Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/Bsq7GMA1R2db894oU-s06fODnuo.roa
File: Bsq7GMA1R2db894oU-s06fODnuo.roa (raw, json)
Hash identifier: LpPlfP14MavJ3ktPMvPatzDAq6hmOJSWZygOY9GTomM=
Subject key identifier: 06:CA:BB:18:C0:35:47:67:5B:F3:DE:28:53:EB:34:E9:F3:83:9E:EA
Certificate issuer: /CN=e7fa8e4c9156c0d82a333268ad2de1f516cbb728
Certificate serial: 019F2368D5BA291D17A794D484611273EED2
Authority key identifier: E7:FA:8E:4C:91:56:C0:D8:2A:33:32:68:AD:2D:E1:F5:16:CB:B7:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_qOTJFWwNgqMzJorS3h9RbLtyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/Bsq7GMA1R2db894oU-s06fODnuo.roa
Signing time: Thu 02 Jul 2026 15:18:20 +0000
ROA not before: Thu 02 Jul 2026 15:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24971
IP address blocks: 193.169.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/5_qOTJFWwNgqMzJorS3h9RbLtyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/5_qOTJFWwNgqMzJorS3h9RbLtyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/5_qOTJFWwNgqMzJorS3h9RbLtyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d5:ba:29:1d:17:a7:94:d4:84:61:12:73:ee:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7fa8e4c9156c0d82a333268ad2de1f516cbb728
Validity
Not Before: Jul 2 15:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06cabb18c03547675bf3de2853eb34e9f3839eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c1:7b:ee:6d:47:cb:bd:75:78:2f:81:bd:d2:
97:e8:b7:eb:2f:7c:fd:6e:7d:52:7f:d3:2f:0d:e8:
38:ee:c6:fb:7b:8e:af:6f:58:28:76:98:c2:4f:e5:
97:91:c9:4c:b3:c4:cc:af:a4:87:8b:1b:10:b6:55:
cb:46:c9:26:f2:0b:16:dc:40:37:d7:06:82:de:51:
6c:71:d5:73:d0:0a:12:fb:8e:15:17:a1:21:06:69:
b1:6a:f9:4a:2f:3f:18:1a:9a:3e:01:93:75:46:9a:
4f:fb:aa:13:e6:04:db:23:2e:c0:22:65:e0:c5:b5:
d8:b1:89:c2:4d:96:74:1b:5a:a7:ee:98:13:26:6c:
e2:bc:8a:54:cb:27:b8:12:20:ac:ae:34:d8:59:a6:
00:e9:2e:16:ea:51:3d:e9:67:df:76:1d:8e:48:ab:
60:1f:0e:a1:84:be:36:e4:af:5a:34:72:dc:cc:8d:
69:fe:42:40:2c:f3:09:39:11:e9:ca:49:3b:26:4f:
d7:2d:da:45:83:a2:32:ba:6b:f6:32:be:5a:61:58:
02:59:3b:53:e5:ce:ce:77:3c:e9:05:67:f8:29:1c:
2a:13:5f:ef:29:40:c6:77:1f:cd:ca:b2:d8:fe:46:
a3:14:ec:3e:7f:5e:bd:40:21:47:4c:90:ba:8e:61:
4d:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CA:BB:18:C0:35:47:67:5B:F3:DE:28:53:EB:34:E9:F3:83:9E:EA
X509v3 Authority Key Identifier:
keyid:E7:FA:8E:4C:91:56:C0:D8:2A:33:32:68:AD:2D:E1:F5:16:CB:B7:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_qOTJFWwNgqMzJorS3h9RbLtyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/Bsq7GMA1R2db894oU-s06fODnuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/549b43-396d-4b36-98d6-7c1a6447b0f7/1/5_qOTJFWwNgqMzJorS3h9RbLtyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.212.0/24
Signature Algorithm: sha256WithRSAEncryption
86:95:7f:d4:6d:ff:3a:47:7e:a4:d0:33:b1:cf:95:12:61:8a:
f4:22:9c:e5:01:85:12:e0:b3:09:f2:a2:7e:7e:c3:33:2b:b5:
1a:0f:0a:3e:f4:1f:7f:b7:f2:43:cf:53:28:4b:1f:33:3e:1a:
92:6a:ec:47:23:06:89:ee:b2:88:7a:f3:bd:62:60:08:4a:5f:
b8:f7:45:7d:07:98:0b:a3:0d:61:46:b3:62:d4:9c:32:48:4d:
d2:59:cc:ab:32:c1:b1:ad:6e:fb:00:d1:62:cf:0f:77:82:59:
b0:5f:7c:e4:8e:e7:27:03:8a:3c:c4:e8:c5:86:6e:e4:8d:d7:
ce:16:53:ea:3b:66:f3:af:c8:f9:b0:92:92:6f:8e:36:90:91:
59:6c:b1:19:38:30:1e:18:9b:42:9f:1d:20:40:4b:d9:51:38:
8a:0f:e8:1b:b2:58:99:03:be:26:18:2e:26:2c:2c:aa:07:77:
bd:63:65:87:20:2e:08:65:3e:7a:77:46:dd:c8:49:00:fd:ba:
6b:6e:84:bf:70:56:8c:8c:51:c9:3f:6d:b5:33:1e:95:01:3c:
d9:35:04:f7:a0:78:47:4c:82:f6:7d:c4:ea:a2:b5:b5:75:c9:
58:ee:89:58:8d:5c:19:46:3f:38:90:4c:3e:da:71:b1:b8:2b:
1d:cd:e3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:34:03 2026 by rpki-client