Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/bcfHlyIIf9iURkOoMNu3o1bCquI.roa
File: bcfHlyIIf9iURkOoMNu3o1bCquI.roa (raw, json)
Hash identifier: s0ZEOACpFmxqNsg3wdFpkBrr3FizN5SEk2REh4fTDuA=
Subject key identifier: 6D:C7:C7:97:22:08:7F:D8:94:46:43:A8:30:DB:B7:A3:56:C2:AA:E2
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01A0A5CA846E17D6A1AA1FB604117CEAFEE2
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/bcfHlyIIf9iURkOoMNu3o1bCquI.roa
Signing time: Tue 15 Sep 2026 15:58:27 +0000
ROA not before: Tue 15 Sep 2026 15:58:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 265561
IP address blocks: 178.19.32.0/24 maxlen: 24
201.77.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:ca:84:6e:17:d6:a1:aa:1f:b6:04:11:7c:ea:fe:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Sep 15 15:58:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6dc7c79722087fd8944643a830dbb7a356c2aae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:56:35:0f:a7:c6:76:3b:b6:da:33:18:c9:d4:
d0:d0:b8:82:cc:a1:51:8a:2b:eb:4d:15:95:26:4d:
76:a0:6c:28:03:72:1f:db:86:8e:fa:22:77:16:40:
4d:5a:0a:4e:c7:af:b4:88:21:85:03:d2:f2:d3:26:
f1:3a:1e:99:ee:3f:ea:88:9c:65:dd:17:36:a8:91:
6b:58:b4:24:ea:aa:49:dc:9c:2b:7e:e5:05:24:97:
35:a7:cb:cd:9c:e6:b2:4d:dd:4a:ae:3a:c6:74:3e:
bf:7f:7d:7b:79:3a:5c:b3:39:c4:9d:93:43:2f:0a:
6c:d5:22:ef:5f:75:a0:7d:55:e9:55:47:43:ff:3f:
eb:ff:71:6e:b8:a9:7b:e8:d6:a3:e5:65:21:8c:28:
df:3c:67:ff:af:7c:45:ef:4c:29:fe:49:1f:ce:9c:
f8:70:b9:0c:b1:26:85:38:57:01:18:ff:cb:d1:63:
2a:5a:9f:2d:90:f0:7e:b8:6a:66:1d:f9:74:49:f0:
da:0b:67:8a:b1:b8:bc:f4:03:36:7f:e7:f6:77:27:
72:9d:13:37:3c:c8:4e:79:4b:db:74:12:27:a9:a9:
d2:ab:7c:da:e3:5e:4e:04:b3:cb:3d:1a:33:c0:d9:
d5:df:f8:91:df:68:5a:59:4f:2a:89:09:16:f4:13:
76:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C7:C7:97:22:08:7F:D8:94:46:43:A8:30:DB:B7:A3:56:C2:AA:E2
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/bcfHlyIIf9iURkOoMNu3o1bCquI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.19.32.0/24
201.77.60.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:3d:69:11:55:6f:ab:83:75:6c:21:93:be:4b:54:11:d6:3a:
a0:47:f5:3c:16:73:f7:15:8d:9b:08:d4:64:3f:01:98:17:d6:
f3:d7:e0:95:90:9d:97:85:7d:90:87:f7:28:f5:af:8b:ca:98:
94:c4:80:9f:b9:6b:8b:82:91:1c:8c:ee:06:a4:fe:97:eb:06:
cc:8c:22:fa:5b:49:96:2e:0d:18:08:11:19:01:2b:65:ac:64:
70:15:95:99:77:54:4b:f1:6d:de:7f:77:db:16:e4:a1:b9:c6:
1d:04:f7:2c:4a:2a:86:45:a6:4c:7b:02:0c:7b:0d:85:de:3c:
30:85:5a:60:e8:35:2d:39:9c:30:3a:2d:24:a2:fd:25:46:43:
91:0f:7f:8e:f1:a7:e1:40:e0:58:71:53:e9:ca:c2:ae:c6:de:
ef:2e:ee:61:ad:34:2f:70:9a:7b:fd:cd:45:80:61:ed:8f:3b:
4f:a7:83:8f:f0:81:d1:f3:62:f8:f2:24:a0:f9:db:83:57:ad:
a1:c4:b2:f2:3a:f5:b2:e2:3f:b1:54:78:e5:02:02:4d:2a:89:
ac:97:1b:b5:51:2f:f6:6e:ee:4d:29:e3:d8:a3:d7:f2:c4:ab:
7b:69:86:49:1e:e0:39:c7:46:e3:21:af:76:13:5f:86:6a:dd:
ca:6e:e1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:24:36 2026 by rpki-client