Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/Bp4o3PtdDR3VRbnyrYPNu5u0q6A.roa
File: Bp4o3PtdDR3VRbnyrYPNu5u0q6A.roa (raw, json)
Hash identifier: sXTP7rRbvjH2GCpBGE0w+N3/UUJO2wFbZXvL4X/0f9Q=
Subject key identifier: 06:9E:28:DC:FB:5D:0D:1D:D5:45:B9:F2:AD:83:CD:BB:9B:B4:AB:A0
Certificate issuer: /CN=ef9608ff9e9f48d54b209725d48f67c84875147a
Certificate serial: 019F2368F825E24737984CCDC0EAD6A27FD2
Authority key identifier: EF:96:08:FF:9E:9F:48:D5:4B:20:97:25:D4:8F:67:C8:48:75:14:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/75YI_56fSNVLIJcl1I9nyEh1FHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/Bp4o3PtdDR3VRbnyrYPNu5u0q6A.roa
Signing time: Thu 02 Jul 2026 15:18:29 +0000
ROA not before: Thu 02 Jul 2026 15:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39479
IP address blocks: 213.187.10.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/75YI_56fSNVLIJcl1I9nyEh1FHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/75YI_56fSNVLIJcl1I9nyEh1FHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/75YI_56fSNVLIJcl1I9nyEh1FHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f8:25:e2:47:37:98:4c:cd:c0:ea:d6:a2:7f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9608ff9e9f48d54b209725d48f67c84875147a
Validity
Not Before: Jul 2 15:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=069e28dcfb5d0d1dd545b9f2ad83cdbb9bb4aba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:de:08:93:b0:57:b7:37:ac:d0:d6:ea:7e:95:
ea:fd:fb:6d:f6:15:80:b9:2b:7a:80:51:d3:a7:46:
15:9d:8c:fc:be:d3:17:94:e4:3e:f8:97:f8:db:70:
c1:16:9f:f6:bb:1b:63:e7:67:d8:8c:f9:cb:a7:46:
0c:ea:aa:b5:f4:c4:20:a7:57:1a:71:53:ba:04:8e:
b2:3c:56:fe:a8:a7:85:39:88:44:63:73:d5:6e:a4:
2f:6f:01:0a:ea:3e:1e:f2:d5:66:15:d8:3a:71:4b:
04:e0:1b:a1:86:d8:0b:5b:35:96:97:d6:51:94:ec:
3f:8b:27:69:19:5e:bb:b4:15:18:02:43:91:7f:c5:
9b:2d:34:b8:68:06:8a:e3:41:9c:27:7c:df:ea:ab:
a8:6f:7c:f8:e0:c0:d0:b4:6d:54:b4:03:e4:3e:1f:
91:81:de:bc:c5:41:03:08:b6:fb:e9:3d:9a:2b:83:
71:42:5b:86:89:a9:2a:48:e0:c0:fc:c6:a9:b2:28:
91:e5:1a:cf:95:49:d6:cf:74:e7:2c:be:a2:4a:1d:
25:d4:58:8f:4f:48:bc:9b:81:41:a8:55:04:1b:e7:
f6:41:71:d1:18:5e:ed:c7:76:c3:ad:20:65:41:bc:
58:49:a4:56:11:b6:b0:fe:ee:06:36:d1:2c:85:bc:
5e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:9E:28:DC:FB:5D:0D:1D:D5:45:B9:F2:AD:83:CD:BB:9B:B4:AB:A0
X509v3 Authority Key Identifier:
keyid:EF:96:08:FF:9E:9F:48:D5:4B:20:97:25:D4:8F:67:C8:48:75:14:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/75YI_56fSNVLIJcl1I9nyEh1FHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/Bp4o3PtdDR3VRbnyrYPNu5u0q6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/75YI_56fSNVLIJcl1I9nyEh1FHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.187.10.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:85:64:88:09:c9:c1:f9:f8:6a:df:b8:c8:4f:5a:8f:b6:fc:
