Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1e7c48-f8c2-4679-b771-46ca26aff545/1/bj-eKZEWwgbFrSRYLRr_CuFuTtU.roa
File: bj-eKZEWwgbFrSRYLRr_CuFuTtU.roa (raw, json)
Hash identifier: h33I7T9Mz8kSS3GjVd4AzAlJFMkoqssxIF1o4jIxuts=
Subject key identifier: 6E:3F:9E:29:91:16:C2:06:C5:AD:24:58:2D:1A:FF:0A:E1:6E:4E:D5
Certificate issuer: /CN=b0570845c239e9991c89bc5c50431e9087860c4d
Certificate serial: 019DF74024229BBB0AE63DA86ADA7E5DEE52
Authority key identifier: B0:57:08:45:C2:39:E9:99:1C:89:BC:5C:50:43:1E:90:87:86:0C:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFcIRcI56ZkcibxcUEMekIeGDE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1e7c48-f8c2-4679-b771-46ca26aff545/1/bj-eKZEWwgbFrSRYLRr_CuFuTtU.roa
Signing time: Tue 05 May 2026 08:27:49 +0000
ROA not before: Tue 05 May 2026 08:27:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213680
IP address blocks: 81.85.84.0/22 maxlen: 22
81.85.84.0/23 maxlen: 23
81.85.84.0/24 maxlen: 24
81.85.85.0/24 maxlen: 24
81.85.86.0/23 maxlen: 23
81.85.86.0/24 maxlen: 24
81.85.87.0/24 maxlen: 24
193.168.166.0/24 maxlen: 24
2a14:c600::/32 maxlen: 32
2a14:c600::/48 maxlen: 48
2a14:c600:1::/48 maxlen: 48
2a14:c600:2::/48 maxlen: 48
2a14:c600:3::/48 maxlen: 48
2a14:c600:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/1e7c48-f8c2-4679-b771-46ca26aff545/1/sFcIRcI56ZkcibxcUEMekIeGDE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/1e7c48-f8c2-4679-b771-46ca26aff545/1/sFcIRcI56ZkcibxcUEMekIeGDE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFcIRcI56ZkcibxcUEMekIeGDE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f7:40:24:22:9b:bb:0a:e6:3d:a8:6a:da:7e:5d:ee:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0570845c239e9991c89bc5c50431e9087860c4d
Validity
Not Before: May 5 08:27:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e3f9e299116c206c5ad24582d1aff0ae16e4ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:84:97:58:f3:6e:f2:2d:a0:64:9f:e3:36:05:
e9:dc:47:b0:9d:66:39:6e:eb:2e:83:ad:d2:78:e1:
f7:33:9e:3f:8b:57:8f:c3:05:cf:50:1f:9e:f2:a5:
04:87:18:21:76:82:7c:38:61:47:c5:53:1a:22:27:
90:79:2d:5d:c2:a6:7b:aa:6a:e7:6c:09:4f:5a:5a:
df:b9:93:a7:64:a0:d2:c9:96:58:7a:92:6e:a6:9c:
1f:17:06:79:31:4e:29:d6:79:94:bc:19:13:d7:5b:
d3:f8:fd:21:57:49:ac:1f:17:c2:43:32:d7:50:a7:
3f:46:c6:ee:50:00:f6:84:14:d9:51:9e:bd:8b:ed:
db:f4:e9:16:45:93:80:0b:0a:bc:b6:f9:7b:27:99:
2b:e6:4b:ad:2a:34:b8:db:68:bc:cd:d7:1b:d8:66:
04:0c:07:50:c6:0a:92:98:0b:02:29:72:aa:e7:4b:
5e:f1:6e:e6:6e:33:18:8e:32:99:73:15:76:1e:b7:
f5:ed:11:c5:da:77:1c:c7:17:79:87:e5:c0:9e:df:
6d:f3:3f:46:3d:c9:a7:ed:1c:02:0b:1e:13:6d:6e:
85:45:83:12:be:6c:bc:c2:fa:1f:80:6e:30:ad:c5:
08:4d:11:3a:7e:f3:f5:12:c8:fd:ea:fd:5a:c7:b2:
12:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:3F:9E:29:91:16:C2:06:C5:AD:24:58:2D:1A:FF:0A:E1:6E:4E:D5
X509v3 Authority Key Identifier:
keyid:B0:57:08:45:C2:39:E9:99:1C:89:BC:5C:50:43:1E:90:87:86:0C:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFcIRcI56ZkcibxcUEMekIeGDE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1e7c48-f8c2-4679-b771-46ca26aff545/1/bj-eKZEWwgbFrSRYLRr_CuFuTtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1e7c48-f8c2-4679-b771-46ca26aff545/1/sFcIRcI56ZkcibxcUEMekIeGDE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.85.84.0/22
193.168.166.0/24
IPv6:
2a14:c600::/32
Signature Algorithm: sha256WithRSAEncryption
0b:b2:db:be:22:79:d0:fd:2c:38:a6:e2:e3:78:2c:5b:c4:39:
bf:98:81:52:55:98:78:3e:bd:63:5a:40:e4:59:eb:32:85:cc:
49:e5:e7:55:d6:aa:7e:0a:5b:b0:27:45:f0:60:84:6e:11:5b:
5f:26:f7:ba:b7:89:82:04:79:26:77:41:3e:27:d6:17:52:b6:
e6:b5:57:47:36:90:39:22:2c:9c:84:be:d3:d9:e8:ce:37:0b:
43:1b:c9:3f:1f:99:f6:28:eb:36:24:d2:0e:b9:cc:87:3d:51:
78:60:df:48:a6:2d:8b:da:27:8d:4e:92:a8:84:5e:54:da:0b:
18:98:6a:9a:32:d8:8e:7e:ce:2c:f0:bf:4c:2f:93:29:72:fe:
d1:4c:32:20:34:aa:42:2e:93:8a:b1:0f:5c:9a:30:58:8c:ee:
10:21:6d:57:db:06:bd:e4:27:0c:c6:e3:d4:21:b5:fe:72:a6:
ef:6a:b1:b4:cd:92:21:6f:10:f6:c0:0f:dd:c6:99:82:85:c4:
51:4d:95:33:97:e3:3b:79:cf:36:c0:20:a9:b8:bb:3a:40:cc:
8c:7f:8c:9b:73:d8:7a:e3:a7:f5:20:ca:b6:cd:cf:35:51:ac:
8b:49:bc:9a:7e:74:ba:6d:9e:83:c4:c5:4a:d8:d7:b7:f4:81:
f9:57:8b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:25:32 2026 by rpki-client