Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/bLGW5oFoE9lHxEwfUnmfEezDiaQ.roa
File: bLGW5oFoE9lHxEwfUnmfEezDiaQ.roa (raw, json)
Hash identifier: 89VC+JQroz5pfLqhLndywIaiWeTC5Q/suOXzfW4hA/g=
Subject key identifier: 6C:B1:96:E6:81:68:13:D9:47:C4:4C:1F:52:79:9F:11:EC:C3:89:A4
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A1AC066BAB7B9078BEE01533FE6D8422EE
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/bLGW5oFoE9lHxEwfUnmfEezDiaQ.roa
Signing time: Thu 05 Nov 2026 14:04:24 +0000
ROA not before: Thu 05 Nov 2026 14:04:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395954
IP address blocks: 217.79.98.0/24 maxlen: 24
217.207.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ac:06:6b:ab:7b:90:78:be:e0:15:33:fe:6d:84:22:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Nov 5 14:04:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6cb196e6816813d947c44c1f52799f11ecc389a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1d:f1:1a:80:2e:cb:f0:86:93:e8:e2:72:97:
2e:71:fb:05:be:d4:36:77:77:71:b2:cb:5e:2b:2d:
97:28:f4:ba:69:9a:95:4b:76:85:e7:99:9b:a7:72:
c0:a2:30:99:a3:a1:d7:a3:24:b2:33:89:ac:a6:6d:
7c:9a:7f:b2:49:15:72:59:9b:e2:33:e8:87:a1:86:
40:70:9c:e8:cb:ca:50:3b:63:83:9a:82:86:c1:20:
1f:c8:3a:a2:0d:f1:dd:88:2b:85:39:b7:c9:f7:1c:
28:8f:8e:e4:bf:a5:f0:c0:d6:3a:12:9e:ca:ea:a0:
04:87:23:f3:a4:a4:ab:69:08:4c:02:0c:6f:6c:b5:
96:ce:79:9b:ab:3c:af:24:3d:06:ae:e5:7f:09:e8:
17:61:a6:e3:2e:4a:9a:86:73:06:59:ab:fb:49:34:
56:45:dd:9b:b4:5d:1a:41:96:f6:48:5c:c0:d0:94:
0e:d4:48:6d:c3:41:ef:be:33:58:a9:66:c6:4e:42:
05:30:f0:7f:cd:1d:c1:c5:76:d2:d1:31:16:06:4c:
61:c2:ef:88:bb:02:d8:59:6c:b3:3d:c1:2d:0b:5f:
94:7e:34:7a:a7:25:7e:6c:3a:fd:ca:dd:53:54:09:
5f:98:51:78:74:a2:ba:a9:e2:d1:74:74:79:69:7b:
04:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B1:96:E6:81:68:13:D9:47:C4:4C:1F:52:79:9F:11:EC:C3:89:A4
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/bLGW5oFoE9lHxEwfUnmfEezDiaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.79.98.0/24
217.207.101.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:40:c4:5a:27:b7:45:e0:5e:de:9b:d6:5f:9d:1d:aa:fd:2e:
0c:e6:ab:36:47:9a:be:34:0b:cb:70:aa:16:a3:f9:c9:aa:a8:
cb:5c:e5:92:38:a6:40:7c:04:ef:40:86:1e:28:d5:47:79:cb:
6c:69:50:0c:9d:76:ad:ad:34:2b:06:3e:d5:6f:cb:de:cc:28:
26:5e:95:c9:a8:16:57:cc:4f:52:41:95:6e:98:aa:7d:59:0c:
3e:4e:c6:47:99:5e:34:be:1a:24:25:5b:65:3b:f8:73:79:b3:
4b:e5:0f:31:b0:1d:40:83:9a:71:54:76:c3:29:dc:e8:66:23:
65:41:d8:9a:68:ed:cb:55:ef:85:46:92:45:b0:1f:12:27:09:
ed:b8:a0:b4:e8:b3:13:37:f6:09:c5:59:13:4a:10:22:4a:e6:
e8:ac:59:99:de:e1:5a:70:34:07:68:1a:2a:05:2b:6f:0e:bb:
50:40:70:82:83:e9:15:20:94:00:5e:8a:b9:09:4f:fe:49:d3:
a4:90:63:ae:37:ca:70:9f:8d:d0:23:d7:14:4c:cc:73:7e:cb:
ff:d2:c2:ce:c4:c7:33:f0:f6:9c:bc:07:4a:4e:8b:76:39:48:
a8:e6:13:ed:04:3b:75:81:c8:55:b3:92:de:dc:d6:c8:3e:7b:
0b:c0:88:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:55:35 2026 by rpki-client