Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/bsxJfEYxm0pQB6nDJBPuYPFOM7A.roa
File: bsxJfEYxm0pQB6nDJBPuYPFOM7A.roa (raw, json)
Hash identifier: j8p23HgX1oogIyuG7LGwU6L54UU4xkd1XEgueDGOrRs=
Subject key identifier: 6E:CC:49:7C:46:31:9B:4A:50:07:A9:C3:24:13:EE:60:F1:4E:33:B0
Certificate issuer: /CN=7354b6f4145a7af50dc5c115503b7d28de1b0c44
Certificate serial: 019F2368D39952D5EB767A04F4A3A3E9EB63
Authority key identifier: 73:54:B6:F4:14:5A:7A:F5:0D:C5:C1:15:50:3B:7D:28:DE:1B:0C:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c1S29BRaevUNxcEVUDt9KN4bDEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/bsxJfEYxm0pQB6nDJBPuYPFOM7A.roa
Signing time: Thu 02 Jul 2026 15:18:20 +0000
ROA not before: Thu 02 Jul 2026 15:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34984
IP address blocks: 185.252.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/c1S29BRaevUNxcEVUDt9KN4bDEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d3:99:52:d5:eb:76:7a:04:f4:a3:a3:e9:eb:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7354b6f4145a7af50dc5c115503b7d28de1b0c44
Validity
Not Before: Jul 2 15:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ecc497c46319b4a5007a9c32413ee60f14e33b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e7:96:0d:9e:a8:d5:82:d1:de:48:21:10:eb:
6a:9c:71:35:b4:d5:0e:ef:b7:a5:cd:16:14:3b:b4:
06:ed:f0:e3:54:1b:75:36:66:ef:04:c4:3c:37:ca:
88:b2:12:8a:77:69:02:a1:44:21:16:04:6b:9a:7d:
c3:46:7d:cd:3f:04:af:6d:73:5b:73:1e:7d:4d:18:
12:15:bc:ac:1d:24:46:e8:9f:34:3a:16:44:f8:28:
10:4b:62:30:b1:cb:14:e7:6f:83:4d:ae:5d:30:88:
fe:d1:e1:64:f8:04:04:bf:4c:ed:0c:df:bc:94:0b:
60:9b:ce:0a:d5:9e:c2:f8:73:eb:56:30:1e:ac:7f:
ee:61:c4:82:75:9a:2d:ce:3a:7d:37:6c:20:38:93:
c2:b6:c7:dc:d8:6b:ab:89:3c:27:23:8c:01:16:b3:
82:c7:c9:07:02:d3:bf:c2:b2:c0:8e:c9:fd:00:b9:
2e:67:bd:d1:a7:36:76:29:8f:ba:90:8a:e1:7c:4a:
8f:b6:da:cb:2d:c9:00:49:27:dd:25:fe:de:13:03:
11:38:1c:40:49:58:f1:50:d7:e6:f8:31:e7:42:95:
e8:80:d1:b2:67:7e:46:b1:9e:a6:ec:a8:af:da:fa:
01:b0:5b:48:dd:78:f6:f1:8f:84:f9:61:c4:62:77:
9c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CC:49:7C:46:31:9B:4A:50:07:A9:C3:24:13:EE:60:F1:4E:33:B0
X509v3 Authority Key Identifier:
keyid:73:54:B6:F4:14:5A:7A:F5:0D:C5:C1:15:50:3B:7D:28:DE:1B:0C:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1S29BRaevUNxcEVUDt9KN4bDEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/bsxJfEYxm0pQB6nDJBPuYPFOM7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/9e57aa-8901-4bd8-8295-9c1a53580e39/1/c1S29BRaevUNxcEVUDt9KN4bDEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.43.0/24
Signature Algorithm: sha256WithRSAEncryption
70:ba:14:5e:61:ab:98:1e:64:62:51:b7:25:cb:2e:d6:1e:d2:
32:7c:71:f9:7c:9e:df:a8:a0:28:e9:06:82:d9:1b:d5:82:e5:
9e:fc:4e:21:e7:97:3c:2e:33:e0:b8:a6:7e:3a:92:3a:32:da:
b0:99:ac:72:36:ef:97:78:69:83:71:94:22:a3:71:35:f6:da:
23:c2:64:fd:8d:75:ce:70:8b:89:a2:3d:25:e6:5d:26:f3:e2:
43:80:e3:e5:5e:92:0e:d1:c2:c4:43:f8:27:59:e8:5d:35:bf:
f3:71:7f:11:e1:ee:f3:35:af:0b:9d:27:82:6d:5b:45:e0:24:
c7:e5:ab:93:17:8d:ef:ef:99:ef:d8:bd:fa:1c:91:31:37:9d:
8d:3a:f0:08:ac:d1:14:07:3f:69:fa:41:80:d4:c3:ff:b1:fe:
8b:6d:b9:8c:35:c5:07:15:c5:f7:60:fd:50:ed:8d:c8:32:ac:
e9:9f:0a:5c:de:3a:c4:41:03:06:e2:90:2b:72:b9:5b:d5:2c:
09:c5:12:b7:b2:1b:f9:7a:f4:2e:bf:94:9c:e0:10:fe:c8:70:
e0:7d:65:91:1a:e6:63:09:ca:35:81:84:97:89:7e:46:5e:96:
90:08:bd:ec:1a:a0:da:6c:27:a7:ab:fe:dc:f4:e5:26:f3:29:
e6:a3:c3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:25:53 2026 by rpki-client