Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/BL9BKwYvvr4PQi4Olmvs_SJfdIU.roa
File: BL9BKwYvvr4PQi4Olmvs_SJfdIU.roa (raw, json)
Hash identifier: PQRLVCa1vMzlo4kwd2qwNYT39XsjM74Jew0dEax8fpk=
Subject key identifier: 04:BF:41:2B:06:2F:BE:BE:0F:42:2E:0E:96:6B:EC:FD:22:5F:74:85
Certificate issuer: /CN=15403e157c82f75efa7c54a9bc7d0d1bf01b1cae
Certificate serial: 019EC27ED16BBB645B1654978D2D1A17E08D
Authority key identifier: 15:40:3E:15:7C:82:F7:5E:FA:7C:54:A9:BC:7D:0D:1B:F0:1B:1C:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/BL9BKwYvvr4PQi4Olmvs_SJfdIU.roa
Signing time: Sat 13 Jun 2026 19:39:11 +0000
ROA not before: Sat 13 Jun 2026 19:39:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 398436
IP address blocks: 91.239.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:7e:d1:6b:bb:64:5b:16:54:97:8d:2d:1a:17:e0:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15403e157c82f75efa7c54a9bc7d0d1bf01b1cae
Validity
Not Before: Jun 13 19:39:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04bf412b062fbebe0f422e0e966becfd225f7485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7c:f3:d7:cf:8f:fc:6a:ba:ef:06:3d:47:da:
40:f2:5e:6c:0f:34:f2:4a:29:e8:3a:96:37:c9:bf:
ae:a0:c8:dc:f4:b0:c0:0f:26:c8:39:4f:1c:51:d1:
0e:2d:d2:ec:af:e4:c2:c4:65:cd:c8:6e:e7:f7:e2:
51:03:b2:14:58:1b:5b:18:4f:a6:cc:17:86:d8:c0:
2e:df:24:1a:eb:c0:df:a4:5f:a9:5b:f8:8b:f0:23:
d5:be:a6:7c:ea:92:7c:54:e2:a5:93:13:45:51:cd:
ab:f9:f2:f5:66:ad:b8:07:6d:0a:cb:b9:cd:2a:30:
f2:4e:31:64:96:31:73:25:81:9a:7e:6c:ba:73:77:
9f:a8:12:42:0e:0e:2f:3c:0b:ef:f3:44:d7:64:1c:
c3:b3:a5:67:0d:31:72:73:d3:fa:f8:8a:00:24:53:
58:c9:73:97:32:4c:98:e7:08:19:d5:d6:f1:ee:60:
70:fc:45:bf:8c:0b:b9:ef:4c:d0:ab:2c:67:6e:92:
d2:6b:d5:0e:fc:2e:9f:a9:6f:75:5d:06:26:57:af:
1a:d1:db:18:43:c0:c2:c9:78:bf:74:62:cd:6d:33:
d5:8e:f5:86:bc:ad:57:99:fb:33:f2:4b:38:58:17:
ec:f5:cb:8b:fb:4a:62:50:e1:6d:b2:71:b1:a1:af:
35:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BF:41:2B:06:2F:BE:BE:0F:42:2E:0E:96:6B:EC:FD:22:5F:74:85
X509v3 Authority Key Identifier:
keyid:15:40:3E:15:7C:82:F7:5E:FA:7C:54:A9:BC:7D:0D:1B:F0:1B:1C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/BL9BKwYvvr4PQi4Olmvs_SJfdIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.187.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:3e:a6:a7:dd:04:1e:d6:65:af:0e:b9:49:16:6b:39:69:98:
2a:83:a8:3f:88:16:68:eb:d0:f2:a4:15:92:32:4f:97:9e:dc:
44:12:5f:07:e5:cb:8f:b0:3f:44:2a:47:8e:35:b5:18:14:e9:
71:ce:7a:8b:ee:21:c7:70:7b:55:35:9e:64:a3:15:ce:dc:38:
7f:9d:21:3e:ea:32:10:b4:67:62:1d:cd:44:b3:d3:69:31:37:
ef:51:cd:ce:b9:26:7d:36:49:89:06:b4:02:f7:84:55:41:b1:
73:e1:b4:0b:e3:b6:6c:aa:05:d1:80:3d:84:1b:57:46:a1:b1:
7e:3a:06:9e:a3:6c:64:57:b7:77:ba:59:ed:3a:9a:da:e4:b4:
b6:a9:ba:94:c7:d4:da:54:e5:74:15:97:5e:80:84:c7:bf:5c:
46:7c:5c:cd:09:eb:c9:cc:07:7e:1d:61:9e:c3:55:51:b8:4d:
f4:c3:d1:02:fb:0d:0e:aa:1f:71:c6:89:03:aa:af:c1:02:f5:
0f:5e:95:29:1b:80:3d:9b:81:23:9c:8f:aa:69:4e:1e:d1:cc:
e7:44:bb:50:2c:98:2f:5d:2a:4a:10:4d:23:66:0a:53:5d:86:
93:ff:47:b5:bb:27:9f:10:6f:7b:a6:6d:41:a7:3a:4f:02:d7:
fa:25:63:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:33:31 2026 by rpki-client