Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BccvOb5tz2ziFEK85ZOpWUCZhZk.roa
File: BccvOb5tz2ziFEK85ZOpWUCZhZk.roa (raw, json)
Hash identifier: FnA1RabC7GLAVqBqv4NkvPpvO4WhD2fmQEx4Eoys9zY=
Subject key identifier: 05:C7:2F:39:BE:6D:CF:6C:E2:14:42:BC:E5:93:A9:59:40:99:85:99
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 019D90F79E38362D38815E529B2FB989DBB2
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BccvOb5tz2ziFEK85ZOpWUCZhZk.roa
Signing time: Wed 15 Apr 2026 11:47:20 +0000
ROA not before: Wed 15 Apr 2026 11:47:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39238
IP address blocks: 194.28.193.0/24 maxlen: 24
194.187.120.0/24 maxlen: 24
217.171.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:90:f7:9e:38:36:2d:38:81:5e:52:9b:2f:b9:89:db:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Apr 15 11:47:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05c72f39be6dcf6ce21442bce593a95940998599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b0:b7:93:cc:dc:c7:49:2b:23:f2:ab:2e:ee:
33:98:cb:6f:c9:59:cb:e5:6a:8c:24:61:85:36:08:
28:b7:6d:e4:c6:8a:a7:c7:01:d1:3b:5d:2f:21:dd:
fc:96:33:02:72:34:60:6e:89:a8:b1:71:37:41:fb:
d7:04:64:42:1a:38:aa:cf:28:5f:8a:b4:2e:e3:70:
5c:28:82:a1:ac:3d:09:c6:2f:84:ce:29:13:43:4e:
21:43:fc:4f:81:45:82:65:16:a0:c9:9a:c1:bd:05:
eb:40:3c:bc:d7:19:0b:75:f3:a8:b6:ca:2c:2d:dd:
a5:fc:34:f4:13:76:6d:3f:61:98:ef:c3:04:c6:ed:
07:4c:3c:13:2d:6f:78:84:11:4e:a7:ab:44:31:b3:
e4:90:1d:8b:99:00:cc:6b:f8:53:70:89:3a:01:46:
6b:9d:71:8f:aa:34:5f:a3:7f:0e:da:48:37:8a:87:
74:27:98:97:99:ea:bd:fe:65:e0:4a:88:7c:86:0a:
21:12:3a:b3:3f:4a:b7:d1:33:0f:00:9a:a6:f1:52:
7f:1c:ec:e3:79:eb:00:6f:b7:5f:c6:14:32:26:a0:
53:fc:33:80:9f:ea:42:b3:7b:dc:f0:6a:86:a5:42:
1b:f2:65:4f:61:e8:26:43:4e:69:52:04:a7:bd:e7:
6f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C7:2F:39:BE:6D:CF:6C:E2:14:42:BC:E5:93:A9:59:40:99:85:99
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BccvOb5tz2ziFEK85ZOpWUCZhZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.193.0/24
194.187.120.0/24
217.171.147.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:f3:93:06:5d:a5:39:eb:27:f9:22:0e:ae:de:fa:49:11:73:
b9:d9:90:02:98:61:7f:ba:61:59:56:91:d9:05:8b:10:c9:1d:
f9:1c:ab:e7:ce:91:79:cb:dd:c4:98:93:be:d4:17:ca:ae:7e:
f7:99:28:5a:cb:06:6a:5e:5e:c8:70:b9:e1:22:19:30:a0:12:
80:31:a5:e1:36:de:13:f4:85:00:f1:85:d9:c9:5b:86:f2:af:
4d:ed:7e:7e:89:ba:b6:04:12:5c:ea:b8:2b:da:d2:ac:3e:62:
83:41:74:26:de:6b:3e:0e:9a:aa:a1:d7:e5:fc:a9:18:ce:a0:
bf:d1:61:ee:60:2b:c0:9b:f2:1e:7b:a1:90:42:3a:11:3c:98:
d0:01:7c:00:ab:17:c9:f3:65:4a:bc:43:32:e8:b9:60:35:f3:
ef:68:24:3b:46:d1:27:a9:22:3a:71:35:cd:c5:87:28:26:28:
e7:47:74:21:68:55:8d:e2:0c:58:86:12:6f:44:7a:7f:7f:26:
e1:a8:33:63:2e:db:52:42:3c:89:f0:80:2b:28:99:4e:ff:ed:
57:8b:5e:03:3b:75:7a:72:22:b8:de:b4:a5:25:da:6a:a1:1a:
fd:ae:bd:a4:9e:57:0c:06:eb:14:1c:0a:6a:6a:10:86:6f:64:
c9:de:6b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:51:28 2026 by rpki-client