Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/bvj9iSBoXF6ndPS0-HZFlEnjAxU.roa
File: bvj9iSBoXF6ndPS0-HZFlEnjAxU.roa (raw, json)
Hash identifier: lBB5Odzyvh5nKD/C1RW7B6x47On/HRtVSMAEuHMOdHU=
Subject key identifier: 6E:F8:FD:89:20:68:5C:5E:A7:74:F4:B4:F8:76:45:94:49:E3:03:15
Certificate issuer: /CN=525b705a91dbc30ed10eb7222b7797b834e01863
Certificate serial: 019F90514A9D188647E4584C1E70E3E0AB3C
Authority key identifier: 52:5B:70:5A:91:DB:C3:0E:D1:0E:B7:22:2B:77:97:B8:34:E0:18:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/bvj9iSBoXF6ndPS0-HZFlEnjAxU.roa
Signing time: Thu 23 Jul 2026 18:51:14 +0000
ROA not before: Thu 23 Jul 2026 18:51:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215105
IP address blocks: 185.236.242.0/23 maxlen: 24
2a0d:eb02::/32 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:51:4a:9d:18:86:47:e4:58:4c:1e:70:e3:e0:ab:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525b705a91dbc30ed10eb7222b7797b834e01863
Validity
Not Before: Jul 23 18:51:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ef8fd8920685c5ea774f4b4f876459449e30315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b1:cf:5f:55:e1:72:6f:bf:e7:23:7b:2a:8e:
24:4f:06:d7:8e:f3:d8:3f:13:ff:a4:3f:92:2b:c2:
5b:8d:45:8c:ef:2d:7d:31:59:b4:fa:60:db:59:1a:
ce:4b:86:4d:29:62:9c:ed:44:c0:76:62:22:44:98:
b7:2b:a5:df:cb:4c:9f:1a:a8:c1:e9:b1:bd:7f:9a:
4c:c2:45:dc:a5:c3:9d:f4:bb:8c:84:7d:fb:eb:76:
1c:9f:8f:24:c0:cc:cb:5c:c1:5e:21:34:c9:ab:52:
19:a1:91:54:fa:0b:38:7b:08:8b:ee:50:33:17:02:
74:37:78:37:17:0d:6c:86:62:95:88:42:48:c1:fc:
7b:33:7c:2f:fa:fb:23:86:3e:eb:95:95:c1:fa:07:
34:d2:2f:0a:f9:24:2d:b1:62:55:26:e1:ed:68:c4:
b8:62:11:fe:41:a6:2c:d7:7c:b6:be:65:4d:d0:11:
4c:d0:60:f4:66:b0:12:82:bb:8a:20:b2:19:da:01:
cc:7c:d2:6d:43:b8:33:da:ac:87:07:f0:72:38:ec:
f0:e1:2f:c9:79:50:a6:95:aa:67:9b:aa:a4:e1:1e:
0b:75:19:10:4c:d0:44:f9:20:1e:27:7f:f5:73:2b:
fb:7a:4a:a2:0f:40:df:e8:7d:db:79:c3:bc:56:3c:
95:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F8:FD:89:20:68:5C:5E:A7:74:F4:B4:F8:76:45:94:49:E3:03:15
X509v3 Authority Key Identifier:
keyid:52:5B:70:5A:91:DB:C3:0E:D1:0E:B7:22:2B:77:97:B8:34:E0:18:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UltwWpHbww7RDrciK3eXuDTgGGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/bvj9iSBoXF6ndPS0-HZFlEnjAxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/f462dc-9e59-4e8d-9c6d-f46887df9863/1/UltwWpHbww7RDrciK3eXuDTgGGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.242.0/23
IPv6:
2a0d:eb02::/32
Signature Algorithm: sha256WithRSAEncryption
2e:f8:32:64:85:b8:ef:da:82:7c:8a:c2:20:3f:79:55:3b:bf:
40:f6:17:d4:54:ec:7a:49:b7:df:54:30:74:27:23:fb:04:4c:
d0:d3:9f:19:86:fd:85:af:3c:b0:d9:0f:df:b8:fe:73:55:a8:
7f:17:a1:2f:06:8c:94:9f:3e:c6:e9:ac:1c:30:06:6b:fb:1e:
04:55:e3:fb:3f:a9:ff:12:7f:d9:02:a2:f2:1b:28:c6:29:00:
f8:c8:b6:eb:e8:f4:ff:bd:ce:3d:02:78:af:9f:10:4e:29:5d:
b2:4e:b1:ef:12:80:80:9a:f0:9b:80:22:d6:e8:b9:77:99:7b:
fe:57:e9:a4:5d:60:33:82:e4:d4:53:49:fd:87:47:50:86:87:
e7:09:e7:04:a1:10:2b:e9:aa:4b:dd:4d:c6:d2:c8:6d:4e:e9:
8c:0b:b5:4e:21:da:71:0b:52:63:5b:87:61:35:71:58:f6:81:
0b:63:8a:61:16:c1:93:4f:f0:7e:e5:27:16:b9:97:0e:50:9c:
cc:2e:65:55:9e:f9:95:c4:37:57:c7:dd:92:bd:30:ef:92:0b:
1a:a9:16:46:d2:91:8a:0d:7e:9a:a0:9e:db:d6:13:cf:dd:a9:
31:6f:fd:95:39:37:ed:b3:46:db:23:c7:a3:0f:9f:17:cf:89:
69:c7:28:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:07:17 2026 by rpki-client