Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/bZGmBUJyBwx1sWA4_0env9myjwE.roa
File: bZGmBUJyBwx1sWA4_0env9myjwE.roa (raw, json)
Hash identifier: 4tsqiBWMFE9lEeiy6ibqGVOqXOKllflXzZwV282QLH8=
Subject key identifier: 6D:91:A6:05:42:72:07:0C:75:B1:60:38:FF:47:A7:BF:D9:B2:8F:01
Certificate issuer: /CN=883f7260650026b973a18a7f3e9958d321ece1db
Certificate serial: 019C93C6372A65EA32036E7DBCF397E8E27E
Authority key identifier: 88:3F:72:60:65:00:26:B9:73:A1:8A:7F:3E:99:58:D3:21:EC:E1:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/bZGmBUJyBwx1sWA4_0env9myjwE.roa
Signing time: Wed 25 Feb 2026 07:49:26 +0000
ROA not before: Wed 25 Feb 2026 07:49:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48314
IP address blocks: 195.211.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:93:c6:37:2a:65:ea:32:03:6e:7d:bc:f3:97:e8:e2:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=883f7260650026b973a18a7f3e9958d321ece1db
Validity
Not Before: Feb 25 07:49:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d91a6054272070c75b16038ff47a7bfd9b28f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ff:f7:17:15:1c:3e:34:90:6f:83:18:ff:ab:
b1:43:66:40:48:66:21:14:0e:4d:be:cf:34:79:53:
8d:64:fd:2f:85:e0:56:42:e1:d6:58:fa:c3:ca:2f:
10:c7:01:69:00:ce:79:28:8f:c6:99:a6:24:24:48:
94:2e:77:9e:b9:2a:16:b5:d7:53:26:b8:97:fe:59:
05:3a:51:b9:ad:41:bd:5a:5b:71:3c:d0:2e:18:07:
2e:44:c4:5e:ad:0c:3f:17:da:a8:25:ae:0a:96:04:
cb:e4:88:b9:c4:04:fd:e8:5b:2c:60:bf:7f:a9:3f:
1d:8d:06:98:aa:bf:26:ea:4d:b2:d6:a1:19:ac:07:
d1:dd:f9:4e:ff:a9:8a:0e:b7:d7:2d:2d:f0:32:6d:
fa:1c:ac:c6:04:08:30:a4:60:d9:92:1a:b9:25:53:
b7:35:31:fe:7b:1b:67:45:ce:8a:e2:81:5b:0d:d8:
5a:d2:52:4b:d9:28:04:4e:b2:06:9e:b6:12:52:94:
14:9c:58:07:a9:83:67:ec:9d:4e:a0:16:9f:c6:f2:
61:bb:d4:18:53:83:3a:d8:17:53:ce:ea:56:d8:da:
a4:b2:e9:da:aa:ec:e2:8e:ca:65:ed:70:bc:d9:c3:
d9:f4:6e:3d:da:91:b1:fe:cb:61:dc:0e:fd:f3:c5:
99:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:91:A6:05:42:72:07:0C:75:B1:60:38:FF:47:A7:BF:D9:B2:8F:01
X509v3 Authority Key Identifier:
keyid:88:3F:72:60:65:00:26:B9:73:A1:8A:7F:3E:99:58:D3:21:EC:E1:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/bZGmBUJyBwx1sWA4_0env9myjwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.211.71.0/24
Signature Algorithm: sha256WithRSAEncryption
20:90:68:6c:30:91:a6:8a:6c:79:5d:5f:f5:a1:71:74:7d:77:
25:86:95:57:1b:8a:42:a8:0e:ea:15:23:68:4d:40:f2:64:a4:
05:05:6f:3e:4d:f2:a1:5a:b2:62:82:dc:23:69:eb:29:3f:a0:
f7:2b:75:ea:68:45:6c:38:85:5d:b4:5f:b9:02:6e:fb:bf:4d:
01:e1:fe:4b:8a:01:8e:5f:bb:13:b9:96:c8:ea:9a:9c:98:c7:
72:f6:4f:fd:31:f0:8d:19:ac:b5:72:4b:5e:49:a5:04:e6:bd:
05:f6:61:c2:32:f3:94:47:51:e1:09:b0:5b:22:cb:2b:de:15:
d0:4c:89:ca:e8:14:07:5b:a3:72:d0:27:fc:b6:9c:51:24:39:
fa:2f:0f:c6:24:0e:0e:64:dc:61:d6:d6:f2:23:32:fb:4a:a7:
dc:26:78:90:2d:8c:b4:43:62:79:d7:af:dd:2e:7b:8e:70:b5:
6a:76:33:67:04:f8:cc:cd:01:32:5d:f5:45:41:a2:1f:a3:cb:
ff:e2:1d:ad:52:5a:f2:9d:4a:b0:23:ce:98:f0:a7:ea:3b:70:
93:67:9b:1e:d9:e4:77:d4:69:b8:6c:6c:57:58:c3:60:ac:e8:
74:a1:df:17:a7:46:76:3c:1f:59:24:81:25:e3:75:94:bb:78:
d4:64:3c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:57:03 2026 by rpki-client