Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/BF3WjtoWV7SeqyCla_palKdMg6g.roa
File: BF3WjtoWV7SeqyCla_palKdMg6g.roa (raw, json)
Hash identifier: lssSLRQ8Q7glEDJp1LFC6m/izDhWz0xn3JM2yb5vgus=
Subject key identifier: 04:5D:D6:8E:DA:16:57:B4:9E:AB:20:A5:6B:FA:5A:94:A7:4C:83:A8
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F8E1DAF5C780C2BE6D355ACB23C5FE3FD
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/BF3WjtoWV7SeqyCla_palKdMg6g.roa
Signing time: Thu 23 Jul 2026 08:35:37 +0000
ROA not before: Thu 23 Jul 2026 08:35:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200169
IP address blocks: 78.154.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:59:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:1d:af:5c:78:0c:2b:e6:d3:55:ac:b2:3c:5f:e3:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 23 08:35:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=045dd68eda1657b49eab20a56bfa5a94a74c83a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:27:31:4c:90:88:52:cd:ec:50:0b:9f:a4:31:
d2:6d:90:83:73:ed:99:61:d9:59:44:a0:c8:c0:c2:
27:6f:36:7f:90:ff:e5:4d:70:64:50:8d:a2:00:cc:
e9:f5:f0:ae:51:f4:57:35:5a:b0:29:56:e4:a1:74:
78:ef:84:4a:f7:65:f5:60:b4:ed:e1:92:fe:75:d5:
eb:01:46:b4:25:c8:5a:e7:56:80:4b:24:ca:1e:71:
00:84:b9:e5:36:45:a4:90:e4:99:13:76:06:7d:27:
fe:d4:14:57:40:75:14:3f:e8:f6:55:82:cf:58:e7:
87:4d:cf:b0:57:57:68:a8:a4:c9:49:98:b5:9b:4b:
36:a3:29:f3:24:e7:f5:2e:fb:3e:b9:7c:ff:44:81:
09:69:a4:5f:9c:a5:b2:e8:95:49:eb:2a:2e:ff:c7:
cc:7e:72:3d:c0:b1:63:63:32:11:d0:b2:d4:c6:d7:
07:b4:62:48:1d:73:22:a3:29:f6:74:8b:e6:41:9a:
fb:b9:1e:b2:31:f6:1e:99:2c:fb:2d:7e:17:e7:46:
3d:23:10:ea:7c:c2:1c:4e:9e:2d:2a:d0:4b:33:4b:
e4:93:75:91:36:70:b1:6f:8a:df:e5:fa:c2:1d:f2:
ae:19:56:fe:28:d7:12:a0:86:6b:7d:2f:f7:d5:9c:
cf:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5D:D6:8E:DA:16:57:B4:9E:AB:20:A5:6B:FA:5A:94:A7:4C:83:A8
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/BF3WjtoWV7SeqyCla_palKdMg6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.154.114.0/24
Signature Algorithm: sha256WithRSAEncryption
49:df:9e:cc:22:0f:31:a1:22:d2:21:91:e5:eb:7c:df:6f:26:
a5:80:36:da:64:43:37:99:d5:04:c6:13:05:0f:dc:be:88:90:
b6:b4:8d:b8:2a:62:cd:b1:d1:e3:4f:1f:f4:c1:3c:e0:ab:3f:
32:d5:60:12:c7:50:61:00:e9:99:db:ef:4d:cb:f3:26:1f:82:
da:b4:7d:da:d3:1a:bd:d4:60:96:a3:2b:f8:fa:8f:24:cd:e7:
db:48:ae:86:a1:db:06:4c:cb:be:b4:d4:6a:5b:0f:8f:d5:67:
7d:1c:4e:0d:6d:f2:e9:8a:0b:3e:f5:23:d9:97:33:01:07:65:
5d:b3:a5:13:da:a8:14:b3:93:61:6b:92:ba:31:71:8f:d1:ae:
7a:87:58:2f:86:3f:08:90:46:87:ec:e8:42:b5:2b:a3:f3:3f:
4a:de:cd:89:3a:fc:6c:fb:f0:b8:25:f8:9c:e3:43:f2:4e:df:
c8:c9:dd:0d:99:5b:0e:31:29:1b:91:94:d8:7f:2c:4c:d2:49:
14:37:ea:6f:06:9b:8f:91:39:bf:e5:90:36:03:90:7f:74:39:
50:a0:0e:38:b8:c4:71:77:93:fb:cd:ec:6d:a3:46:cf:d5:4c:
26:e3:7c:02:51:2b:b6:69:d6:0c:55:66:ad:4f:4d:a4:90:0a:
bf:ec:a6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:25:15 2026 by rpki-client