Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/bdlGew9HpYI1DB2bRx2omQSvv3k.roa
File: bdlGew9HpYI1DB2bRx2omQSvv3k.roa (raw, json)
Hash identifier: jVc7jDsAgJp6NFCHEUd8hmbhRfzZi/N70RVFxzIvxJU=
Subject key identifier: 6D:D9:46:7B:0F:47:A5:82:35:0C:1D:9B:47:1D:A8:99:04:AF:BF:79
Certificate issuer: /CN=ca4ebd6151f1bf38dc57a3a24dbb5edc5a6bf967
Certificate serial: 019F236919A8D5158A3886B8353AB11CCC39
Authority key identifier: CA:4E:BD:61:51:F1:BF:38:DC:57:A3:A2:4D:BB:5E:DC:5A:6B:F9:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yk69YVHxvzjcV6OiTbte3Fpr-Wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/bdlGew9HpYI1DB2bRx2omQSvv3k.roa
Signing time: Thu 02 Jul 2026 15:18:38 +0000
ROA not before: Thu 02 Jul 2026 15:18:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3292
IP address blocks: 185.72.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/yk69YVHxvzjcV6OiTbte3Fpr-Wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/yk69YVHxvzjcV6OiTbte3Fpr-Wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/yk69YVHxvzjcV6OiTbte3Fpr-Wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:19:a8:d5:15:8a:38:86:b8:35:3a:b1:1c:cc:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca4ebd6151f1bf38dc57a3a24dbb5edc5a6bf967
Validity
Not Before: Jul 2 15:18:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6dd9467b0f47a582350c1d9b471da89904afbf79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:89:6c:9b:e8:1f:01:61:28:84:f8:e8:6d:b6:
fa:ed:52:2e:73:de:c4:37:68:a1:80:01:a1:d5:3d:
8c:d8:be:61:8e:f7:59:57:71:32:20:0a:b7:e5:f3:
d8:c0:d3:3d:32:f2:d1:04:60:f9:b4:7a:cc:9d:a2:
39:47:c1:01:45:09:b6:5a:a3:80:c0:ea:a1:af:e4:
36:05:03:17:69:44:7d:8c:4d:17:7e:7a:1d:46:b4:
db:e3:43:01:af:c9:ed:0e:9a:ae:1c:40:ad:dd:07:
cf:84:40:35:f5:fa:0e:10:77:d2:02:97:65:4b:ca:
cd:95:5c:38:bb:a3:3b:7b:9d:3d:6b:b4:02:f7:30:
80:84:42:eb:b0:d6:79:61:c9:4e:87:9e:bc:0c:75:
f1:8d:c5:60:59:ff:e5:6e:67:d6:63:2a:0a:e5:83:
d1:80:5c:f2:fe:8f:f0:e4:8d:f9:65:5c:2a:a7:d2:
a5:6e:c2:e3:20:21:ad:2a:81:f3:54:70:fd:20:9b:
bf:93:10:e8:52:71:a0:34:32:2f:a5:21:ca:cc:48:
1e:d8:7b:ff:c3:25:6f:c5:a3:61:f6:fd:36:7f:f3:
f4:f2:2e:4f:74:2d:29:3e:e7:21:bd:06:4b:07:eb:
cf:37:df:97:18:bf:13:a5:59:f7:df:d1:24:2f:b7:
5f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D9:46:7B:0F:47:A5:82:35:0C:1D:9B:47:1D:A8:99:04:AF:BF:79
X509v3 Authority Key Identifier:
keyid:CA:4E:BD:61:51:F1:BF:38:DC:57:A3:A2:4D:BB:5E:DC:5A:6B:F9:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yk69YVHxvzjcV6OiTbte3Fpr-Wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/bdlGew9HpYI1DB2bRx2omQSvv3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b7b933-7e80-4b37-a285-130e4dc015ab/1/yk69YVHxvzjcV6OiTbte3Fpr-Wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.142.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:78:2e:35:e6:6d:13:80:30:27:c0:a6:7d:2e:23:a4:04:87:
c7:37:a9:86:59:ba:91:26:3b:08:1d:4f:35:2c:65:2d:5d:e8:
5f:08:16:e1:22:e4:e4:89:85:88:43:c5:21:92:19:7c:d8:4c:
47:b1:d2:c3:80:d8:4a:1a:e0:f0:0a:3c:6a:1e:20:31:12:ef:
bf:dc:2c:38:37:18:3a:6f:95:14:f8:18:eb:90:8a:76:a6:2f:
41:fd:ab:74:d6:72:5a:09:08:64:5d:1f:0a:a2:59:21:c4:26:
02:8a:32:e5:e1:94:d4:82:4c:d9:bb:21:dc:0d:f0:ea:51:47:
9e:b1:5b:0c:80:d8:3d:4d:71:2f:78:e8:26:ad:6f:49:d2:5f:
45:ec:0d:89:52:c4:81:5d:d0:a9:e5:74:8a:44:32:86:86:5d:
20:4b:d3:6e:1d:33:9c:df:13:8a:00:83:ff:c0:58:03:e3:e5:
32:05:7d:33:55:20:4c:3f:0a:08:0b:35:3d:4f:46:e0:a7:2f:
d2:e1:d0:a6:c2:85:81:2d:cd:7e:b5:6b:ff:8f:3d:26:0a:b2:
b4:ee:0a:76:a6:50:96:2f:6a:eb:b1:7f:28:4e:e5:34:6c:59:
ea:a7:dc:bb:36:e4:cc:81:26:30:aa:c9:45:9d:7a:93:96:96:
79:af:df:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:58:06 2026 by rpki-client