Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/bjmMFwcTT022Q6Y1BukBKmh8FIw.roa
File: bjmMFwcTT022Q6Y1BukBKmh8FIw.roa (raw, json)
Hash identifier: szlWCpj2SHYv29KWAoBFTIPCjX/50CbAjxQ0/D0JRaU=
Subject key identifier: 6E:39:8C:17:07:13:4F:4D:B6:43:A6:35:06:E9:01:2A:68:7C:14:8C
Certificate issuer: /CN=dc0e25e17a51696923a5c02966787409aac9aa36
Certificate serial: 019DF86EEE36F86A1776E6CF6ECC16DE8EBE
Authority key identifier: DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/bjmMFwcTT022Q6Y1BukBKmh8FIw.roa
Signing time: Tue 05 May 2026 13:58:32 +0000
ROA not before: Tue 05 May 2026 13:58:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42521
IP address blocks: 37.230.201.0/24 maxlen: 24
94.101.96.0/24 maxlen: 24
212.86.99.0/24 maxlen: 24
2a13:b200::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f8:6e:ee:36:f8:6a:17:76:e6:cf:6e:cc:16:de:8e:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc0e25e17a51696923a5c02966787409aac9aa36
Validity
Not Before: May 5 13:58:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e398c1707134f4db643a63506e9012a687c148c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:32:6e:f8:97:71:29:b0:a2:5e:43:95:ef:21:
0c:00:74:e3:f3:d1:ab:34:8f:84:a1:41:11:25:52:
8b:97:19:21:5a:cb:f5:4b:e8:00:a7:ff:72:23:09:
b8:1e:fe:1d:62:12:02:17:27:d1:87:21:11:ed:80:
0a:82:53:e5:d9:70:32:6d:53:88:90:58:ba:c0:fd:
97:e1:ff:95:13:9c:21:d0:50:ba:e0:b9:17:c5:b7:
4c:f5:7c:18:f2:d8:b4:6f:96:8a:dd:2b:8c:5b:15:
fc:64:61:0e:0f:72:b3:30:dd:02:7a:77:f3:e7:69:
38:72:a1:15:ba:f2:ab:8a:a9:4e:6c:54:63:d2:0f:
02:80:31:d7:02:5d:92:c5:50:35:e4:ff:42:f2:c8:
82:e7:5b:1b:b3:11:10:3a:da:52:4a:c8:7c:e0:0a:
67:c9:b3:5e:d5:62:dd:36:03:29:9c:fc:38:1a:09:
03:3c:d5:2f:40:83:27:ae:e2:ec:31:27:bd:ea:c8:
7e:54:1d:74:4f:33:35:13:3e:65:08:51:37:44:e2:
ca:06:2a:3f:4a:ef:d0:7e:56:ec:fe:81:0e:f8:83:
b7:f9:76:cd:2b:21:c1:15:ad:f3:08:c8:a2:b5:23:
0d:cd:5a:25:e8:17:ac:c6:26:4b:cb:2e:8c:8b:2e:
d3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:39:8C:17:07:13:4F:4D:B6:43:A6:35:06:E9:01:2A:68:7C:14:8C
X509v3 Authority Key Identifier:
keyid:DC:0E:25:E1:7A:51:69:69:23:A5:C0:29:66:78:74:09:AA:C9:AA:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3A4l4XpRaWkjpcApZnh0CarJqjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/bjmMFwcTT022Q6Y1BukBKmh8FIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/2cc46c-8c51-4330-b623-1835cc8a1d9d/1/3A4l4XpRaWkjpcApZnh0CarJqjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.201.0/24
94.101.96.0/24
212.86.99.0/24
IPv6:
2a13:b200::/29
Signature Algorithm: sha256WithRSAEncryption
