Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/BGFFjh7coTEWcsQtXicDFITHmkA.roa
File: BGFFjh7coTEWcsQtXicDFITHmkA.roa (raw, json)
Hash identifier: mr6J2J3xXh2AjaUmsWbKAE3UVEbUEKqp2dv4NTkBEdk=
Subject key identifier: 04:61:45:8E:1E:DC:A1:31:16:72:C4:2D:5E:27:03:14:84:C7:9A:40
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019C2466EC11F86637AAD4B5B4AF76C2970C
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/BGFFjh7coTEWcsQtXicDFITHmkA.roa
Signing time: Tue 03 Feb 2026 16:47:30 +0000
ROA not before: Tue 03 Feb 2026 16:47:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201907
IP address blocks: 45.8.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:24:66:ec:11:f8:66:37:aa:d4:b5:b4:af:76:c2:97:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Feb 3 16:47:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0461458e1edca1311672c42d5e27031484c79a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ce:a9:57:9d:8f:66:df:1f:d8:73:2a:5d:55:
08:04:d7:1d:be:33:54:13:75:c5:96:cb:a1:59:94:
21:3e:55:62:2f:41:9a:f9:dd:fa:67:e4:c6:8d:0c:
ea:f9:b4:c0:ed:13:93:d8:33:92:21:4e:fb:40:69:
dc:90:d9:ca:f3:2c:80:07:d3:99:a8:b3:9a:6e:80:
6f:a2:31:ee:dc:7a:1a:c1:fa:43:a4:36:5d:11:86:
60:72:60:bc:5f:1e:bd:14:39:f4:57:37:40:fc:bb:
fe:0d:be:4c:c4:3a:f1:21:26:da:1a:4c:45:1a:d1:
1c:5b:9f:88:b0:d9:c5:8c:c6:c2:e3:c1:da:1f:2f:
12:3a:12:05:ee:dc:46:81:4a:c4:37:bc:49:5b:69:
fd:e0:12:f5:52:65:2d:ed:90:f8:c8:84:7a:a7:00:
04:de:7c:c4:28:3a:e8:7b:7b:2e:7a:11:24:24:f7:
73:6d:5a:04:54:2a:37:7d:fd:bc:2f:ba:de:60:3c:
30:ac:5e:19:18:79:17:83:0e:a3:ee:b6:b4:8a:75:
d4:f3:6e:c8:96:60:60:ad:44:1a:33:30:ed:39:e4:
8c:9b:f3:9e:84:c0:9f:74:b7:a0:8d:1f:8e:89:33:
89:22:76:a7:09:6b:ba:47:99:8e:e1:9e:ef:12:27:
10:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:61:45:8E:1E:DC:A1:31:16:72:C4:2D:5E:27:03:14:84:C7:9A:40
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/BGFFjh7coTEWcsQtXicDFITHmkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.253.0/24
Signature Algorithm: sha256WithRSAEncryption
90:82:22:16:4e:c1:4a:80:e2:35:c5:d1:94:4d:5c:26:c1:93:
32:52:d4:ed:0f:e5:38:7d:97:65:d9:88:a5:4c:45:75:2b:65:
7a:1d:e4:19:da:e5:d5:94:12:44:f1:47:6d:dd:1a:a9:eb:96:
94:eb:69:4b:26:7d:66:95:9f:68:99:c3:08:33:53:5c:37:a0:
23:89:34:83:3e:1f:c1:de:31:51:52:08:b1:33:b4:b1:99:15:
35:62:d4:83:87:a9:c3:5c:e3:b0:7a:25:d5:d6:33:18:0b:83:
37:39:cc:01:ee:cc:55:cd:34:13:9a:b9:ca:46:fc:6f:be:2b:
60:90:dc:e5:ec:e5:5e:40:f8:d9:08:5b:31:1a:20:26:31:8a:
e3:6c:e9:26:38:ce:7f:ac:20:bd:ee:6d:cc:45:57:1f:4b:88:
6e:1e:c3:ae:71:aa:47:c0:a3:e8:50:6e:6f:04:d5:2e:db:3e:
dc:59:27:f6:f2:90:38:39:4e:0c:e5:07:e9:bd:9a:bf:f0:2a:
2c:54:ee:81:c4:69:7f:c2:90:a8:bc:b8:30:cb:59:fc:39:20:
88:17:68:86:66:b1:ab:85:22:fc:35:a7:11:df:e2:43:78:2b:
f9:e0:39:3d:4d:0b:3f:84:a0:a6:86:1c:db:f2:07:22:25:31:
b4:31:29:cb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZwkZuwR+GY3qtS1tK92wpcMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjYwMjAzMTY0NzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDYxNDU4ZTFlZGNhMTMxMTY3MmM0MmQ1ZTI3MDMxNDg0Yzc5YTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzM6pV52PZt8f2HMqXVUIBNcdvjNU
E3XFlsuhWZQhPlViL0Ga+d36Z+TGjQzq+bTA7ROT2DOSIU77QGnckNnK8yyAB9OZ
qLOaboBvojHu3HoawfpDpDZdEYZgcmC8Xx69FDn0VzdA/Lv+Db5MxDrxISbaGkxF
GtEcW5+IsNnFjMbC48HaHy8SOhIF7txGgUrEN7xJW2n94BL1UmUt7ZD4yIR6pwAE
3nzEKDroe3suehEkJPdzbVoEVCo3ff28L7reYDwwrF4ZGHkXgw6j7ra0inXU827I
lmBgrUQaMzDtOeSMm/OehMCfdLegjR+OiTOJInanCWu6R5mO4Z7vEicQSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFARhRY4e3KExFnLELV4nAxSEx5pAMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvQkdGRmpoN2NvVEVXY3NRdFhpY0RGSVRIbWtBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQj9MA0G
CSqGSIb3DQEBCwUAA4IBAQCQgiIWTsFKgOI1xdGUTVwmwZMyUtTtD+U4fZdl2Yil
TEV1K2V6HeQZ2uXVlBJE8Udt3Rqp65aU62lLJn1mlZ9omcMIM1NcN6AjiTSDPh/B
3jFRUgixM7SxmRU1YtSDh6nDXOOweiXV1jMYC4M3OcwB7sxVzTQTmrnKRvxvvitg
kNzl7OVeQPjZCFsxGiAmMYrjbOkmOM5/rCC97m3MRVcfS4huHsOucapHwKPoUG5v
BNUu2z7cWSf28pA4OU4M5QfpvZq/8CosVO6BxGl/wpCovLgwy1n8OSCIF2iGZrGr
hSL8NacR3+JDeCv54Dk9TQs/hKCmhhzb8gciJTG0MSnL
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:32:18 2026 by rpki-client