Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/BXsEdmDTsI6aXj7ghOKlH1vrlGI.roa
File: BXsEdmDTsI6aXj7ghOKlH1vrlGI.roa (raw, json)
Hash identifier: A2XNTZ2zMje1TSKMw6n70iQX1g3rr64Ytpay2qGcjNs=
Subject key identifier: 05:7B:04:76:60:D3:B0:8E:9A:5E:3E:E0:84:E2:A5:1F:5B:EB:94:62
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019DBB876A0CDF686910645675DA14C4DAD9
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/BXsEdmDTsI6aXj7ghOKlH1vrlGI.roa
Signing time: Thu 23 Apr 2026 18:08:26 +0000
ROA not before: Thu 23 Apr 2026 18:08:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198624
IP address blocks: 87.232.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:bb:87:6a:0c:df:68:69:10:64:56:75:da:14:c4:da:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Apr 23 18:08:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=057b047660d3b08e9a5e3ee084e2a51f5beb9462
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3c:30:69:3a:d6:b1:77:b2:9b:fb:11:98:0c:
52:58:f6:8d:fb:49:a2:85:e5:3b:26:e9:f4:32:ec:
91:cb:46:c9:60:fa:41:78:1f:0b:61:8d:98:5e:3e:
94:c1:f2:95:e1:2e:89:61:4b:bd:91:f4:04:44:f7:
7d:da:dd:8b:74:80:c3:c8:90:3f:21:16:8e:99:b9:
a6:15:15:af:8c:39:0e:db:87:cb:2e:b8:9b:ac:55:
72:83:5f:23:ff:93:fe:f8:4b:f2:dc:e9:93:0d:52:
10:e3:01:30:01:99:45:7c:f9:77:32:07:ec:a5:b2:
63:38:93:5b:26:55:57:ff:8e:88:9b:f1:bb:3f:33:
02:07:57:ce:4d:42:44:d2:90:2f:0a:fe:24:a5:f4:
0c:3e:84:ef:24:32:44:92:fe:b1:ae:86:c8:f4:18:
f6:01:1a:36:91:d7:f2:66:e2:88:74:48:e5:f5:c2:
a4:2b:37:7b:6f:4b:ff:30:0d:9c:93:4e:44:ef:7e:
a9:1e:54:9c:50:60:fe:1e:ea:4d:f3:80:84:93:9e:
82:74:70:25:5d:83:83:06:a9:04:82:84:64:71:fd:
b9:c1:93:4d:83:92:b2:f5:77:b0:f8:58:38:aa:66:
c6:5a:77:b2:28:ba:d5:af:d8:7b:b9:79:97:e5:69:
71:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:7B:04:76:60:D3:B0:8E:9A:5E:3E:E0:84:E2:A5:1F:5B:EB:94:62
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/BXsEdmDTsI6aXj7ghOKlH1vrlGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.124.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:e7:dc:46:f1:f4:08:60:dd:c2:26:b1:8d:3d:e8:bd:47:1c:
28:2d:e6:c0:9d:3b:d0:7f:16:8f:ed:17:f7:0e:fc:c9:12:a0:
e6:b3:29:8c:bf:d9:22:9c:d0:8d:c6:d1:1c:ca:3f:d2:65:bc:
cf:8a:07:01:91:fd:6c:3e:e9:b3:98:1d:f1:79:b0:09:00:0e:
69:19:13:92:66:a0:c6:76:5c:54:52:5c:68:1d:a2:bb:cc:e8:
ae:e5:b5:a4:ec:64:2f:4f:88:a0:72:37:d0:d8:a8:00:58:57:
e1:12:2d:0b:58:7a:95:b9:e1:ee:10:ac:31:86:99:ec:bf:bd:
e7:62:ac:5e:b5:d5:80:4c:d4:94:84:af:bc:59:59:58:59:a3:
88:a6:52:2e:e6:f8:83:53:83:5e:53:95:be:88:00:32:64:6b:
2b:fd:d0:c0:d0:d2:28:e0:cb:c3:09:b7:ea:50:cd:01:0c:8c:
3f:cd:79:23:a5:7b:b5:40:1d:90:50:ad:1d:7a:2d:bd:fa:fc:
e8:9d:71:56:a5:71:57:fd:1f:17:41:9b:19:51:03:67:84:7c:
9a:88:f4:71:14:74:14:67:ca:ea:77:74:93:5b:da:d9:b1:db:
8a:d4:ce:fe:44:8a:e5:ec:d7:fb:2b:39:41:ef:4f:94:f6:bb:
7c:6b:8a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:47:29 2026 by rpki-client