Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/bjjnDSARcaH47y0e5cdsRVfrq3M.roa
File: bjjnDSARcaH47y0e5cdsRVfrq3M.roa (raw, json)
Hash identifier: y8mYW5VfeOpQGMBZcNBmWe7syVuckVK6AOLW1Hiy5HI=
Subject key identifier: 6E:38:E7:0D:20:11:71:A1:F8:EF:2D:1E:E5:C7:6C:45:57:EB:AB:73
Certificate issuer: /CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Certificate serial: 01A03363B58A34A4C991543FED4A8CE84EF5
Authority key identifier: A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/bjjnDSARcaH47y0e5cdsRVfrq3M.roa
Signing time: Mon 24 Aug 2026 10:49:27 +0000
ROA not before: Mon 24 Aug 2026 10:49:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218967
IP address blocks: 213.132.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:63:b5:8a:34:a4:c9:91:54:3f:ed:4a:8c:e8:4e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24b48edc7a325d7f1ae0f257c0e2835171bc9ae
Validity
Not Before: Aug 24 10:49:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e38e70d201171a1f8ef2d1ee5c76c4557ebab73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b7:10:11:2d:4f:00:be:42:d2:b7:f7:92:27:
2b:81:fb:c1:47:6f:20:2f:b6:25:4c:31:2f:60:db:
56:39:e5:72:a8:d1:81:3b:ed:d9:c4:c1:a7:97:89:
37:da:23:5b:3b:3b:40:3f:5d:05:ea:42:cb:fb:b8:
a3:a5:b7:e8:d9:ed:be:58:6d:37:77:67:90:38:fc:
93:39:94:a7:a6:e7:51:80:3f:68:00:88:a1:1f:7f:
fd:d5:47:3f:28:b8:d5:70:d4:81:3e:3c:1c:e4:7d:
a3:3f:40:58:3e:35:cf:5d:d3:16:49:77:bd:45:a1:
1c:39:70:8e:a5:a7:31:6a:c6:b1:11:9d:43:70:90:
51:75:72:e0:b3:e5:90:55:39:68:f8:72:4d:39:c5:
17:5f:3b:14:38:5c:92:10:ea:4e:48:95:d4:73:97:
ae:03:f6:55:96:12:bd:00:c5:06:ce:00:49:20:d7:
c7:b9:62:43:02:32:dc:80:af:26:38:af:d2:2f:d1:
13:c3:da:6a:0a:ea:a3:37:0e:69:0c:bd:c1:74:bb:
2b:17:14:fa:7c:6b:19:41:c5:1b:5b:b3:ca:b4:14:
d5:5f:a9:47:85:c9:61:c4:ff:49:30:40:a9:1c:12:
41:5c:54:d2:bf:07:a1:78:c8:58:ff:8b:7f:64:d1:
23:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:38:E7:0D:20:11:71:A1:F8:EF:2D:1E:E5:C7:6C:45:57:EB:AB:73
X509v3 Authority Key Identifier:
keyid:A2:4B:48:ED:C7:A3:25:D7:F1:AE:0F:25:7C:0E:28:35:17:1B:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oktI7cejJdfxrg8lfA4oNRcbya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/bjjnDSARcaH47y0e5cdsRVfrq3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/62afef-70d1-4fe2-9edf-7f1e57487c1a/1/oktI7cejJdfxrg8lfA4oNRcbya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.132.221.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:48:0b:5c:91:b3:9e:b9:44:b8:95:2a:0e:40:2b:45:77:99:
10:20:e4:ac:2b:cf:c5:0c:5a:25:c1:51:8c:12:7a:d7:5c:36:
4a:94:65:13:d0:3e:60:18:31:76:5f:a1:bc:ef:e4:d5:a3:0c:
aa:3e:c7:74:ef:06:63:c6:23:be:0d:2c:a0:df:ad:02:b7:3d:
41:9b:58:87:ba:0b:d5:84:45:b2:0c:cb:54:d6:23:c4:65:65:
b3:63:bb:1f:f7:e8:34:86:55:f4:dd:09:0d:60:b1:e2:94:cc:
04:fb:66:16:f2:ba:09:00:1e:f7:1f:b8:c7:77:dd:d9:c7:84:
9b:5f:8d:22:78:d9:69:b9:65:80:01:9e:38:96:d3:5b:a5:76:
56:24:8f:89:84:49:3a:76:40:29:d3:a3:12:07:af:22:85:8a:
c8:ad:e7:80:9b:ba:1d:58:d8:c9:40:8c:4f:82:24:6f:73:a1:
70:ab:48:b2:79:5d:7c:14:2d:04:dc:1c:5d:87:a9:be:b3:7a:
47:4e:e1:39:6e:56:a4:2f:ff:2b:93:7f:59:8b:62:e4:a0:4a:
81:8b:f0:fe:8c:dc:ee:ac:49:27:90:d5:e3:96:6d:8a:17:c2:
39:17:57:40:ec:9b:5c:5a:0b:1f:2e:9a:9d:48:10:d5:51:3a:
08:a4:21:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 23:50:41 2026 by rpki-client