before: Sun 07 Jun 2026 17:14:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 191.44.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a3:13:e4:21:93:c7:44:28:1d:ff:33:e8:09:3d:38:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Jun 7 17:14:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0606b8d0d2c5b3ea0db1d2d20b26d13670bfa657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:14:d6:10:03:4a:81:6c:73:b2:20:a5:d1:0f:
c3:41:50:a4:72:0b:c7:4a:9f:a2:9d:06:be:34:66:
03:c9:56:d2:b1:0b:3d:82:cf:6f:ff:d9:43:4b:77:
26:07:35:21:cf:f3:95:08:50:31:88:ed:6c:18:eb:
d3:88:72:b9:c5:f8:11:9f:5a:fc:05:24:6d:47:62:
68:3d:35:05:ae:da:7a:09:26:8c:89:0e:93:b6:74:
1e:10:ba:af:a4:9f:d1:6f:01:2a:8f:bc:af:46:65:
4a:81:b6:64:f4:8d:fc:fa:60:b9:25:bc:3a:ed:cf:
43:9e:fd:34:58:74:91:17:39:41:bf:ca:21:b6:2a:
fc:c6:20:a0:6f:ff:11:e4:8b:6d:e6:76:77:dc:e1:
c5:e9:25:c1:f7:0a:60:07:13:f4:be:97:7a:a9:d9:
e6:5c:71:01:81:e9:8d:bd:91:23:ca:89:d4:50:15:
b0:09:c1:2f:f1:14:9d:57:08:f8:66:f4:62:56:cc:
f5:57:75:1b:dd:a0:d8:f6:d2:6a:9e:38:6b:3f:26:
20:5a:5a:ac:4e:f2:e4:db:74:4c:ba:f2:bb:4a:3b:
d0:62:fb:20:b0:88:a0:ba:06:68:56:6a:cc:3b:41:
b9:70:5d:4a:3c:67:19:d7:a9:0b:07:0b:27:f2:96:
fd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:06:B8:D0:D2:C5:B3:EA:0D:B1:D2:D2:0B:26:D1:36:70:BF:A6:57
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/Bga40NLFs-oNsdLSCybRNnC_plc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.66.0/24
Signature Algorithm: sha256WithRSAEncryption
75:42:72:3b:db:92:73:c0:5d:24:ce:32:e4:13:09:00:90:a3:
67:67:88:3f:fa:b3:4d:b6:1a:0b:ce:e0:02:42:74:dc:fa:4b:
4e:0c:dd:4b:e9:10:06:59:f0:bc:25:c6:ab:5f:e5:17:e9:50:
b2:ea:03:46:4a:d3:31:1e:72:8a:8d:03:2d:99:5a:81:2e:93:
98:7d:10:a0:30:b8:20:f1:15:59:cf:ef:2a:02:79:20:4c:8e:
b1:1e:f8:ff:a0:ad:68:31:7b:d8:74:e6:a8:88:57:13:6f:d6:
2a:09:54:2c:18:9d:dc:b7:be:0c:c6:29:83:84:4c:cb:b4:37:
82:23:d0:19:d0:eb:f8:54:8e:a2:a7:e2:8d:6f:f2:16:c3:96:
14:f1:63:62:62:f1:a2:69:3c:68:f8:e8:21:ef:62:f4:00:a2:
92:73:81:95:05:47:d1:e6:d5:93:ad:e5:7a:bc:ed:10:ad:58:
68:8e:ef:a1:c0:d2:e2:8c:08:4e:55:65:0f:15:7d:97:41:d7:
64:70:0e:1d:f7:09:68:f2:f4:2d:83:bf:04:8d:79:a3:05:4a:
66:59:b6:7a:91:97:2e:3c:92:24:c4:58:7f:3f:5e:c0:4c:d9:
8a:b7:d3:2f:92:b4:bf:cc:16:38:83:ea:b5:3f:fb:a0:32:43:
bf:3c:6a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:00:56 2026 by rpki-client