26:20:4a:5b:2e:a6:5d:79:af:24:0d:ab:6b:fa:27:24:0a:1b:
8e:75:ee:57:73:a7:2a:bb:8f:43:53:f3:d9:cb:2f:61:94:45:
6c:1e:eb:1e:9d:ee:40:bd:fa:43:69:14:de:eb:df:66:91:2f:
f7:29:29:19:ca:c5:27:41:d0:5e:7b:ed:39:2f:19:47:60:dc:
05:3f:92:ff:0d:63:75:23:21:67:ad:b0:b4:82:40:97:bf:9b:
92:96:8a:b1:28:c8:a3:f3:9a:b7:65:40:4b:8f:32:c4:d4:bf:
b9:d6:79:45:85:f2:31:e9:28:ca:f6:c2:bc:28:57:6d:a3:19:
fd:f1:87:91:68:65:72:ad:2c:0d:05:ca:4f:7d:6f:33:14:8c:
0f:7c:6e:fa:39:79:6c:87:6b:29:9d:48:e5:35:0b:c1:e8:e8:
6b:a1:c2:e5:12:e6:3f:f7:df:bc:68:f5:1e:69:f2:4f:75:0a:
b7:40:5a:81:ee:fa:d8:79:1a:47:80:c1:4b:01:9e:8a:17:9e:
2c:be:4c:7a:84:54:0f:50:a4:4f:f1:e4:4b:cf:5f:ce:71:54:
bc:2c:06:9a:5b:c8:e5:89:9e:c2:de:f2:60:f1:36:68:5e:7c:
e1:32:53:9a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaPgl4kc3mEzNwOrWon/SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmOTYwOGZmOWU5ZjQ4ZDU0YjIwOTcyNWQ0OGY2N2M4NDg3
NTE0N2EwHhcNMjYwNzAyMTUxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjllMjhkY2ZiNWQwZDFkZDU0NWI5ZjJhZDgzY2RiYjliYjRhYmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArd4Ik7BXtzes0NbqfpXq/ftt9hWA
uSt6gFHTp0YVnYz8vtMXlOQ++Jf423DBFp/2uxtj52fYjPnLp0YM6qq19MQgp1ca
cVO6BI6yPFb+qKeFOYhEY3PVbqQvbwEK6j4e8tVmFdg6cUsE4BuhhtgLWzWWl9ZR
lOw/iydpGV67tBUYAkORf8WbLTS4aAaK40GcJ3zf6quob3z44MDQtG1UtAPkPh+R
gd68xUEDCLb76T2aK4NxQluGiakqSODA/MapsiiR5RrPlUnWz3TnLL6iSh0l1FiP
T0i8m4FBqFUEG+f2QXHRGF7tx3bDrSBlQbxYSaRWEbaw/u4GNtEshbxeXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAaeKNz7XQ0d1UW58q2DzbubtKugMB8GA1UdIwQY
MBaAFO+WCP+en0jVSyCXJdSPZ8hIdRR6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzVZSV81NmZTTlZMSUpjbDFJOW55RWgxRkhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9jZjI0YmQtYzE1Yi00ODRjLTk3MzIt
MDRiMzgxM2YzYjNkLzEvQnA0bzNQdGREUjNWUmJueXJZUE51NXUwcTZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9jZjI0YmQtYzE1Yi00ODRjLTk3MzItMDRiMzgxM2YzYjNk
LzEvNzVZSV81NmZTTlZMSUpjbDFJOW55RWgxRkhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1bsKMA0G
CSqGSIb3DQEBCwUAA4IBAQCxhWSICcnB+fhq37jIT1qPtvwmIEpbLqZdea8kDatr
+ickChuOde5Xc6cqu49DU/PZyy9hlEVsHusene5AvfpDaRTe699mkS/3KSkZysUn
QdBee+05LxlHYNwFP5L/DWN1IyFnrbC0gkCXv5uSloqxKMij85q3ZUBLjzLE1L+5
1nlFhfIx6SjK9sK8KFdtoxn98YeRaGVyrSwNBcpPfW8zFIwPfG76OXlsh2spnUjl
NQvB6OhrocLlEuY/99+8aPUeafJPdQq3QFqB7vrYeRpHgMFLAZ6KF54svkx6hFQP
UKRP8eRLz1/OcVS8LAaaW8jliZ7C3vJg8TZoXnzhMlOa
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:07:28 2026 by rpki-client