94:cb:98:43:8c:b4:b2:ea:ad:81:60:37:c1:67:f3:b3:fa:02:
e1:2e:18:ea:3d:b6:ee:0e:0d:67:ff:0c:db:21:e7:2c:83:a3:
da:d1:b4:92:8e:d4:95:d9:1a:59:ef:98:b6:a1:01:5d:34:19:
91:0d:a7:31:d2:94:ac:9c:05:c2:8e:d4:56:a9:13:13:36:75:
dd:0b:4a:1a:c3:e6:cd:2d:a8:a7:56:91:23:78:e7:40:44:d1:
16:db:5d:95:93:9f:9d:f8:5f:88:ad:5c:2d:1b:a2:66:3e:b2:
5c:22:e6:21:f7:3f:6c:84:3c:22:c1:c4:92:52:14:4d:14:4a:
f5:9a:29:cf:68:a9:4b:f9:66:77:9f:3f:4c:cb:2b:e7:6d:d4:
56:de:ea:8c:ad:4c:4e:94:4a:6a:8f:a4:50:0e:61:d7:39:03:
23:7a:7f:20:9b:3c:bd:49:7f:2e:39:ae:6e:4e:7e:be:72:b6:
fc:3b:16:73:14:5b:90:98:f0:fc:07:3f:ec:ad:ec:eb:5b:b5:
49:b7:62:a2:54:f7:00:22:59:56:59:71:b1:fc:0c:f1:78:52:
3b:9b:e4:96:c0:07:09:52:de:23:5f:63:53:26:70:3c:ad:5f:
78:55:d9:43:a0:7f:d7:92:f4:e7:46:ed:b7:16:f9:b9:12:4e:
f7:3d:65:e9
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZ34bu42+GoXdubPbswW3o6+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMGUyNWUxN2E1MTY5NjkyM2E1YzAyOTY2Nzg3NDA5YWFj
OWFhMzYwHhcNMjYwNTA1MTM1ODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTM5OGMxNzA3MTM0ZjRkYjY0M2E2MzUwNmU5MDEyYTY4N2MxNDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jJu+JdxKbCiXkOV7yEMAHTj89Gr
NI+EoUERJVKLlxkhWsv1S+gAp/9yIwm4Hv4dYhICFyfRhyER7YAKglPl2XAybVOI
kFi6wP2X4f+VE5wh0FC64LkXxbdM9XwY8ti0b5aK3SuMWxX8ZGEOD3KzMN0Cenfz
52k4cqEVuvKriqlObFRj0g8CgDHXAl2SxVA15P9C8siC51sbsxEQOtpSSsh84Apn
ybNe1WLdNgMpnPw4GgkDPNUvQIMnruLsMSe96sh+VB10TzM1Ez5lCFE3ROLKBio/
Su/Qflbs/oEO+IO3+XbNKyHBFa3zCMiitSMNzVol6BesxiZLyy6Miy7TewIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFG45jBcHE09NtkOmNQbpASpofBSMMB8GA1UdIwQY
MBaAFNwOJeF6UWlpI6XAKWZ4dAmqyao2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0E0bDRYcFJhV2tqcGNBcFpuaDBDYXJKcWpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8yY2M0NmMtOGM1MS00MzMwLWI2MjMt
MTgzNWNjOGExZDlkLzEvYmptTUZ3Y1RUMDIyUTZZMUJ1a0JLbWg4Rkl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS8yY2M0NmMtOGM1MS00MzMwLWI2MjMtMTgzNWNjOGExZDlk
LzEvM0E0bDRYcFJhV2tqcGNBcFpuaDBDYXJKcWpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAJebJAwQA
XmVgAwQA1FZjMA0EAgACMAcDBQMqE7IAMA0GCSqGSIb3DQEBCwUAA4IBAQCUy5hD
jLSy6q2BYDfBZ/Oz+gLhLhjqPbbuDg1n/wzbIecsg6Pa0bSSjtSV2RpZ75i2oQFd
NBmRDacx0pSsnAXCjtRWqRMTNnXdC0oaw+bNLainVpEjeOdARNEW212Vk5+d+F+I
rVwtG6JmPrJcIuYh9z9shDwiwcSSUhRNFEr1minPaKlL+WZ3nz9MyyvnbdRW3uqM
rUxOlEpqj6RQDmHXOQMjen8gmzy9SX8uOa5uTn6+crb8OxZzFFuQmPD8Bz/srezr
W7VJt2KiVPcAIllWWXGx/AzxeFI7m+SWwAcJUt4jX2NTJnA8rV94VdlDoH/XkvTn
Ru23Fvm5Ek73PWXp
-----END CERTIFICATE-----
Generated at Wed May 13 08:39:48 2026 by rpki-client