Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/Bl_J51ealE87PBDrcx3y2abYz_M.roa
File: Bl_J51ealE87PBDrcx3y2abYz_M.roa (raw, json)
Hash identifier: skpARlMkvLIJ9aXgoSnFArnzouHAgMx1Cjvtifcnmuo=
Subject key identifier: 06:5F:C9:E7:57:9A:94:4F:3B:3C:10:EB:73:1D:F2:D9:A6:D8:CF:F3
Certificate issuer: /CN=a12e24143ccac6fe75935cc11742259e7ff8598b
Certificate serial: 019C86F7163A1D582F78F91E4D4BFBB8F647
Authority key identifier: A1:2E:24:14:3C:CA:C6:FE:75:93:5C:C1:17:42:25:9E:7F:F8:59:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oS4kFDzKxv51k1zBF0Ilnn_4WYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/Bl_J51ealE87PBDrcx3y2abYz_M.roa
Signing time: Sun 22 Feb 2026 20:07:45 +0000
ROA not before: Sun 22 Feb 2026 20:07:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49127
IP address blocks: 193.189.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/oS4kFDzKxv51k1zBF0Ilnn_4WYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:86:f7:16:3a:1d:58:2f:78:f9:1e:4d:4b:fb:b8:f6:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a12e24143ccac6fe75935cc11742259e7ff8598b
Validity
Not Before: Feb 22 20:07:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=065fc9e7579a944f3b3c10eb731df2d9a6d8cff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1e:4e:32:c2:38:d9:88:b9:44:1d:2f:c8:64:
b4:b7:f1:3b:fb:20:ce:43:05:14:e1:ed:2d:65:a5:
74:11:37:a8:0b:9c:6b:5c:5f:fd:47:7c:2e:50:61:
c4:e6:8c:d1:f6:1d:9b:a0:f7:aa:7a:66:9a:2d:ce:
e1:15:95:47:37:55:c1:4e:74:ca:89:39:19:b5:dc:
ba:13:57:49:99:14:76:56:98:a4:79:e3:3e:45:4d:
44:2e:53:2e:ed:cb:ba:b3:f9:f5:ce:af:de:da:95:
15:2c:e5:3f:e3:c8:8c:b4:b6:c9:cb:61:51:d9:1e:
81:4e:47:64:c4:91:fc:03:02:6b:7c:48:31:7d:75:
f4:1b:de:c5:8c:29:30:4d:86:59:19:81:71:ba:a1:
54:cf:bd:16:a2:17:4b:73:3b:3a:4e:8a:45:44:58:
ae:2c:42:37:75:f3:71:d9:9d:b3:89:59:c8:e0:f6:
a3:e5:83:d4:3a:c8:7f:6c:51:39:4f:3a:5f:2c:42:
45:8e:2e:8d:f5:54:5c:05:a3:55:06:5f:4e:c8:84:
c8:52:77:51:f6:cd:39:f8:d5:90:2c:da:eb:ec:e8:
54:db:68:70:f4:b9:a3:fe:e7:d3:65:34:dc:dd:e9:
87:bb:b3:90:bc:57:88:7b:bc:21:51:eb:2e:37:3e:
1a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5F:C9:E7:57:9A:94:4F:3B:3C:10:EB:73:1D:F2:D9:A6:D8:CF:F3
X509v3 Authority Key Identifier:
keyid:A1:2E:24:14:3C:CA:C6:FE:75:93:5C:C1:17:42:25:9E:7F:F8:59:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oS4kFDzKxv51k1zBF0Ilnn_4WYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/Bl_J51ealE87PBDrcx3y2abYz_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a7d981-c62d-41f9-8986-f46d243643f4/1/oS4kFDzKxv51k1zBF0Ilnn_4WYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.189.141.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:2c:d7:8b:e4:01:fb:aa:0c:eb:c0:5c:b1:32:97:9b:b7:de:
5e:68:90:c0:d0:4a:0e:a4:0b:fc:93:41:4e:b5:77:89:33:a8:
20:c4:db:72:89:14:f6:86:fa:a9:f0:68:1e:1f:e1:33:b0:bb:
bd:4f:fd:6b:64:08:59:a9:84:3f:50:91:1e:09:6a:24:1f:8d:
11:c9:c1:02:0f:b9:9d:84:25:8c:8d:6b:f5:45:61:82:e6:5c:
f2:b9:88:f7:92:8d:d8:19:17:fa:73:a6:2a:06:5f:3b:31:62:
0d:1e:e2:a1:3b:6b:ad:8a:2d:3a:9c:b0:9f:db:29:92:fc:8a:
5f:c9:97:ac:6e:89:8c:9e:ba:71:74:92:bd:1e:06:da:77:9b:
e2:34:b9:4f:e3:42:39:0e:c9:4e:81:ac:cd:43:a2:b2:53:37:
c7:9c:1b:1e:f6:e4:28:78:90:03:c2:9f:eb:92:9c:a9:eb:ad:
d3:95:4c:1f:5c:66:71:4a:fa:89:a0:50:0f:40:b7:8c:4a:88:
a2:3b:21:ba:04:12:36:be:f9:46:cc:12:55:3d:25:cf:f3:2f:
fa:aa:03:e2:c4:80:62:aa:ee:47:96:31:e7:10:77:4e:ec:96:
6e:52:f3:6e:60:3c:5e:91:8a:e1:99:9a:07:39:f5:c0:0f:ce:
a2:ed:e7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:46:02 2026 by rpki-client