Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/BJQPA1_Xcs8xIvrD3iGf1kRyGEY.roa
File: BJQPA1_Xcs8xIvrD3iGf1kRyGEY.roa (raw, json)
Hash identifier: OkZqX4+0oW/Qj1Uouc/atoTjABWwuUvZVfzQUqSvPA8=
Subject key identifier: 04:94:0F:03:5F:D7:72:CF:31:22:FA:C3:DE:21:9F:D6:44:72:18:46
Certificate issuer: /CN=66d4ca7ecd13727eb4621dbcf85efc4ad70c7cb4
Certificate serial: 019F23691819C0BD40328E272D91BD1DADC3
Authority key identifier: 66:D4:CA:7E:CD:13:72:7E:B4:62:1D:BC:F8:5E:FC:4A:D7:0C:7C:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtTKfs0Tcn60Yh28-F78StcMfLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/BJQPA1_Xcs8xIvrD3iGf1kRyGEY.roa
Signing time: Thu 02 Jul 2026 15:18:37 +0000
ROA not before: Thu 02 Jul 2026 15:18:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43905
IP address blocks: 80.77.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/ZtTKfs0Tcn60Yh28-F78StcMfLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/ZtTKfs0Tcn60Yh28-F78StcMfLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtTKfs0Tcn60Yh28-F78StcMfLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:18:19:c0:bd:40:32:8e:27:2d:91:bd:1d:ad:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d4ca7ecd13727eb4621dbcf85efc4ad70c7cb4
Validity
Not Before: Jul 2 15:18:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04940f035fd772cf3122fac3de219fd644721846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:21:7d:11:ef:d9:2f:94:ac:d1:4c:0a:02:b3:
b5:e1:60:26:94:1e:78:c1:ed:16:2c:e4:c5:8d:48:
7f:6c:b7:12:9a:9f:fd:8b:cb:d0:9f:a9:07:b2:ae:
e9:c5:c3:02:c6:ed:62:19:40:b8:22:55:97:33:9e:
a2:61:07:88:ec:e8:de:b9:da:3f:8c:2c:99:9b:e8:
f7:f5:af:59:83:82:36:01:9e:ef:b2:7b:36:33:fd:
a3:16:22:b1:12:f2:4a:0f:16:0d:2e:e9:d6:54:32:
30:80:3a:36:14:79:a8:59:a2:56:65:8a:9f:8c:b2:
67:34:bc:56:aa:8b:b7:ca:fb:c9:d3:42:55:ba:3f:
cd:74:f7:76:8e:4a:4b:f6:63:1b:6c:47:36:3a:3a:
29:24:b7:20:ab:d9:02:9f:c1:31:dc:14:69:6d:4a:
0f:b8:d2:8b:34:e0:51:64:6a:e2:85:b1:a5:e7:c0:
52:68:b3:5a:e2:37:ab:91:cd:f5:7b:63:6f:a5:4c:
71:c3:6c:3c:a9:da:1d:df:12:c0:c3:03:eb:76:ba:
ab:23:35:ea:9c:09:ca:de:8a:af:46:b9:16:ba:a4:
14:d9:85:28:f9:5f:ab:77:7c:91:2f:97:d3:9e:3c:
9c:f4:59:d1:af:ac:9d:a9:f2:89:35:21:50:7b:05:
03:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:94:0F:03:5F:D7:72:CF:31:22:FA:C3:DE:21:9F:D6:44:72:18:46
X509v3 Authority Key Identifier:
keyid:66:D4:CA:7E:CD:13:72:7E:B4:62:1D:BC:F8:5E:FC:4A:D7:0C:7C:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtTKfs0Tcn60Yh28-F78StcMfLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/BJQPA1_Xcs8xIvrD3iGf1kRyGEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0f6470-e7f4-4151-8ad9-d3b27a0225b0/1/ZtTKfs0Tcn60Yh28-F78StcMfLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.77.184.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:03:26:89:1e:65:8c:ca:5b:40:4a:73:73:e1:94:fd:c8:cf:
ef:10:6b:e5:eb:d3:8d:85:32:1b:38:28:0a:9c:49:fd:62:33:
61:e3:31:63:9f:17:d7:68:4d:0b:ff:0c:52:12:38:67:92:e1:
17:3e:21:c4:a3:5e:cc:81:65:0e:e4:b1:4f:ed:b3:72:97:21:
a2:d4:67:b8:c0:06:b4:26:76:19:2b:20:d0:5d:b9:c3:d0:56:
bb:cb:d4:09:cb:8e:fd:a1:23:83:69:ea:54:55:f4:92:fb:6c:
8c:22:92:20:e8:ec:ee:70:7a:91:ea:98:ab:e0:0f:ce:9b:3a:
a5:d1:33:89:7d:70:e5:cf:1a:b1:84:ee:b0:ac:fe:be:90:ac:
ae:f2:94:7f:10:4c:f1:74:67:e2:63:96:6b:f0:91:62:dc:92:
e4:70:51:87:2f:55:be:b4:7c:54:ed:95:81:f4:3c:84:37:f3:
af:9b:29:70:ed:46:e4:5a:a4:f2:c0:26:d3:f7:89:3b:a0:67:
4c:cc:b1:d7:b3:4e:17:bf:2f:bd:81:03:d6:c0:65:be:d3:e8:
75:c0:10:5b:c4:f7:2d:5e:8c:62:ff:96:50:a2:86:21:cc:0c:
ec:b6:2c:a4:8c:9e:37:8c:c0:fd:89:4b:5b:ef:d3:6b:e3:f4:
a9:27:6e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:20:51 2026 by rpki-client