Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/bcSgZpZBwtbiIL48flh5F_NGfHo.roa
File: bcSgZpZBwtbiIL48flh5F_NGfHo.roa (raw, json)
Hash identifier: I/NWDutoo/tdtpPAOJuOwfmfUJCK6YwHRmYnSpUxsCY=
Subject key identifier: 6D:C4:A0:66:96:41:C2:D6:E2:20:BE:3C:7E:58:79:17:F3:46:7C:7A
Certificate issuer: /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Certificate serial: 019F3BF55D009722B7054D4C22FDAAEE10CC
Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/bcSgZpZBwtbiIL48flh5F_NGfHo.roa
Signing time: Tue 07 Jul 2026 09:42:43 +0000
ROA not before: Tue 07 Jul 2026 09:42:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204708
IP address blocks: 80.67.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3b:f5:5d:00:97:22:b7:05:4d:4c:22:fd:aa:ee:10:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Validity
Not Before: Jul 7 09:42:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6dc4a0669641c2d6e220be3c7e587917f3467c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:73:8e:33:79:43:46:1d:cc:aa:a2:4a:f7:a7:
de:47:6a:d4:ba:e8:03:e8:e9:2a:58:07:56:0e:13:
0f:f9:5b:77:e5:eb:23:e3:62:56:7f:25:c0:5a:f7:
cc:f2:0d:f9:77:20:e0:06:7d:9a:c6:51:65:9b:41:
1b:71:f6:b0:88:65:95:ad:65:2c:50:ba:7e:7b:4a:
15:e2:4b:63:31:e3:54:58:e9:1f:d4:e0:ee:bf:09:
5b:e4:be:57:09:33:af:38:9a:33:d7:76:b9:c5:0c:
74:3f:1f:68:6c:7b:9b:35:04:55:e6:70:05:f4:26:
6f:5d:33:df:e3:c0:a5:1e:8b:d7:ff:e0:57:69:23:
de:fb:e3:c8:7e:48:ce:8d:04:3d:07:53:35:e6:54:
17:10:47:80:ec:6d:bf:3c:a2:ba:75:1a:19:64:ef:
18:68:7b:74:b4:6b:bc:0d:98:a3:25:f9:e0:c1:6c:
ce:55:cb:4f:0c:91:4f:26:32:c2:69:7c:40:1b:1f:
54:db:1e:f5:66:0c:8e:2b:56:c0:dd:92:c0:19:fa:
d9:86:97:0f:32:d9:ee:10:be:20:fd:0e:d4:b5:98:
f2:32:46:79:74:95:25:e3:08:63:2a:f8:56:ee:7d:
db:21:3f:ac:cc:3e:f1:b2:b5:22:d3:ab:98:7d:eb:
fb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C4:A0:66:96:41:C2:D6:E2:20:BE:3C:7E:58:79:17:F3:46:7C:7A
X509v3 Authority Key Identifier:
keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/bcSgZpZBwtbiIL48flh5F_NGfHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.67.184.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:d8:56:58:a8:1f:25:e0:2d:14:fe:ba:95:79:11:76:23:2d:
1d:ac:15:50:8f:a4:b8:7c:13:1d:5d:08:59:cd:77:dd:d7:7c:
8f:5e:7d:be:d1:bc:d3:24:93:7b:a7:3d:59:6f:e7:1c:2c:53:
cf:c3:ff:6c:94:b6:5d:f3:9d:4b:6c:34:7c:91:d5:7c:bb:b7:
a9:da:65:52:56:77:c4:bb:cd:77:af:10:ff:23:fc:e5:14:9e:
d5:08:70:66:e2:62:70:bc:6e:90:6c:4b:d0:4f:b8:52:52:db:
44:ac:4e:3e:57:58:8e:1f:35:8b:8c:5b:69:24:10:95:a5:67:
d5:b5:42:49:2b:e9:6a:a2:f9:99:1b:3f:da:66:ab:56:24:5f:
84:f0:91:63:80:c4:65:ac:af:98:01:19:f0:c0:e5:96:00:48:
5b:4a:5f:72:84:e7:f8:61:28:f4:3a:c6:61:85:29:67:1b:a5:
4d:6e:9e:04:3c:77:0c:38:65:7c:94:35:ca:da:96:53:92:5c:
32:aa:9b:2d:9f:d2:01:ca:ca:de:cf:2e:cc:cd:b6:08:8d:8a:
03:19:08:d5:b3:82:98:eb:13:8d:ad:31:44:4b:f9:9b:3c:6d:
7e:27:e3:a1:05:9a:cf:88:dd:a6:3b:69:3c:8b:5b:29:8c:5f:
3b:ae:2c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:30:53 2026 by rpki-client