Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/Boj51944UHpw2N29rQVowThmug0.roa
File: Boj51944UHpw2N29rQVowThmug0.roa (raw, json)
Hash identifier: HUVOp2WKj5SNN9Fle4XKUb46VLI80hwlKOqPCzD07wo=
Subject key identifier: 06:88:F9:D7:DE:38:50:7A:70:D8:DD:BD:AD:05:68:C1:38:66:BA:0D
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 01A0C947E5F4A7A286858672E1D919103060
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/Boj51944UHpw2N29rQVowThmug0.roa
Signing time: Tue 22 Sep 2026 13:22:07 +0000
ROA not before: Tue 22 Sep 2026 13:22:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 77.216.0.0/19 maxlen: 19
77.216.128.0/19 maxlen: 19
85.232.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 16:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:47:e5:f4:a7:a2:86:85:86:72:e1:d9:19:10:30:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Sep 22 13:22:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0688f9d7de38507a70d8ddbdad0568c13866ba0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:93:eb:d0:e7:26:55:f4:56:fa:b6:41:4f:9d:
66:00:fc:58:90:e6:37:3f:30:ed:3a:07:74:29:35:
ae:8e:c0:4d:fd:07:93:e8:5a:19:f2:9b:08:47:6f:
36:c2:98:bb:5a:9e:01:50:65:1a:14:66:33:f1:83:
be:c6:44:4c:d3:ed:37:fc:7f:e3:3f:99:08:d3:13:
91:9f:51:68:41:80:9b:4f:08:01:a9:f7:43:82:c8:
51:3c:24:ef:2a:68:f7:07:fc:98:47:55:94:5d:83:
c0:33:ad:3d:15:9e:bb:aa:14:3a:10:12:a8:8c:5e:
3f:0e:3b:1f:d2:94:02:a6:30:f1:c3:6f:43:07:87:
93:6a:39:ae:27:f5:4a:d3:ab:f0:30:0f:a9:8a:41:
f8:72:82:a2:97:eb:20:6a:4d:4c:c0:b0:95:58:b5:
77:12:05:d9:a1:cc:59:15:36:18:12:ca:c7:7a:28:
6a:67:c6:da:e5:48:0f:31:0e:a9:70:47:fd:04:ee:
49:9c:65:fe:fa:0f:d9:3a:a7:4e:be:7f:91:56:07:
8f:a3:7b:5f:97:6d:fd:ec:e6:16:7e:46:45:c1:e4:
a9:70:bb:29:2d:a5:cd:e1:74:b0:aa:fb:ac:19:2b:
4f:94:ea:4e:9f:b2:16:93:12:37:0f:0f:b6:9f:b6:
75:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:88:F9:D7:DE:38:50:7A:70:D8:DD:BD:AD:05:68:C1:38:66:BA:0D
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/Boj51944UHpw2N29rQVowThmug0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.216.0.0/19
77.216.128.0/19
85.232.183.0/24
Signature Algorithm: sha256WithRSAEncryption
88:f3:a2:39:35:a3:13:c0:64:9b:30:52:0a:0d:5a:ce:a8:77:
f6:0f:db:04:84:ae:cc:4e:f9:5e:44:d1:9f:e3:0e:83:10:90:
24:f4:78:d8:ee:05:51:46:b0:a8:51:6a:3c:f6:fc:56:57:0e:
f0:be:e6:ae:a6:f0:30:b7:92:81:54:13:99:b0:b0:46:db:57:
03:10:87:19:12:d7:02:61:8b:c6:9e:a7:ce:22:73:d3:f4:3a:
c5:dc:5f:c9:4f:0d:a9:d9:a9:77:e2:57:5d:1e:d8:16:f7:3e:
2b:ba:10:65:cf:0a:6b:5c:f3:19:1c:3d:c6:e7:6d:de:4b:ed:
f9:f2:62:e9:f8:5b:b7:21:d3:95:f4:86:0f:00:23:f2:13:66:
d7:a3:24:30:34:cb:ab:b5:ee:be:d5:7b:c6:a1:62:f8:52:e5:
d8:b8:94:36:45:c7:d0:e0:a8:9a:71:26:af:24:cd:51:db:97:
7c:fb:b5:35:7a:d0:61:48:be:dd:16:11:07:47:a3:00:a2:10:
7b:e9:e5:82:2b:f9:ef:8b:89:63:97:d9:1c:40:40:2e:7a:1b:
32:da:88:99:52:9f:80:f5:af:be:31:55:e6:d9:2f:8c:92:05:
9a:b8:2c:1a:71:39:1e:b6:7f:14:cf:d4:9f:4e:42:4f:c9:55:
98:f3:e3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:07:27 2026 by rpki-client