Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/BQzymyZLvxTUch9fvKJ3EGNVw5U.roa
File: BQzymyZLvxTUch9fvKJ3EGNVw5U.roa (raw, json)
Hash identifier: o4VQyQ/5hNgPq9pbItRTuFIwFuwCgQ1MStnM4+ksfcg=
Subject key identifier: 05:0C:F2:9B:26:4B:BF:14:D4:72:1F:5F:BC:A2:77:10:63:55:C3:95
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019C85412E3F37098802F6FA7DA0535E55D7
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/BQzymyZLvxTUch9fvKJ3EGNVw5U.roa
Signing time: Sun 22 Feb 2026 12:09:27 +0000
ROA not before: Sun 22 Feb 2026 12:09:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215826
IP address blocks: 194.33.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:85:41:2e:3f:37:09:88:02:f6:fa:7d:a0:53:5e:55:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 22 12:09:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=050cf29b264bbf14d4721f5fbca277106355c395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:22:83:37:77:76:fa:ee:6f:c2:2d:d2:37:3a:
89:bf:4b:c2:8e:dc:b9:14:c7:6f:ec:b4:c7:26:06:
f3:31:ab:25:eb:66:c0:3b:a2:c5:78:17:ad:4a:6d:
c0:21:c0:19:67:e6:8c:37:43:71:1d:f3:28:59:88:
6c:38:7f:77:1a:69:bd:f5:65:6f:a5:f6:cf:b6:4c:
40:aa:d5:ce:fc:fd:9c:be:16:7d:30:64:0c:72:d2:
e5:d8:45:d8:ce:9a:b2:24:3d:30:fb:23:07:5e:14:
8b:9f:5d:71:59:f3:0b:61:d4:1c:89:07:54:3a:72:
21:f1:e4:c6:d1:83:28:9b:4b:9b:90:ae:85:4e:b2:
bf:24:8e:5e:2a:9e:ec:21:d9:e3:cf:28:6d:9f:c4:
68:b7:14:b9:c3:66:28:1d:6f:b4:39:cd:27:92:81:
33:8c:33:28:2a:e8:7a:6f:55:3c:79:0b:19:58:6c:
57:a3:c1:10:24:90:d0:f3:b2:59:ea:01:1f:30:59:
a8:c1:fc:27:78:3e:74:7b:1d:42:17:28:39:9f:2e:
90:da:df:06:22:55:03:62:b8:56:67:ca:26:29:24:
05:5a:7a:10:92:1e:16:df:86:f0:ca:56:58:7f:6a:
da:19:b8:01:65:b7:4d:5b:6f:6d:91:d2:cc:89:01:
9d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:0C:F2:9B:26:4B:BF:14:D4:72:1F:5F:BC:A2:77:10:63:55:C3:95
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/BQzymyZLvxTUch9fvKJ3EGNVw5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.61.0/24
Signature Algorithm: sha256WithRSAEncryption
62:46:68:51:fc:1a:34:fd:18:34:ab:bb:96:af:2e:2a:46:a8:
5b:6f:d2:95:1d:ca:b3:c2:41:a5:10:42:7c:64:17:f4:1b:46:
82:04:fa:0d:4d:84:15:a7:ee:37:f6:c6:0c:bc:9e:d3:a8:1a:
34:7a:6c:61:b5:f5:da:0b:41:ec:1f:ae:e7:1c:d4:e6:f0:bd:
7b:1c:e9:01:65:98:ea:a8:0e:8c:04:bd:d5:82:d9:a0:23:c8:
93:83:0f:78:7c:99:6b:34:0a:84:97:cd:9d:5a:f4:08:a7:a5:
1c:60:e2:f4:db:8b:cf:93:b2:55:0f:ca:6b:41:77:3a:d5:96:
92:21:b8:a1:3c:f5:2c:38:ba:84:ef:6c:4e:a5:9c:38:af:c8:
49:9b:d7:c5:7e:f9:df:19:5a:08:17:a7:8c:38:07:4e:b3:e3:
30:65:49:1d:b5:ca:c8:2c:5a:28:ac:5d:4b:13:dd:fb:25:37:
ae:bc:2a:42:13:86:9a:0c:be:e9:c8:1a:a5:41:32:f7:f0:ce:
74:d2:a4:af:48:1a:86:7d:91:00:2c:ee:6a:05:51:fc:d6:2c:
b8:b4:2e:89:d7:5c:8b:0e:8a:d8:0a:d7:11:ac:47:a1:98:9b:
b3:17:af:24:e6:ed:dd:4d:47:5c:1c:ba:a7:32:31:6e:7a:71:
3e:7d:e3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:51:12 2026 by rpki-client