Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/bjV9a84Navq2cjlLnnyQ7ZLZJQY.roa
File: bjV9a84Navq2cjlLnnyQ7ZLZJQY.roa (raw, json)
Hash identifier: oXiEsLmzNMIEZvn6zcV/UwZ/24olqpUKpuRIwHp2tTQ=
Subject key identifier: 6E:35:7D:6B:CE:0D:6A:FA:B6:72:39:4B:9E:7C:90:ED:92:D9:25:06
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 019D0AACCC34573004CA458B05CD321BCE92
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/bjV9a84Navq2cjlLnnyQ7ZLZJQY.roa
Signing time: Fri 20 Mar 2026 09:56:29 +0000
ROA not before: Fri 20 Mar 2026 09:56:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43350
IP address blocks: 82.206.74.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0a:ac:cc:34:57:30:04:ca:45:8b:05:cd:32:1b:ce:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Mar 20 09:56:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e357d6bce0d6afab672394b9e7c90ed92d92506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:45:45:b9:fb:e5:4c:cf:c8:f5:a8:93:c1:fd:
c4:55:47:76:e4:18:f8:b7:80:34:24:82:bc:b3:26:
0e:7e:3b:ec:b8:0e:8d:bc:e6:c2:b6:72:65:27:b4:
35:f5:40:fe:8a:ef:41:98:10:42:bf:da:19:f8:cd:
53:9b:9c:26:b9:da:0a:ea:8d:a1:50:9e:4b:cd:59:
ce:02:f0:fb:04:9d:e4:90:2a:af:fc:b4:7c:be:14:
a1:16:71:92:cb:bb:c9:2c:71:d5:48:f8:02:4e:33:
b3:c5:b9:85:9b:1a:b8:5d:f1:c2:0e:8a:a0:c3:f9:
98:44:76:e4:7a:e9:50:96:00:fc:3e:7d:39:17:81:
13:e7:84:f7:ae:71:5c:d8:02:79:c7:99:45:7f:7a:
86:38:74:78:cc:46:dc:22:77:17:33:7a:9c:5f:29:
7f:d2:8a:4b:0a:dd:0c:46:20:3b:8b:23:8a:1e:94:
9c:64:af:d7:28:81:27:99:7b:f2:f4:b3:14:8c:1e:
ba:23:33:72:15:85:63:70:09:44:ca:db:04:ca:0a:
9c:73:c3:e6:92:51:9d:47:e9:4d:35:f0:89:ae:2e:
aa:2b:5b:a0:e7:80:09:da:36:10:d3:88:28:80:ef:
05:80:01:17:c9:f8:f4:a6:61:3f:2a:5c:14:a9:d3:
59:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:35:7D:6B:CE:0D:6A:FA:B6:72:39:4B:9E:7C:90:ED:92:D9:25:06
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/bjV9a84Navq2cjlLnnyQ7ZLZJQY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.74.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:fb:48:97:45:3e:5a:19:ab:b6:6d:ae:25:99:7e:dc:bd:3c:
7e:80:92:0e:94:bb:0c:54:bf:f3:70:e6:c1:0e:26:36:b9:bd:
4d:e8:4c:62:4d:c9:2a:ac:d3:ec:6a:e2:4e:fe:30:28:e2:b1:
89:a1:23:59:16:ff:17:28:18:38:35:a3:43:1f:86:b6:3e:e5:
0c:55:d0:a4:b8:16:50:a5:6e:de:ca:8a:d2:19:ee:56:c8:b4:
14:bc:e9:3e:76:6e:e3:bc:7a:3c:8e:bf:7a:72:d0:37:5e:4a:
3c:25:06:f3:ff:57:16:a8:89:27:30:c7:71:c8:5c:52:b5:7f:
14:1e:0f:d0:2c:58:3a:98:22:27:0e:0a:7c:89:ec:25:1e:2a:
b5:f5:8f:7e:3f:ea:1c:77:c5:89:7a:fd:e8:31:f2:51:2e:07:
ef:f2:9b:ae:1e:6a:1d:6f:4b:93:00:02:41:d1:80:c6:f7:c2:
db:77:98:fd:cc:51:2a:d5:44:e3:85:dc:39:fb:00:e7:5d:5d:
1d:72:ed:85:34:3e:b1:f4:99:0b:34:24:16:d6:ee:53:e5:c1:
54:01:cb:a6:2e:e8:60:66:05:83:bf:45:fb:ae:b5:48:6e:c6:
84:fc:59:91:09:ff:e5:86:3a:68:60:28:ea:a9:87:5f:09:f1:
1f:b5:e8:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:01:50 2026 by rpki-client