Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/BPt6RAa7ENrJmkVCFGkolciZ5ow.roa
File: BPt6RAa7ENrJmkVCFGkolciZ5ow.roa (raw, json)
Hash identifier: Qu8fUjGy1xxsRwZtDqrZ7qwLZ/hB6gVPADzDVKSoBIk=
Subject key identifier: 04:FB:7A:44:06:BB:10:DA:C9:9A:45:42:14:69:28:95:C8:99:E6:8C
Certificate issuer: /CN=958b3a784924ef7995d7af1fbd176788a6c2b754
Certificate serial: 019F23689749849ECF40B48C4E7D7F98B6DB
Authority key identifier: 95:8B:3A:78:49:24:EF:79:95:D7:AF:1F:BD:17:67:88:A6:C2:B7:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYs6eEkk73mV168fvRdniKbCt1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/BPt6RAa7ENrJmkVCFGkolciZ5ow.roa
Signing time: Thu 02 Jul 2026 15:18:04 +0000
ROA not before: Thu 02 Jul 2026 15:18:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61148
IP address blocks: 185.48.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYs6eEkk73mV168fvRdniKbCt1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:97:49:84:9e:cf:40:b4:8c:4e:7d:7f:98:b6:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=958b3a784924ef7995d7af1fbd176788a6c2b754
Validity
Not Before: Jul 2 15:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04fb7a4406bb10dac99a454214692895c899e68c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:17:ad:2b:12:ae:2b:a2:13:84:59:7e:29:83:
bc:0e:ef:0e:cf:5f:b4:3b:d0:70:6f:09:b8:97:e7:
e8:66:5d:16:b4:47:91:b0:2a:c0:18:7d:01:c1:a5:
0c:ea:2f:7e:df:0f:d8:9d:ad:20:18:b8:46:a2:ae:
67:b2:6f:8d:e1:39:1f:43:eb:76:97:38:84:39:e1:
7d:5b:30:4b:8e:07:f9:d6:16:1e:de:60:bc:7d:9c:
c5:04:95:2c:af:ed:25:93:9f:3f:9e:a2:0c:49:83:
3a:b2:c4:03:40:8b:19:10:4d:1d:39:9a:5c:cc:cc:
a3:86:e8:a8:b1:93:5d:89:be:59:5f:58:59:20:eb:
15:a9:c7:dd:3b:a5:cc:b6:e4:77:0e:6c:ba:2f:0e:
80:4f:10:3f:19:1f:c0:b6:86:4c:53:e9:aa:0f:00:
f2:84:2d:cb:bc:5e:1d:73:dd:13:41:ea:1a:d2:84:
ce:d3:37:92:1e:ec:15:34:d3:fc:aa:41:c2:21:92:
4d:07:2f:88:08:dc:a6:a1:78:98:41:50:fe:b4:ce:
27:0a:3a:ec:b7:3a:ac:00:98:da:05:45:10:e4:a2:
a8:6d:b1:f4:13:2f:73:66:6d:03:c3:90:5e:33:e6:
20:ee:dd:34:a4:85:49:0e:cf:e8:1c:fe:80:05:a4:
e8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FB:7A:44:06:BB:10:DA:C9:9A:45:42:14:69:28:95:C8:99:E6:8C
X509v3 Authority Key Identifier:
keyid:95:8B:3A:78:49:24:EF:79:95:D7:AF:1F:BD:17:67:88:A6:C2:B7:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYs6eEkk73mV168fvRdniKbCt1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/BPt6RAa7ENrJmkVCFGkolciZ5ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/f13f98-4e7a-435d-b1b0-8386e70bdc58/1/lYs6eEkk73mV168fvRdniKbCt1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.24.0/24
Signature Algorithm: sha256WithRSAEncryption
44:8c:5d:24:66:52:61:89:d3:7e:1d:8c:b5:af:7c:b5:bf:da:
db:b0:d8:aa:b3:8d:86:45:43:8d:97:09:b8:8a:5e:8f:ad:ec:
9d:20:31:67:b7:82:5c:ec:51:7e:37:cc:8f:26:c5:7e:03:a5:
87:ad:00:93:01:40:b9:85:84:3c:5e:34:46:0b:51:06:db:3c:
de:c9:05:d9:af:99:b2:a1:8d:66:0b:94:a2:29:31:25:01:00:
5c:f5:6a:86:3d:11:da:67:3e:1e:61:e7:8c:c9:8d:f6:1a:63:
2d:89:c7:09:d7:e8:70:e9:b4:89:38:eb:05:9c:ad:8d:d6:8e:
e3:52:66:5d:3a:d0:5a:05:82:91:b8:58:51:50:05:fa:69:c0:
6b:c2:ca:0d:3c:55:17:42:c9:03:b3:f9:31:f3:4d:87:47:70:
ab:1e:ba:63:b7:3b:e0:60:fb:7a:3e:d5:2f:93:da:db:e6:b0:
2c:b4:a4:14:a3:78:4f:88:4f:4d:36:db:42:99:f5:d4:5a:e0:
8d:30:cc:08:03:de:fa:8d:6f:fe:59:63:ec:3b:bb:8e:4f:43:
1b:96:76:ea:6a:12:85:70:a7:ba:c7:d7:a0:63:88:85:8f:7b:
66:f3:44:01:8d:2e:a9:ee:be:34:d0:01:7c:48:4d:94:c0:e4:
71:6b:b5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:35 2026 by rpki-client