Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/bj1Zlpb7r9VYJYiGZRRFsyxZtOA.roa
File: bj1Zlpb7r9VYJYiGZRRFsyxZtOA.roa (raw, json)
Hash identifier: Y3ICHbrh8hnLCQzZOKLQPyzkmRXdU5pC06Mn07MxiU0=
Subject key identifier: 6E:3D:59:96:96:FB:AF:D5:58:25:88:86:65:14:45:B3:2C:59:B4:E0
Certificate issuer: /CN=bf99d23c82729a8049e7565775a864bc3aa282ef
Certificate serial: 019DAADC22266ACF6DBF2E59329B3B8B50DF
Authority key identifier: BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/bj1Zlpb7r9VYJYiGZRRFsyxZtOA.roa
Signing time: Mon 20 Apr 2026 12:27:26 +0000
ROA not before: Mon 20 Apr 2026 12:27:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 185.134.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:aa:dc:22:26:6a:cf:6d:bf:2e:59:32:9b:3b:8b:50:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf99d23c82729a8049e7565775a864bc3aa282ef
Validity
Not Before: Apr 20 12:27:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e3d599696fbafd558258886651445b32c59b4e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:db:8f:b2:e8:7c:5e:f3:2b:b1:cc:28:72:ad:
16:fe:4c:f9:b3:4d:a4:c6:d4:19:82:63:6b:c1:5d:
74:7b:e3:79:b0:83:c1:18:be:e0:87:72:e7:19:d0:
80:66:c4:de:6f:33:ab:21:e0:cb:90:8d:5e:6a:62:
34:a5:39:bd:66:44:7c:44:e7:32:02:18:dd:0f:5c:
00:13:15:70:22:86:10:e8:84:86:27:2c:83:87:6c:
ca:13:ab:28:73:c8:9e:35:ec:45:7c:8b:42:80:77:
f2:66:ae:5c:e0:07:67:fc:da:dd:ff:af:90:23:fb:
0d:0a:3a:23:10:b9:79:4e:b6:ad:7b:ef:85:52:b9:
ce:0f:63:9d:97:0f:b7:d3:d8:77:1b:53:5c:30:30:
50:c3:16:ac:fa:74:ba:a0:99:b4:62:67:ec:d2:6b:
ef:14:99:44:3a:7f:a4:6b:fb:f0:4a:ed:07:24:de:
f7:14:e0:9d:8f:e1:4c:c3:0a:24:b9:2b:1d:2c:bc:
16:5e:54:bc:f6:50:c5:09:d0:26:22:82:ab:a6:e2:
4c:05:53:1d:8c:ec:0d:83:26:34:c1:5c:df:bb:25:
1d:1b:cf:38:42:96:c5:0f:4d:b4:45:18:21:85:39:
41:34:22:b1:3e:62:46:e9:bc:0a:fb:3c:d3:15:fa:
1a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3D:59:96:96:FB:AF:D5:58:25:88:86:65:14:45:B3:2C:59:B4:E0
X509v3 Authority Key Identifier:
keyid:BF:99:D2:3C:82:72:9A:80:49:E7:56:57:75:A8:64:BC:3A:A2:82:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5nSPIJymoBJ51ZXdahkvDqigu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/bj1Zlpb7r9VYJYiGZRRFsyxZtOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2ad53a-f118-4a88-8c2f-987086ccab84/1/v5nSPIJymoBJ51ZXdahkvDqigu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.61.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:88:ba:ab:a8:fd:5a:2f:cd:3a:a5:d6:95:f6:fb:99:67:73:
89:df:26:12:fb:83:bd:4e:cf:99:07:e7:6b:5f:1a:13:77:1f:
0e:35:de:f4:7f:a3:3d:fa:36:26:6e:81:e1:8c:11:5f:f1:db:
05:0f:0f:1e:37:4e:f2:33:e5:21:ad:75:56:fc:22:99:cc:d1:
a9:03:74:6e:5f:3a:f4:e9:49:71:af:55:fd:4c:4f:da:3a:53:
b4:7b:03:4f:5a:7f:6e:89:b2:c9:45:ca:01:58:a6:56:1f:7b:
23:26:da:05:9b:8e:94:d4:f6:a4:fd:5f:b1:ee:6b:eb:cd:7d:
72:48:76:42:99:1b:16:66:d6:e8:5c:14:1e:4f:3f:19:39:96:
df:9f:65:f9:c9:21:4b:d3:4d:a2:46:62:7d:25:d9:0c:59:dc:
97:c0:db:00:58:81:6b:ab:7c:65:38:04:09:97:ee:bd:9f:1f:
f2:1a:9d:0a:01:47:cb:62:54:a9:46:e4:cf:45:5f:9d:db:2d:
2e:17:c2:49:9c:34:7b:45:96:df:63:f1:b9:a8:1b:a9:76:55:
f9:5b:b7:8d:ef:e7:f7:02:9b:d3:78:eb:e6:14:90:e3:f9:14:
c4:d0:aa:f3:b3:f3:71:6e:1e:59:63:06:eb:9e:51:47:ea:d5:
34:ee:46:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:25:26 2026 by rpki-client