Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/BvHi-9W8GTD7LuR4KI3K7NccH7M.roa
File: BvHi-9W8GTD7LuR4KI3K7NccH7M.roa (raw, json)
Hash identifier: zHRB/Mgz4Rp30xaIRw2vIwtiSLy6piaCCU+qGs3mVdE=
Subject key identifier: 06:F1:E2:FB:D5:BC:19:30:FB:2E:E4:78:28:8D:CA:EC:D7:1C:1F:B3
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019EB5BEF6C0090198A94E9600C8AB1CD8AA
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/BvHi-9W8GTD7LuR4KI3K7NccH7M.roa
Signing time: Thu 11 Jun 2026 08:14:11 +0000
ROA not before: Thu 11 Jun 2026 08:14:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219472
IP address blocks: 45.11.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:be:f6:c0:09:01:98:a9:4e:96:00:c8:ab:1c:d8:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Jun 11 08:14:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06f1e2fbd5bc1930fb2ee478288dcaecd71c1fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0b:02:5b:99:da:d4:c5:f2:72:e5:e8:96:9d:
39:35:c2:d5:f8:95:f5:8b:da:e1:38:06:04:59:6e:
cf:d8:e3:7d:42:e3:e8:ff:52:24:5c:e4:80:de:c2:
e5:19:b3:63:37:af:4e:30:ba:6b:ae:d5:fd:ab:40:
bb:31:91:7a:95:d3:27:aa:c2:e5:fa:58:28:be:47:
ca:c1:3c:04:73:21:c0:db:cd:f6:59:2f:b6:42:71:
4e:9b:88:1f:43:05:eb:c3:ef:04:06:31:a9:6a:71:
56:a8:e5:a6:d7:9e:30:f0:d2:6b:4d:7e:a6:c8:49:
d9:b8:3c:5f:02:8b:6e:34:a8:09:61:a7:e5:ca:33:
c8:dd:f6:9d:1d:22:a2:2e:4d:7e:59:7c:ab:65:8b:
bb:f7:f6:23:30:e5:c4:95:76:cd:c2:7c:6c:2a:2f:
4e:85:a2:7e:68:87:00:eb:7a:03:93:49:5e:21:68:
45:b6:2c:12:7f:74:73:7f:f1:35:4a:00:67:da:9c:
53:5e:4b:28:ec:09:ef:b7:67:59:e2:c8:e6:16:17:
66:db:33:34:a0:9f:d4:f3:b9:eb:00:bf:3b:2b:e5:
d9:4c:f6:16:ff:fc:f2:e3:49:33:fb:a9:4d:48:6f:
ba:da:9c:95:71:1f:b5:f9:d4:6c:fa:83:18:87:e4:
39:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F1:E2:FB:D5:BC:19:30:FB:2E:E4:78:28:8D:CA:EC:D7:1C:1F:B3
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/BvHi-9W8GTD7LuR4KI3K7NccH7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.184.0/24
Signature Algorithm: sha256WithRSAEncryption
97:c2:fe:fa:de:53:f3:b6:37:71:6d:fa:1e:3f:b7:9b:15:55:
4d:85:2c:47:2b:c6:6b:52:e4:19:8f:99:18:f6:6c:dd:d7:1f:
96:f6:ed:f6:a3:76:c9:46:72:ea:d8:94:32:2e:51:fc:12:eb:
2d:2e:8d:9b:85:07:a0:f0:ae:71:f8:41:bf:cc:33:f8:d7:44:
eb:71:7d:3d:28:eb:25:3e:4d:a2:a9:fe:ee:49:1f:3c:e7:2e:
50:ed:49:8a:cf:e2:4e:6e:64:2d:4c:18:d2:8b:61:7e:e0:0f:
89:ef:fd:ce:f3:42:06:2b:35:68:35:5d:e2:7b:d4:38:9e:36:
ca:c5:15:03:01:d0:84:ef:bb:7d:51:41:3f:b3:b4:60:86:f7:
f4:df:31:1f:77:92:68:a0:18:2a:6f:89:ec:41:3e:a7:64:2c:
df:e2:f5:84:7c:fa:9b:cb:6c:8c:97:20:bb:4f:9a:c4:9b:75:
25:01:6e:6c:dd:e1:b1:0b:2e:7d:aa:49:d7:70:55:de:dd:40:
19:37:36:ad:95:5c:16:d6:52:3d:e4:19:15:36:26:25:eb:fe:
53:20:c2:47:52:62:fa:0c:bf:48:83:d5:2f:af:8c:45:04:fd:
09:d9:c5:0e:5a:d6:e3:c1:43:28:73:ec:0c:b6:f9:91:73:6d:
05:bc:38:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:05:28 2026 by rpki-client