Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/bvJPyCtTjEYZUTPcqiqr3yGW6j4.roa
File: bvJPyCtTjEYZUTPcqiqr3yGW6j4.roa (raw, json)
Hash identifier: 6FqO+UYLHBLINnmw7pNDg8JsJ+P1NlKcV6kUgmiIj0s=
Subject key identifier: 6E:F2:4F:C8:2B:53:8C:46:19:51:33:DC:AA:2A:AB:DF:21:96:EA:3E
Certificate issuer: /CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Certificate serial: 01A0A455E484199137E9193E1F8E736CBFED
Authority key identifier: AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/bvJPyCtTjEYZUTPcqiqr3yGW6j4.roa
Signing time: Tue 15 Sep 2026 09:11:27 +0000
ROA not before: Tue 15 Sep 2026 09:11:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49164
IP address blocks: 89.36.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:04:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:55:e4:84:19:91:37:e9:19:3e:1f:8e:73:6c:bf:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af9e27ff884d1ff7f47abd0050ed10e01edcedfb
Validity
Not Before: Sep 15 09:11:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ef24fc82b538c46195133dcaa2aabdf2196ea3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:81:5b:98:3c:8c:19:fc:1c:aa:13:c7:32:e4:
9b:f0:ad:a3:a2:36:47:05:0c:f5:a4:16:31:83:00:
8a:2e:aa:f2:32:eb:7b:f8:a9:b0:cb:da:8c:e7:58:
d8:67:5a:50:79:02:bf:9b:72:d8:e2:d7:aa:bf:22:
a2:b3:fc:70:9c:49:47:cf:3d:a1:11:f0:c2:b3:6a:
d4:bb:63:08:d5:98:52:5e:d1:2e:63:f9:07:43:7b:
e8:ab:9f:46:f4:57:bd:d1:83:a3:85:04:eb:20:2f:
33:75:c8:b5:13:4d:ae:f8:16:da:bd:2c:db:ee:cc:
52:14:dc:b1:2d:a9:d0:22:45:ec:ad:02:11:e5:e6:
c6:06:3c:02:b3:d1:67:6b:1f:b0:05:4d:19:a3:aa:
90:e4:35:57:a1:0d:22:04:8a:f5:ee:51:3e:f0:98:
58:b6:3e:06:8a:d5:1a:cc:0d:f5:aa:43:d5:d1:3d:
d8:8f:3d:b7:06:66:7a:c3:81:6f:b7:da:cd:d2:03:
21:3c:f0:55:01:c5:e1:ea:52:f4:c5:b8:1f:87:e6:
22:04:80:b4:89:96:aa:4d:dd:8b:09:da:5c:58:fc:
f2:25:f7:d9:03:d4:ef:aa:d8:c8:0e:f3:67:38:27:
c4:5d:98:85:d4:00:a7:a7:4d:8c:f3:fd:30:66:d8:
96:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F2:4F:C8:2B:53:8C:46:19:51:33:DC:AA:2A:AB:DF:21:96:EA:3E
X509v3 Authority Key Identifier:
keyid:AF:9E:27:FF:88:4D:1F:F7:F4:7A:BD:00:50:ED:10:E0:1E:DC:ED:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r54n_4hNH_f0er0AUO0Q4B7c7fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/bvJPyCtTjEYZUTPcqiqr3yGW6j4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/27a42e-2765-4e6f-a7f3-d286dcb30cd2/1/r54n_4hNH_f0er0AUO0Q4B7c7fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.173.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:65:6d:0e:89:12:fd:f2:b1:be:b3:6e:e0:26:f5:be:c9:11:
f4:87:ad:cf:52:23:c4:46:02:2c:97:52:f1:02:77:23:db:e5:
ac:c5:2d:a5:b0:c7:dd:66:35:48:f1:4d:ba:c8:e2:d4:a5:5a:
89:86:e6:e0:f4:df:ed:8b:ee:7e:01:3f:3f:5a:30:f6:86:d6:
a3:53:5a:78:fc:33:dc:61:31:b0:e8:58:e2:f8:37:9f:70:c3:
50:c0:60:b3:03:3b:5b:ef:24:ec:b2:34:cd:eb:64:9d:4a:54:
54:b1:fc:80:01:a7:ad:2a:ed:d7:65:3f:4b:b6:75:c4:dd:18:
40:0c:01:ce:98:63:87:73:00:1a:ef:ec:cb:1a:b5:61:f0:80:
e5:b2:1d:51:9c:12:b9:05:0c:8c:c1:9a:36:01:e5:28:99:14:
28:a3:11:a5:46:37:01:cf:5d:76:74:bb:75:d1:23:7c:e5:35:
52:3b:a3:28:c4:66:41:f9:ad:d8:3f:ec:3d:b5:75:c1:57:44:
c6:0d:a5:fa:49:a3:f2:ec:3c:5f:d1:bc:bc:b1:d4:60:9c:45:
11:73:89:c4:d6:19:6f:5d:08:8a:79:47:e3:c8:ba:65:4a:fc:
51:44:20:91:90:75:db:f7:ca:08:ac:f4:f1:92:cc:80:b9:4e:
fe:41:4b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:15:01 2026 by rpki-client