Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/BDgHG1Q9czVhyC3DjxtgNrwoTPc.roa
File: BDgHG1Q9czVhyC3DjxtgNrwoTPc.roa (raw, json)
Hash identifier: DcjWP3L9YfgxacqAtFXHQOVruS1ILQzHmmRLjmZrdMk=
Subject key identifier: 04:38:07:1B:54:3D:73:35:61:C8:2D:C3:8F:1B:60:36:BC:28:4C:F7
Certificate issuer: /CN=af84cac92a9f31349481a68e951bc55af508f2e6
Certificate serial: 019D1A36C2EC4F3DD2BC9AF442A69D278FD1
Authority key identifier: AF:84:CA:C9:2A:9F:31:34:94:81:A6:8E:95:1B:C5:5A:F5:08:F2:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4TKySqfMTSUgaaOlRvFWvUI8uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/BDgHG1Q9czVhyC3DjxtgNrwoTPc.roa
Signing time: Mon 23 Mar 2026 10:21:29 +0000
ROA not before: Mon 23 Mar 2026 10:21:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199958
IP address blocks: 45.81.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/r4TKySqfMTSUgaaOlRvFWvUI8uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/r4TKySqfMTSUgaaOlRvFWvUI8uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4TKySqfMTSUgaaOlRvFWvUI8uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 13:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1a:36:c2:ec:4f:3d:d2:bc:9a:f4:42:a6:9d:27:8f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af84cac92a9f31349481a68e951bc55af508f2e6
Validity
Not Before: Mar 23 10:21:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0438071b543d733561c82dc38f1b6036bc284cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7e:b8:73:65:0e:53:ad:95:19:91:cf:d5:bd:
43:21:72:af:4b:3b:c6:ea:74:e1:c0:be:ef:35:2a:
a2:ec:7c:15:63:3e:31:ee:68:9f:5b:ad:c5:d3:ab:
00:cb:70:cc:3d:de:64:22:5e:7c:a4:c2:5a:b7:9e:
55:5c:e6:0b:e7:f4:55:e3:68:19:66:92:47:38:0e:
4f:9d:5b:86:27:18:ae:08:7f:ee:be:f6:87:26:86:
41:a2:5e:34:37:bb:4f:c2:ea:cd:79:49:5e:04:d1:
27:8c:ff:e7:5c:75:a4:04:ea:6e:26:0d:7b:08:9c:
f7:9d:39:0d:cf:88:15:bf:72:be:01:0d:c7:67:fc:
bf:7a:74:02:81:1c:e8:6a:f4:62:80:3b:ce:d3:8e:
73:4b:9c:ca:cc:4f:af:82:25:8b:cb:a0:d1:25:46:
a7:45:53:33:13:29:a9:f5:6d:e1:0d:c0:c4:5a:4b:
5c:8d:b8:11:de:38:10:e2:d2:2e:54:db:63:62:37:
21:55:b5:c4:93:1e:f8:17:60:43:aa:b8:c5:43:b5:
5c:7b:3b:5f:9b:9e:fe:df:70:7a:87:40:0e:24:88:
22:a3:ba:9d:4c:41:b1:61:49:29:22:84:4a:6f:d5:
cc:c1:7c:27:e7:53:49:71:7b:ad:fb:2d:61:4a:3d:
d3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:38:07:1B:54:3D:73:35:61:C8:2D:C3:8F:1B:60:36:BC:28:4C:F7
X509v3 Authority Key Identifier:
keyid:AF:84:CA:C9:2A:9F:31:34:94:81:A6:8E:95:1B:C5:5A:F5:08:F2:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4TKySqfMTSUgaaOlRvFWvUI8uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/BDgHG1Q9czVhyC3DjxtgNrwoTPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5da1a0-44f1-45d5-a473-3618e503f21f/1/r4TKySqfMTSUgaaOlRvFWvUI8uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.36.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:20:5a:e6:bd:a1:9a:e3:96:bf:e7:b6:a8:bd:71:24:dc:1e:
8a:e8:c8:fa:68:cc:40:bc:0d:14:2e:20:f1:44:b2:56:2b:5b:
ea:a4:7e:ef:40:6c:6f:77:a4:5b:9d:d7:35:70:3f:6b:20:30:
e5:1d:71:f0:84:59:fd:26:4c:82:a4:9f:7d:90:bf:d0:92:e5:
b3:ae:25:e7:73:74:09:fc:7b:b3:5e:e8:35:fc:3b:8c:7f:ce:
e3:50:b8:7d:18:80:f6:01:f1:55:ba:d8:60:45:30:ce:14:72:
db:0b:fb:a8:29:2d:6a:79:a9:23:36:e4:8a:4d:3c:70:74:f4:
f1:b4:27:08:75:50:03:ae:f7:b3:2f:b2:3b:3f:00:e6:f7:7a:
be:18:0d:07:68:52:8b:d9:53:f2:f5:76:26:b1:44:ae:97:2d:
de:37:4d:b3:0f:dc:a5:d6:a4:b4:9f:d1:0a:04:d2:50:d1:dd:
9a:3c:bf:97:22:9d:52:e4:09:2a:a3:bb:e3:f8:bc:22:38:2a:
6f:0b:13:8c:72:88:4e:78:fa:15:a1:10:bd:5c:9c:c9:02:18:
e4:00:39:55:2e:c0:8d:ef:27:80:b3:89:15:30:4f:07:2d:60:
0b:9c:ba:3a:13:96:fd:74:68:08:95:3e:a4:dd:ba:05:37:2b:
9f:97:7c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:21:01 2026 by rpki-client