Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a718c5-34a1-4baa-b18f-619d9da29826/1/bf-C7XR5rvxVULROY95AnCsiqDE.roa
File: bf-C7XR5rvxVULROY95AnCsiqDE.roa (raw, json)
Hash identifier: Xcehpx+K84jAisImHgsCWZZzlMJjIRq9I5PCTggbexM=
Subject key identifier: 6D:FF:82:ED:74:79:AE:FC:55:50:B4:4E:63:DE:40:9C:2B:22:A8:31
Certificate issuer: /CN=6f8c10c383729f76149973b5655be9bf34711b24
Certificate serial: 019C948EB78B73B2DFFE7E557280C6045725
Authority key identifier: 6F:8C:10:C3:83:72:9F:76:14:99:73:B5:65:5B:E9:BF:34:71:1B:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a718c5-34a1-4baa-b18f-619d9da29826/1/bf-C7XR5rvxVULROY95AnCsiqDE.roa
Signing time: Wed 25 Feb 2026 11:28:26 +0000
ROA not before: Wed 25 Feb 2026 11:28:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56899
IP address blocks: 185.201.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a718c5-34a1-4baa-b18f-619d9da29826/1/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/a718c5-34a1-4baa-b18f-619d9da29826/1/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:94:8e:b7:8b:73:b2:df:fe:7e:55:72:80:c6:04:57:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f8c10c383729f76149973b5655be9bf34711b24
Validity
Not Before: Feb 25 11:28:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6dff82ed7479aefc5550b44e63de409c2b22a831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2e:81:2c:e4:49:96:75:4d:cc:41:2d:31:6d:
80:03:54:fd:e6:95:ab:33:9b:15:44:b7:35:76:a4:
99:d5:31:b3:56:9d:88:98:d9:f8:cc:e6:34:d3:fe:
c4:77:d9:1e:bb:af:6c:8f:f5:ef:d7:29:31:4c:2c:
d0:6d:e6:3f:31:bc:25:a4:94:26:45:d1:c7:19:77:
74:88:e2:c1:92:d8:d1:03:57:01:6e:cb:31:66:28:
1c:d0:80:77:0d:1d:e0:f4:ac:06:ab:44:b7:b7:f6:
1a:a6:35:83:11:c2:b6:a9:37:d0:af:3b:7e:9a:55:
1a:78:27:c5:48:2f:2f:2f:05:22:5e:96:21:96:0c:
e8:d8:a7:3b:e0:a2:dc:5f:8c:36:ee:b8:8d:72:95:
a1:1e:de:ab:b5:6e:18:dd:6b:6e:e7:2c:1c:68:5b:
a6:6a:d9:6c:82:98:36:d8:3c:76:fd:1f:7e:91:46:
fc:26:bc:dd:ed:6d:47:4b:f0:38:e2:29:4b:e4:04:
5f:db:ce:50:da:2e:85:32:3a:70:e1:73:f4:9b:2a:
0f:bb:01:11:b4:b0:f7:31:08:ae:9e:f2:e8:d5:5a:
29:6c:ad:8b:5e:42:2d:5d:88:22:b6:d7:b3:dc:cb:
28:1c:87:b2:90:47:2b:4b:26:d0:0d:41:5f:da:c9:
1e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:FF:82:ED:74:79:AE:FC:55:50:B4:4E:63:DE:40:9C:2B:22:A8:31
X509v3 Authority Key Identifier:
keyid:6F:8C:10:C3:83:72:9F:76:14:99:73:B5:65:5B:E9:BF:34:71:1B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a718c5-34a1-4baa-b18f-619d9da29826/1/bf-C7XR5rvxVULROY95AnCsiqDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a718c5-34a1-4baa-b18f-619d9da29826/1/b4wQw4Nyn3YUmXO1ZVvpvzRxGyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.169.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:cf:b5:2f:3b:7a:be:5f:9a:be:6d:74:66:b5:95:e8:4b:22:
78:be:0d:5c:bc:ac:75:30:c9:98:37:6d:49:d9:c6:ee:75:95:
75:cb:eb:b9:8d:df:ea:1e:1f:78:01:11:61:0f:17:b5:35:c4:
15:12:a0:fd:30:a2:a9:0a:f8:2d:0f:f4:c4:e1:99:22:37:20:
f7:f7:b0:14:17:d9:72:db:a8:08:71:b6:97:9b:f5:4d:0d:82:
33:a6:43:c7:66:f0:a4:00:07:52:e3:fc:a5:a3:bf:80:5e:be:
a7:64:d5:49:16:07:a6:d4:99:4c:a0:d8:14:fa:7e:2b:d8:26:
f3:16:65:4c:26:fb:f6:92:24:b4:04:2e:77:41:35:fe:74:0a:
c0:cb:e3:a3:d5:71:90:72:58:f4:b6:3b:92:da:cf:c7:87:41:
5f:ae:b3:59:a0:68:00:a9:23:62:21:78:ed:18:4c:86:05:6d:
3a:8e:9d:02:56:da:f2:38:e3:98:39:89:4a:5d:53:bc:9f:2f:
ca:91:ef:ce:62:72:db:28:85:02:01:4b:38:59:6e:56:2c:00:
41:3d:a2:ab:fc:56:b7:9b:6c:0c:e7:64:68:fd:8d:47:80:c6:
c5:c4:50:05:53:86:4e:37:ef:7f:a1:1f:93:8d:21:41:69:9e:
1d:c6:17:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 05:02:47 2026 by rpki-client