Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/Bl_BjhvxqT0Mif6aMxcEFNXISZM.roa
File: Bl_BjhvxqT0Mif6aMxcEFNXISZM.roa (raw, json)
Hash identifier: kEZA3HWXo+axDXRIJx2Qo5x0RmJdyCm6aj/hJrouWz4=
Subject key identifier: 06:5F:C1:8E:1B:F1:A9:3D:0C:89:FE:9A:33:17:04:14:D5:C8:49:93
Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d
Certificate serial: 019D2F4B9CD87E721E4F7986EE8D07659AA7
Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/Bl_BjhvxqT0Mif6aMxcEFNXISZM.roa
Signing time: Fri 27 Mar 2026 12:36:17 +0000
ROA not before: Fri 27 Mar 2026 12:36:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216334
IP address blocks: 94.159.115.0/24 maxlen: 24
94.159.116.0/24 maxlen: 24
94.159.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2f:4b:9c:d8:7e:72:1e:4f:79:86:ee:8d:07:65:9a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d
Validity
Not Before: Mar 27 12:36:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=065fc18e1bf1a93d0c89fe9a33170414d5c84993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3f:f6:5d:5f:43:f5:77:f0:39:84:f3:6b:8e:
de:b2:99:8c:d0:4f:b1:6b:11:c6:0b:4d:31:b2:35:
80:d8:80:67:9a:c9:55:ae:3e:82:fb:7e:45:72:97:
a9:25:72:b1:12:19:0d:97:7a:a3:bf:a5:a7:f2:d3:
6a:23:6d:b9:d4:8c:de:e3:01:9c:e4:fb:fd:99:fc:
30:44:71:d8:54:28:0a:e8:0e:1e:8f:0f:1e:4c:a1:
99:a7:5d:ad:80:a8:09:aa:4c:ca:a1:bf:52:a2:4d:
d4:aa:ab:7b:79:f8:e5:0f:db:f3:2f:50:9e:77:c9:
f0:4a:3b:b9:56:02:c2:5f:58:e3:bc:88:b4:3b:42:
12:dd:e6:74:6b:14:7e:55:50:d7:93:99:38:93:35:
8c:08:ed:46:ad:3b:06:b8:d3:8b:2a:52:4c:c9:6a:
58:e6:c3:71:4e:a4:d1:84:1b:f6:97:70:4e:cf:d6:
d7:89:6c:c9:1c:31:dc:66:d8:a1:be:ff:66:7c:94:
f6:be:05:df:5a:22:c9:25:38:42:86:f6:b8:ff:8b:
3d:99:e9:9c:63:61:13:08:3c:92:eb:a5:0f:18:cb:
0e:4f:7b:8f:f0:f4:6e:29:f9:d4:d1:70:ef:05:4b:
62:11:0d:49:0e:c7:33:c7:b8:32:e1:f3:c5:dd:f2:
5f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5F:C1:8E:1B:F1:A9:3D:0C:89:FE:9A:33:17:04:14:D5:C8:49:93
X509v3 Authority Key Identifier:
keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/Bl_BjhvxqT0Mif6aMxcEFNXISZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.159.115.0-94.159.117.255
Signature Algorithm: sha256WithRSAEncryption
c5:20:8b:cb:53:bd:a7:e1:86:43:7a:a1:5a:86:50:7b:16:fe:
c7:18:5b:16:64:43:fd:30:81:7c:dc:5b:6b:e0:16:26:fb:a5:
52:f6:43:b5:ff:4c:a4:68:52:65:3d:1a:cb:f3:40:37:9d:37:
cb:16:5d:55:c0:3f:a4:fd:2c:ec:04:8b:81:2f:53:14:67:dd:
1f:57:2f:51:21:ea:fc:09:7b:a8:5c:b1:e6:bc:ae:33:9e:08:
4d:30:b4:d6:1f:df:b7:97:d9:de:87:b0:bd:e9:7a:c4:3a:75:
2f:a4:09:6e:dc:62:fc:27:b7:1f:6c:33:7c:b9:6a:6c:86:7c:
7b:8a:09:58:8a:fd:5d:a6:eb:d0:8d:b5:65:58:5c:a5:74:fa:
fd:1e:66:6e:31:d0:0d:a7:1b:8b:41:00:99:7b:d6:cb:f2:38:
bb:8f:06:ef:bf:39:a0:1e:3f:4a:1e:ff:64:38:23:c3:ba:8c:
6e:4e:a8:fd:7b:87:22:fe:18:20:7a:de:52:78:90:89:33:df:
ba:0e:d5:19:90:c6:13:a6:fc:7e:d9:08:d4:f4:c1:06:ba:98:
a9:0e:e9:3d:b7:74:2d:88:e8:bb:78:9a:47:f5:8f:e4:a9:5a:
ba:84:df:2a:22:a6:9b:57:60:1b:3f:81:8a:66:79:df:25:ba:
51:2a:8b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:14:32 2026 by rpki-client