Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/B2xA4r-YaWuzxF9e9Bejx8Nv8ow.roa
File: B2xA4r-YaWuzxF9e9Bejx8Nv8ow.roa (raw, json)
Hash identifier: BJSQF7U6lyI4DjZVMUaEYkHTgkb9afW2KgWbmWHAUr4=
Subject key identifier: 07:6C:40:E2:BF:98:69:6B:B3:C4:5F:5E:F4:17:A3:C7:C3:6F:F2:8C
Certificate issuer: /CN=05fdc4da5df3505f5f66c4061741c23a9ece0be7
Certificate serial: 019F23689EC46A9D01D8A8FE51B2A586DCFD
Authority key identifier: 05:FD:C4:DA:5D:F3:50:5F:5F:66:C4:06:17:41:C2:3A:9E:CE:0B:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/B2xA4r-YaWuzxF9e9Bejx8Nv8ow.roa
Signing time: Thu 02 Jul 2026 15:18:06 +0000
ROA not before: Thu 02 Jul 2026 15:18:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 680
IP address blocks: 192.82.241.0/24 maxlen: 24
193.24.80.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:9e:c4:6a:9d:01:d8:a8:fe:51:b2:a5:86:dc:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05fdc4da5df3505f5f66c4061741c23a9ece0be7
Validity
Not Before: Jul 2 15:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=076c40e2bf98696bb3c45f5ef417a3c7c36ff28c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1c:33:ce:14:54:18:52:ce:04:25:83:3c:87:
ad:9a:7e:6d:61:c0:d4:fc:bb:a2:2e:c5:e7:96:61:
ea:8b:6c:56:c0:ca:49:4b:22:83:59:73:cc:35:98:
46:11:9c:5a:67:81:2e:2c:89:6f:93:6d:5c:86:72:
31:7f:aa:f9:a9:af:e6:e2:44:b4:17:6f:12:f1:b0:
33:f9:d7:10:2f:fa:5a:15:4f:ba:8c:00:b4:3d:3a:
8c:2b:ce:a8:29:98:43:c8:c4:7e:29:f2:f5:97:e8:
16:11:d2:eb:65:cc:28:1a:fd:df:17:c2:2b:2e:d7:
be:7a:f9:8b:af:69:84:b5:51:d3:de:7f:5a:a1:b2:
92:44:8d:5a:c4:cc:07:5f:d8:21:51:56:e7:3c:32:
bc:0a:b6:49:e6:3d:21:b1:06:ac:15:7b:54:d8:ef:
5a:9c:20:31:59:6b:26:be:4b:f3:37:bd:57:9a:dd:
9f:5f:3d:94:e5:17:40:d3:4a:69:e9:35:d0:a8:ea:
dd:37:82:f5:3a:f5:03:53:ea:56:d8:fb:b6:45:48:
f7:ca:ee:f3:20:90:30:bb:2a:9b:48:53:05:ee:2b:
66:d5:ab:9d:29:a3:24:21:72:62:ab:26:1d:b9:4e:
85:61:79:17:55:f3:cf:aa:e7:a4:38:95:a3:2a:6b:
5e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:6C:40:E2:BF:98:69:6B:B3:C4:5F:5E:F4:17:A3:C7:C3:6F:F2:8C
X509v3 Authority Key Identifier:
keyid:05:FD:C4:DA:5D:F3:50:5F:5F:66:C4:06:17:41:C2:3A:9E:CE:0B:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/B2xA4r-YaWuzxF9e9Bejx8Nv8ow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/Bf3E2l3zUF9fZsQGF0HCOp7OC-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.82.241.0/24
193.24.80.0/21
Signature Algorithm: sha256WithRSAEncryption
80:a9:56:50:7f:fb:4d:d5:e4:77:5e:d3:38:29:8e:9f:8f:29:
fe:fc:ff:da:14:34:fe:cf:03:95:b9:a6:23:7b:b8:c7:8a:dd:
3d:4a:a0:4c:d7:7a:ed:6d:db:39:1e:9e:6d:42:2f:8b:8b:f5:
01:35:42:04:13:f7:f1:cd:26:86:98:3a:43:07:ae:62:6d:0e:
fa:0d:4a:83:3a:52:62:78:68:4e:49:37:b7:4c:8c:d4:38:6e:
f9:d0:2f:08:01:db:30:b6:a5:c6:79:21:bc:2b:18:18:ad:41:
e9:9b:45:f5:f4:0b:03:55:96:81:1e:97:85:8a:3d:83:a2:ca:
a5:9d:b1:69:27:78:10:5b:73:0d:31:ec:e3:00:97:a9:d2:e4:
4d:81:d9:9b:97:da:1b:fe:33:98:93:9b:bc:56:cc:8d:17:fd:
24:90:6a:6f:9c:1f:f4:27:dd:fe:1e:40:54:cf:6d:98:d2:64:
93:33:c5:57:39:15:27:69:7c:58:22:e7:c0:9f:a0:0e:ad:bf:
84:15:dd:80:c3:e7:94:db:2f:be:7d:33:10:52:b5:85:80:32:
53:a2:9e:39:69:5c:9f:c6:a3:3d:3f:b4:61:9a:63:98:ef:1a:
31:2e:e9:e0:4c:1f:9d:23:46:9b:7f:fe:4d:51:94:56:f1:09:
fe:7e:10:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:14:22 2026 by rpki-client