Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/BvAkaqIQMJfGpSIttKYw6u69UsY.roa
File: BvAkaqIQMJfGpSIttKYw6u69UsY.roa (raw, json)
Hash identifier: HljiF1YNJTd/GJX5JhDeq7KwVETiH5Pa6f/ONTU55h8=
Subject key identifier: 06:F0:24:6A:A2:10:30:97:C6:A5:22:2D:B4:A6:30:EA:EE:BD:52:C6
Certificate issuer: /CN=95d70bf80a07c9ffcbef0cd8465b458d613dcc85
Certificate serial: 019F6058FB23E5B78A6A9FAF216B63E925B3
Authority key identifier: 95:D7:0B:F8:0A:07:C9:FF:CB:EF:0C:D8:46:5B:45:8D:61:3D:CC:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/BvAkaqIQMJfGpSIttKYw6u69UsY.roa
Signing time: Tue 14 Jul 2026 11:17:51 +0000
ROA not before: Tue 14 Jul 2026 11:17:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48847
IP address blocks: 185.83.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:60:58:fb:23:e5:b7:8a:6a:9f:af:21:6b:63:e9:25:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d70bf80a07c9ffcbef0cd8465b458d613dcc85
Validity
Not Before: Jul 14 11:17:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06f0246aa2103097c6a5222db4a630eaeebd52c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b3:7f:bf:c1:06:8f:aa:85:49:4c:a0:20:56:
12:65:ee:0a:4c:ce:fd:13:5a:09:11:4e:ba:e7:0e:
6c:c1:17:b9:00:9a:22:91:1b:28:62:c8:50:4e:24:
48:97:dd:97:2a:33:c3:d9:fb:bf:ee:d1:a2:9b:fb:
3d:83:ad:a3:71:62:79:b9:64:cf:fa:e2:b5:4b:7e:
8d:4f:3a:34:85:06:c6:ae:d5:5f:32:f3:23:d8:2e:
54:80:ec:42:68:c6:05:b7:c3:1d:df:19:cd:ac:09:
ae:0e:03:c9:5c:a6:5f:c5:2e:f3:72:e9:ef:08:ff:
3a:15:5d:7a:9e:bc:c1:67:2b:0c:14:05:0d:25:8a:
c6:78:fa:5b:13:d0:dd:f5:51:34:68:14:87:27:33:
df:20:79:04:ea:64:81:b6:7b:3d:ec:f7:2f:c0:5a:
3b:26:a6:cd:41:da:72:71:27:ac:67:c9:d5:3d:cb:
c3:9f:b0:57:af:38:71:73:cf:df:54:44:11:59:83:
80:ff:20:23:06:94:90:b2:20:8a:b6:a8:0f:8e:f4:
e0:82:c4:d5:3a:f4:04:b3:18:72:b8:29:31:5e:a1:
15:dd:b2:bf:30:01:a0:9c:f1:1d:18:35:e9:78:bf:
cf:64:e1:79:aa:7e:2c:b0:80:2b:28:20:4c:5a:5a:
62:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F0:24:6A:A2:10:30:97:C6:A5:22:2D:B4:A6:30:EA:EE:BD:52:C6
X509v3 Authority Key Identifier:
keyid:95:D7:0B:F8:0A:07:C9:FF:CB:EF:0C:D8:46:5B:45:8D:61:3D:CC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldcL-AoHyf_L7wzYRltFjWE9zIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/BvAkaqIQMJfGpSIttKYw6u69UsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2b0e11-f18d-4757-9011-6678eb81b8b0/1/ldcL-AoHyf_L7wzYRltFjWE9zIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.83.86.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:08:c1:07:44:69:ca:b6:41:5b:16:cd:9c:84:36:25:9f:3f:
2f:c2:55:39:70:55:91:c7:bd:52:b1:7c:38:d9:f3:e1:f5:d5:
1a:b9:d1:e6:0c:cd:f8:3c:7f:16:1b:c4:f6:ed:5b:92:83:69:
6e:4b:e1:69:9c:e9:e1:79:20:0e:e1:e6:8a:96:53:7d:fb:1e:
9f:25:9e:bf:ef:b1:cb:c2:77:14:4d:2e:2b:81:76:72:59:76:
0b:b4:8a:ed:b6:28:be:4a:69:a7:f5:76:bc:c8:ba:8d:04:69:
1d:b8:f5:a5:25:20:cc:98:ac:89:77:9c:de:e0:0d:55:19:ee:
9d:d7:da:34:1f:ce:69:8c:17:dc:7c:45:98:ed:9e:a9:fc:ba:
d3:91:1b:18:c2:ab:a7:53:46:e9:58:7d:dd:9d:4e:64:8a:f2:
ee:fe:be:73:c1:e2:34:2c:00:11:d3:cc:84:81:eb:03:97:00:
7b:b4:36:54:1f:72:28:c4:33:e5:fa:f4:f8:11:d2:f7:82:45:
ea:39:8c:77:fb:ef:52:76:c7:7c:96:b7:7c:3b:ad:c9:8e:d7:
66:a7:50:5e:7a:bc:a7:b0:b1:9f:16:a6:c5:38:20:f6:2a:1a:
f4:73:c1:c2:12:69:ea:d5:44:af:e0:e9:a5:eb:d7:e7:eb:26:
64:d5:cf:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:09:59 2026 by rpki-client