Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/BuMsAfkHa-6AI8ccw7-eBpf0J6M.roa
File: BuMsAfkHa-6AI8ccw7-eBpf0J6M.roa (raw, json)
Hash identifier: yP4C6TlJul/KiVGvD+UG3KhXgh+OIWp2I4u/TGi0zQ8=
Subject key identifier: 06:E3:2C:01:F9:07:6B:EE:80:23:C7:1C:C3:BF:9E:06:97:F4:27:A3
Certificate issuer: /CN=59cef6c1c2d4d5d7e26ea5934ce183b298f29bfc
Certificate serial: 019F2368C780E989D7F9462C27D9475A1635
Authority key identifier: 59:CE:F6:C1:C2:D4:D5:D7:E2:6E:A5:93:4C:E1:83:B2:98:F2:9B:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wc72wcLU1dfibqWTTOGDspjym_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/BuMsAfkHa-6AI8ccw7-eBpf0J6M.roa
Signing time: Thu 02 Jul 2026 15:18:17 +0000
ROA not before: Thu 02 Jul 2026 15:18:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198985
IP address blocks: 45.67.80.0/23 maxlen: 23
46.231.240.0/22 maxlen: 22
185.233.100.0/22 maxlen: 22
2a09:7340::/32 maxlen: 32
2a0c:e300::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/Wc72wcLU1dfibqWTTOGDspjym_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/Wc72wcLU1dfibqWTTOGDspjym_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Wc72wcLU1dfibqWTTOGDspjym_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c7:80:e9:89:d7:f9:46:2c:27:d9:47:5a:16:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59cef6c1c2d4d5d7e26ea5934ce183b298f29bfc
Validity
Not Before: Jul 2 15:18:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06e32c01f9076bee8023c71cc3bf9e0697f427a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:30:f6:67:c6:78:a4:cc:0b:a7:20:e6:95:9e:
72:e6:35:37:08:36:a9:09:8b:32:f9:56:1d:2b:5f:
e3:c7:6e:fe:c7:2b:9d:04:b5:14:09:b5:cc:b4:b2:
d2:46:2d:6c:62:50:1b:71:6a:5f:5f:41:b0:66:df:
26:75:f1:c4:d2:22:95:2a:16:e3:88:af:93:59:fb:
c6:69:57:ff:48:4a:0b:80:9e:6f:be:29:96:a3:b8:
ef:11:bc:f5:a8:00:ef:f0:58:1e:8a:98:62:4d:cd:
c7:68:3b:87:b6:19:14:fa:90:f3:4d:85:fb:62:70:
4e:90:01:d8:0b:bc:72:e2:12:07:e4:fb:b3:b9:da:
c3:32:d2:47:f1:a0:90:a9:13:53:90:43:a0:86:71:
d1:25:19:a6:cd:c0:1b:6f:57:82:84:72:08:63:cf:
21:d8:bf:32:a3:9c:34:7f:80:ff:6c:cc:5d:4c:93:
62:65:c3:7c:c0:47:03:f1:ea:92:64:d2:ff:7f:bf:
0d:82:f9:9a:80:4b:a0:f5:28:ae:0e:a6:c8:c5:ae:
9a:e8:21:ac:dc:32:70:22:06:10:30:84:eb:5e:c8:
3e:3f:73:90:ed:c8:fc:3b:18:59:a5:7e:1b:68:c4:
07:35:3f:cc:3c:4e:11:08:07:31:fb:d4:c0:27:f9:
e2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E3:2C:01:F9:07:6B:EE:80:23:C7:1C:C3:BF:9E:06:97:F4:27:A3
X509v3 Authority Key Identifier:
keyid:59:CE:F6:C1:C2:D4:D5:D7:E2:6E:A5:93:4C:E1:83:B2:98:F2:9B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wc72wcLU1dfibqWTTOGDspjym_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/BuMsAfkHa-6AI8ccw7-eBpf0J6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/Wc72wcLU1dfibqWTTOGDspjym_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.80.0/23
46.231.240.0/22
185.233.100.0/22
IPv6:
2a09:7340::/32
2a0c:e300::/29
Signature Algorithm: sha256WithRSAEncryption
4c:f8:25:c5:81:03:f2:20:2f:8f:d6:d7:12:55:da:24:2a:18:
7b:3b:27:47:d5:3f:0f:54:d6:56:3c:99:d7:9f:7c:c9:2d:d9:
d6:26:95:51:a6:79:fa:4d:13:05:54:2e:31:b4:da:97:b9:f8:
82:7d:db:70:2d:99:7e:1c:e1:db:5c:d1:85:c3:38:2f:ee:39:
e9:84:39:68:1d:36:0b:c1:ce:04:7a:ce:e1:c4:83:65:6f:6b:
bc:bc:1f:2b:04:2a:7d:45:db:c3:22:cf:85:7e:60:a4:1e:5f:
6f:86:0a:35:5d:56:34:45:3d:58:6d:96:dd:71:39:9b:8d:b9:
ef:02:d3:ab:58:e3:c7:93:78:d0:bd:b5:31:b2:62:80:41:a6:
49:0d:bc:47:e2:2d:c0:a7:d3:f8:2a:d1:9f:3f:85:67:01:3c:
44:9d:bd:95:9b:aa:ac:f3:ad:85:e1:d3:99:48:d0:f1:57:c3:
6d:b5:89:97:c0:e9:3a:84:79:cd:ea:2b:5b:af:eb:49:47:6b:
a3:12:22:0c:49:2f:13:74:09:06:12:f7:18:5d:5f:26:47:4e:
7e:5a:b9:13:1d:98:06:d0:15:e2:18:73:6a:09:41:17:6f:fd:
13:9d:a9:98:6d:ea:98:fc:91:35:20:89:54:bc:fe:aa:76:45:
71:2e:4d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:37:10 2026 by rpki-client