Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/BP12kDUnrOn-M98454GfIKBpkdg.roa
File: BP12kDUnrOn-M98454GfIKBpkdg.roa (raw, json)
Hash identifier: ZGSS3G1o1g5i9zOobvqxYdhIQzQzsLy3DZLWvn5AyPU=
Subject key identifier: 04:FD:76:90:35:27:AC:E9:FE:33:DF:38:E7:81:9F:20:A0:69:91:D8
Certificate issuer: /CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Certificate serial: 01A03EB903E51625BB5CA06219CF5CE72481
Authority key identifier: 67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/BP12kDUnrOn-M98454GfIKBpkdg.roa
Signing time: Wed 26 Aug 2026 15:38:27 +0000
ROA not before: Wed 26 Aug 2026 15:38:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60385
IP address blocks: 87.238.139.0/24 maxlen: 24
185.18.248.0/24 maxlen: 24
185.18.249.0/24 maxlen: 24
185.18.250.0/24 maxlen: 24
185.18.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:b9:03:e5:16:25:bb:5c:a0:62:19:cf:5c:e7:24:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=672f0e42b08aa451fc583a358ec370ffbd2dac68
Validity
Not Before: Aug 26 15:38:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04fd76903527ace9fe33df38e7819f20a06991d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:72:3d:db:fd:0c:1e:e8:aa:d0:1b:a9:ff:c1:
b7:dc:16:b0:c6:91:ce:b6:7d:d5:24:13:10:78:db:
74:68:92:86:cb:24:34:71:6d:5e:c1:f7:c3:dc:94:
5c:db:78:f6:72:33:a5:ad:58:3f:25:ec:a3:b3:8c:
fa:94:f6:1f:bb:f3:ba:17:2f:53:d9:b2:55:54:63:
fe:cf:4d:45:2a:79:4e:48:fe:f0:d6:64:33:47:a0:
86:cd:0f:a6:e1:8e:d3:e4:ee:0e:a8:df:64:d6:5f:
c6:69:62:75:08:df:1e:1b:a5:82:54:4a:1d:1d:38:
7a:18:bc:33:e6:12:23:47:c2:9b:3d:b3:77:ba:ad:
ed:e0:c1:c9:47:84:e6:50:f8:b4:d7:73:e9:0e:03:
87:68:5c:af:92:df:43:d0:c1:ee:47:c7:67:8d:a9:
0a:aa:d2:64:0a:8b:ca:b2:7e:f4:35:46:72:7d:8f:
7b:7b:63:84:7f:e1:1d:18:39:aa:26:98:41:5b:64:
68:dd:33:c4:6a:f2:37:82:d2:fe:36:73:2d:db:be:
c8:d5:8d:f3:3e:d4:31:19:07:c7:91:2e:8e:ba:71:
ed:4d:ea:f2:6d:27:96:76:51:bd:40:61:be:24:71:
34:88:05:2a:45:d6:ec:7b:84:e6:bf:58:5c:2c:2d:
6b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:FD:76:90:35:27:AC:E9:FE:33:DF:38:E7:81:9F:20:A0:69:91:D8
X509v3 Authority Key Identifier:
keyid:67:2F:0E:42:B0:8A:A4:51:FC:58:3A:35:8E:C3:70:FF:BD:2D:AC:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zy8OQrCKpFH8WDo1jsNw_70trGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/BP12kDUnrOn-M98454GfIKBpkdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/59a6b9-cd20-4cd7-b4a7-f0b962f52414/1/Zy8OQrCKpFH8WDo1jsNw_70trGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.139.0/24
185.18.248.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:13:6a:5a:a4:92:3a:d5:78:97:ea:fa:51:0e:91:ad:59:b6:
89:5b:d9:57:9f:b4:c6:dd:a5:c3:d5:02:20:5b:a2:99:e9:8e:
1f:b6:7a:dc:e9:10:fc:cb:78:30:9c:41:55:01:98:2b:db:c1:
a3:38:d0:c6:3a:29:13:d7:75:bb:eb:e2:95:92:e9:ad:48:f3:
5c:af:12:11:dd:bb:01:26:45:7c:c2:94:9d:a6:1f:a7:99:61:
af:51:b4:f4:d4:f8:8d:51:0e:69:93:92:61:11:e8:0c:62:e3:
f6:70:bf:96:dc:11:99:cf:10:f8:c9:be:8d:2d:9d:31:2f:bd:
26:82:ef:88:40:60:7e:96:d6:f5:8a:81:73:5f:d2:55:74:ac:
44:e3:8f:e5:8f:db:f3:ca:aa:2d:d6:f3:18:2e:55:0b:f8:46:
92:63:63:ea:3d:05:67:c9:b3:55:db:a1:bd:e3:62:e5:13:30:
6e:c0:e8:18:23:d1:83:c1:af:2c:28:a7:a9:1d:d2:a7:61:ab:
24:d2:0e:e8:ee:f8:47:c6:4b:4e:e2:56:9b:b7:07:01:d3:f4:
51:f7:58:98:47:3f:4b:98:42:ca:4d:04:25:33:6e:8b:51:60:
fe:a9:dc:ae:b7:14:d5:65:56:cf:21:44:9c:a7:34:a6:9d:08:
5d:78:ce:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:05:52 2026 by rpki-client