Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/a19b80-79da-412d-99b5-1202ecc808e8/1/bgJD44VBNgNX7QzVsv5deioMoUk.roa
File: bgJD44VBNgNX7QzVsv5deioMoUk.roa (raw, json)
Hash identifier: LSae3XGL/Q+/vG622sGPyAKFe+sgbvpW87T1AF6mcHQ=
Subject key identifier: 6E:02:43:E3:85:41:36:03:57:ED:0C:D5:B2:FE:5D:7A:2A:0C:A1:49
Certificate issuer: /CN=e288b5517b4fbffe13d1fc3efa86dc7ff5561881
Certificate serial: 019CB3480356B0BF73249FAB4996739B2FC8
Authority key identifier: E2:88:B5:51:7B:4F:BF:FE:13:D1:FC:3E:FA:86:DC:7F:F5:56:18:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oi1UXtPv_4T0fw--obcf_VWGIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/a19b80-79da-412d-99b5-1202ecc808e8/1/bgJD44VBNgNX7QzVsv5deioMoUk.roa
Signing time: Tue 03 Mar 2026 10:39:26 +0000
ROA not before: Tue 03 Mar 2026 10:39:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57188
IP address blocks: 46.228.16.0/20 maxlen: 21
185.174.92.0/22 maxlen: 24
2a03:1f80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/a19b80-79da-412d-99b5-1202ecc808e8/1/4oi1UXtPv_4T0fw--obcf_VWGIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/a19b80-79da-412d-99b5-1202ecc808e8/1/4oi1UXtPv_4T0fw--obcf_VWGIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oi1UXtPv_4T0fw--obcf_VWGIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b3:48:03:56:b0:bf:73:24:9f:ab:49:96:73:9b:2f:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e288b5517b4fbffe13d1fc3efa86dc7ff5561881
Validity
Not Before: Mar 3 10:39:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e0243e38541360357ed0cd5b2fe5d7a2a0ca149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d0:6b:21:d9:ae:0b:cf:3c:8b:b3:c1:85:d1:
49:0c:58:bc:bd:a0:14:48:79:c8:a0:ca:93:28:6b:
3f:00:f7:02:59:4a:4e:62:21:b9:5b:56:7e:69:00:
54:65:d1:2c:45:f3:8b:b0:56:37:ef:56:4e:5a:93:
4b:07:6a:4a:c3:15:bc:0e:d7:d5:24:d4:dd:30:63:
26:db:95:af:6d:29:c7:df:3c:84:cb:98:03:cd:ec:
67:ff:f4:df:fc:7b:1f:74:ab:6f:c2:78:90:e0:e7:
b1:e3:a5:9b:68:36:2d:1f:be:b6:18:bc:71:ac:34:
ec:b5:d9:78:e9:f4:41:51:f1:b7:47:e0:93:67:4f:
c8:e1:14:3e:45:60:14:01:bb:1b:73:eb:45:d4:f7:
fd:46:ab:e5:e5:87:96:23:7b:47:06:39:b4:96:02:
90:e7:c9:4b:cb:41:d0:f9:8d:67:62:a0:89:f7:32:
29:98:44:88:a3:92:37:e4:17:c3:46:03:dd:18:68:
4a:0e:94:4d:93:cf:16:4f:37:6b:6f:85:c8:9b:12:
ba:3e:77:3a:71:b1:58:81:45:33:a0:14:d0:8b:96:
df:b2:96:c5:97:d0:3e:c9:d2:44:b9:3f:f8:32:78:
c7:2f:dc:81:63:e1:fc:1d:dc:d7:4b:73:8f:bc:50:
88:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:02:43:E3:85:41:36:03:57:ED:0C:D5:B2:FE:5D:7A:2A:0C:A1:49
X509v3 Authority Key Identifier:
keyid:E2:88:B5:51:7B:4F:BF:FE:13:D1:FC:3E:FA:86:DC:7F:F5:56:18:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oi1UXtPv_4T0fw--obcf_VWGIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/a19b80-79da-412d-99b5-1202ecc808e8/1/bgJD44VBNgNX7QzVsv5deioMoUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/a19b80-79da-412d-99b5-1202ecc808e8/1/4oi1UXtPv_4T0fw--obcf_VWGIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.16.0/20
185.174.92.0/22
IPv6:
2a03:1f80::/32
Signature Algorithm: sha256WithRSAEncryption
a8:ba:3c:2c:df:97:2e:d6:8a:29:00:66:45:53:d0:71:cc:f3:
a4:6c:8d:5d:3f:72:60:29:9b:f3:6e:5a:4a:bb:60:c2:d3:b6:
65:9f:c4:18:19:20:73:a8:04:c0:b5:d5:c6:bd:6c:bd:82:01:
af:db:f1:a5:12:48:cb:5a:32:80:fd:88:3c:86:97:c1:6d:9d:
eb:30:33:1d:e1:85:c0:51:d4:fe:fc:99:f2:79:e6:04:6b:2e:
ab:0f:e9:04:02:7c:20:97:c9:58:3e:bd:78:3c:9e:02:ea:fe:
88:3b:82:6f:37:c5:c4:0e:22:40:02:ed:da:b2:6d:56:de:77:
dd:60:c1:1a:e9:0d:7f:c7:94:10:7e:93:de:6c:15:79:89:b8:
c5:af:4b:0a:4a:32:0e:4d:e5:7e:c8:95:cd:f1:2c:f0:a4:d6:
d4:1b:0e:20:d2:20:64:e0:3e:4a:49:d5:2c:c9:8a:02:f9:4b:
a4:56:71:59:53:e4:d6:06:3a:65:6a:01:69:97:eb:7d:44:58:
6a:3b:32:e6:07:5c:25:5c:b3:55:dd:87:0b:03:b6:fe:29:c9:
4c:96:96:1d:ed:13:2f:75:fc:e3:b6:f8:3f:f4:1c:14:e6:10:
c7:d8:e5:00:24:7c:e9:fe:0f:2a:c4:6e:60:92:ff:be:8d:96:
a5:51:10:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 17:33:52 2026 by rpki-client