Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/baf5f6-71b5-44a5-9d41-fd7212ae1706/1/bLRnj4DV0VoC1q-ux4rlxSo1XVE.roa
File: bLRnj4DV0VoC1q-ux4rlxSo1XVE.roa (raw, json)
Hash identifier: U38078oK/iuU4lPi1x66qkSu379rVBdEVFczLSBZpeg=
Subject key identifier: 6C:B4:67:8F:80:D5:D1:5A:02:D6:AF:AE:C7:8A:E5:C5:2A:35:5D:51
Certificate issuer: /CN=06459514cce8ce7d47643ca2f30e06edfe6496f2
Certificate serial: 01A062B195707B5A943003F26AF2FD305DA2
Authority key identifier: 06:45:95:14:CC:E8:CE:7D:47:64:3C:A2:F3:0E:06:ED:FE:64:96:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkWVFMzozn1HZDyi8w4G7f5klvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/baf5f6-71b5-44a5-9d41-fd7212ae1706/1/bLRnj4DV0VoC1q-ux4rlxSo1XVE.roa
Signing time: Wed 02 Sep 2026 15:16:40 +0000
ROA not before: Wed 02 Sep 2026 15:16:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219373
IP address blocks: 45.130.216.0/23 maxlen: 23
2a02:5ec0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/baf5f6-71b5-44a5-9d41-fd7212ae1706/1/BkWVFMzozn1HZDyi8w4G7f5klvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/baf5f6-71b5-44a5-9d41-fd7212ae1706/1/BkWVFMzozn1HZDyi8w4G7f5klvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BkWVFMzozn1HZDyi8w4G7f5klvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 09:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:b1:95:70:7b:5a:94:30:03:f2:6a:f2:fd:30:5d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06459514cce8ce7d47643ca2f30e06edfe6496f2
Validity
Not Before: Sep 2 15:16:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6cb4678f80d5d15a02d6afaec78ae5c52a355d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e7:4b:a0:bd:f4:93:69:49:df:46:9f:f7:52:
f0:39:37:1e:de:34:c4:51:f8:e4:fe:6c:10:8c:2a:
d0:2f:5d:8e:e0:bb:98:16:e8:80:f0:33:27:5d:3e:
5a:d7:f0:ad:d2:b7:05:8f:33:30:52:7d:c8:bf:84:
05:84:19:34:b5:35:bf:79:6f:83:69:4a:72:c0:c6:
95:7d:88:a2:86:74:b6:84:ad:dd:83:71:1e:78:42:
64:29:86:0f:6e:ec:bd:a4:2d:0c:f9:73:a3:c5:e7:
ff:9c:84:a2:fb:d4:cf:ad:5b:eb:e1:60:3b:97:f2:
68:f0:15:c2:cd:00:98:73:07:17:56:63:16:87:81:
ad:56:b0:11:d2:3e:bd:3f:cc:9d:35:48:f1:a0:df:
a6:bd:81:c9:24:33:b3:10:9f:dc:86:8a:3b:6c:ee:
c5:a9:b6:83:09:70:4d:82:13:ab:84:c1:ad:d7:77:
2a:f4:7a:f7:a5:b4:6b:6c:7c:18:fb:da:d9:a3:df:
67:1b:c8:28:77:02:63:5b:70:0a:56:d6:b9:42:c5:
22:db:80:bd:ca:a5:b8:71:cc:0d:f7:d4:fb:85:06:
cf:4c:17:fa:d9:79:d0:85:08:27:b1:74:16:05:bc:
30:fa:44:fb:1a:4e:6b:ea:a2:30:98:55:ed:7e:42:
b1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B4:67:8F:80:D5:D1:5A:02:D6:AF:AE:C7:8A:E5:C5:2A:35:5D:51
X509v3 Authority Key Identifier:
keyid:06:45:95:14:CC:E8:CE:7D:47:64:3C:A2:F3:0E:06:ED:FE:64:96:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkWVFMzozn1HZDyi8w4G7f5klvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/baf5f6-71b5-44a5-9d41-fd7212ae1706/1/bLRnj4DV0VoC1q-ux4rlxSo1XVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/baf5f6-71b5-44a5-9d41-fd7212ae1706/1/BkWVFMzozn1HZDyi8w4G7f5klvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.216.0/23
IPv6:
2a02:5ec0::/48
Signature Algorithm: sha256WithRSAEncryption
b3:5c:47:a4:e8:74:45:cd:90:43:3c:b0:0b:36:03:ba:7a:1c:
36:4b:5b:00:5b:e2:56:cf:f7:5b:2f:3f:8e:cd:c3:79:0b:9a:
6b:72:80:de:7d:c0:19:4b:28:b6:38:98:42:3e:00:16:d4:13:
fc:63:f3:17:02:28:7a:cd:0f:5a:f4:4f:b5:a6:63:82:c7:35:
95:04:69:33:57:30:7f:5a:69:b5:8e:c9:a2:2b:58:96:5e:f4:
a4:ec:f2:5c:e0:57:c2:54:a9:82:51:c3:d2:ff:80:17:c2:42:
7d:05:ea:82:34:59:40:b1:bc:a9:e7:a1:bf:44:3d:bd:c0:10:
e0:31:69:b7:fa:bb:e2:9e:48:80:97:b7:aa:60:46:4b:d2:f9:
87:cf:cf:1b:c2:61:97:bc:17:ad:0a:59:d7:83:02:7f:74:73:
83:3e:b1:ee:18:5a:77:79:9e:cc:32:55:a1:a2:55:19:93:5b:
3b:19:9e:7b:6d:45:fa:e4:ef:cd:37:92:7d:70:23:71:aa:f9:
1e:f6:7d:cb:2a:4c:91:16:85:e1:e8:e8:66:27:6e:8c:80:f7:
9b:29:26:e2:5d:a1:2f:a8:94:3c:8d:5c:e5:76:dc:ae:20:6d:
5a:8b:ce:d7:45:6a:d9:a1:de:5c:c5:93:d3:9b:c3:5d:8d:05:
bf:4b:a1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:01:18 2026 by rpki-client