Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/bp_iq4J9cL_cpU-29LOH-txjuig.roa
File: bp_iq4J9cL_cpU-29LOH-txjuig.roa (raw, json)
Hash identifier: +KcqhLz3unQeYQALgcY6AZLu3hapz+IPoXS4X7cOlCs=
Subject key identifier: 6E:9F:E2:AB:82:7D:70:BF:DC:A5:4F:B6:F4:B3:87:FA:DC:63:BA:28
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01A0A064FC077BAEC81E9918DE0A627CD2C0
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/bp_iq4J9cL_cpU-29LOH-txjuig.roa
Signing time: Mon 14 Sep 2026 14:49:27 +0000
ROA not before: Mon 14 Sep 2026 14:49:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197309
IP address blocks: 194.93.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a0:64:fc:07:7b:ae:c8:1e:99:18:de:0a:62:7c:d2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Sep 14 14:49:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e9fe2ab827d70bfdca54fb6f4b387fadc63ba28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d2:ba:aa:01:dc:70:dd:da:37:f2:51:3b:b3:
ca:02:30:4f:4e:fe:fa:3a:a6:5d:69:b8:66:4b:d9:
09:70:4a:db:f0:a5:9b:86:58:70:97:b8:ce:45:5f:
6a:61:05:04:b6:27:0e:da:f7:3c:1b:0d:1a:ce:27:
bd:02:6d:fa:f0:65:aa:08:67:c4:8b:88:2e:c1:b9:
fc:3a:ad:c8:bf:91:8f:7b:46:c1:39:44:aa:53:f8:
10:f9:8e:10:3a:7d:28:43:58:96:04:f9:cf:d4:27:
43:74:2a:f7:4b:ed:5b:38:9d:da:56:10:b5:13:76:
ae:8f:16:65:ce:00:61:53:13:5d:69:27:1e:e0:ae:
23:69:c7:6b:40:3b:15:87:c5:71:1d:16:79:30:27:
09:25:1c:ae:d0:a2:28:3f:ba:29:76:1e:37:97:91:
bc:81:19:f3:3a:66:13:9b:61:6f:22:e3:ad:bc:78:
f4:47:5d:81:0c:6b:c5:e5:be:33:87:61:db:69:08:
61:3b:31:de:c2:5f:35:f4:5b:15:07:f3:f1:f7:2e:
85:ed:35:e4:91:6a:d9:f1:fd:37:63:cb:ab:dc:2e:
1e:06:08:e2:b3:91:12:3b:00:5a:a2:fd:64:1a:ea:
fc:9b:18:9b:36:60:20:13:88:60:2d:06:75:76:86:
ba:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:9F:E2:AB:82:7D:70:BF:DC:A5:4F:B6:F4:B3:87:FA:DC:63:BA:28
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/bp_iq4J9cL_cpU-29LOH-txjuig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.93.2.0/24
Signature Algorithm: sha256WithRSAEncryption
62:bc:0f:dd:92:6d:00:4b:33:1c:1e:0b:ef:54:68:55:6f:b0:
f5:39:63:38:cc:66:30:95:71:a2:e8:83:81:29:0a:04:0e:28:
69:8c:fa:89:c9:f4:c7:38:56:c6:ce:7c:c3:f5:ea:40:b6:5f:
03:d7:82:b1:06:c9:39:e6:08:30:02:29:d7:a3:fd:e9:47:52:
65:be:1e:fc:1f:31:77:c3:53:7e:88:ca:f2:5f:21:5b:94:55:
96:f3:19:dd:80:c7:3c:fa:65:02:3a:6f:5c:a1:80:17:6c:15:
1e:32:62:64:28:e9:de:36:cd:4e:ad:03:c5:87:1b:37:27:13:
b4:2c:c4:97:f8:24:fc:47:31:87:e8:28:c3:10:6c:b7:5a:d2:
39:bf:52:e8:1e:30:cf:77:5c:e5:7e:36:04:19:8e:21:f4:ae:
d7:d5:23:11:ab:e9:94:3d:6a:7d:45:01:6f:b5:f8:d0:64:f1:
bf:0f:b2:d9:e0:22:eb:93:fd:87:35:bc:fd:4c:46:d4:57:0a:
f3:9f:de:a6:28:7c:f9:a4:a9:da:8b:3a:49:fc:61:84:82:0e:
7b:8c:c2:2f:f3:fb:4f:89:8a:44:3b:a5:4c:92:cd:c9:25:3d:
f1:1a:ad:de:ff:3f:a8:89:a5:a2:c7:97:ca:d4:d5:8e:23:f5:
42:68:ec:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:52:47 2026 by rpki-client