Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/BgD0W2qWPU_ROp_yzDCvdmHBRdU.roa
File: BgD0W2qWPU_ROp_yzDCvdmHBRdU.roa (raw, json)
Hash identifier: VUaQeIbkBSgy2SlkE4r8gn0Ci5DG7icLZnLjN6oDK4w=
Subject key identifier: 06:00:F4:5B:6A:96:3D:4F:D1:3A:9F:F2:CC:30:AF:76:61:C1:45:D5
Certificate issuer: /CN=3e70c14bf26faf0198f1e7b24729cd71b33518de
Certificate serial: 019EFA002740DC5421616DDFB441088F991A
Authority key identifier: 3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/BgD0W2qWPU_ROp_yzDCvdmHBRdU.roa
Signing time: Wed 24 Jun 2026 14:19:34 +0000
ROA not before: Wed 24 Jun 2026 14:19:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205489
IP address blocks: 193.169.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fa:00:27:40:dc:54:21:61:6d:df:b4:41:08:8f:99:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e70c14bf26faf0198f1e7b24729cd71b33518de
Validity
Not Before: Jun 24 14:19:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0600f45b6a963d4fd13a9ff2cc30af7661c145d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3d:9e:64:df:b1:98:3b:fb:12:66:50:6a:ad:
4c:c4:d3:30:59:04:ee:e7:21:3d:b8:62:57:fa:c0:
66:1a:3e:58:0f:ad:1d:e7:78:1d:2a:ae:19:9d:1c:
a6:28:8f:bd:62:10:d4:f8:3a:58:30:9d:d5:94:ed:
b1:05:c9:6d:9d:64:20:46:54:4c:9a:53:ad:54:58:
1f:b3:03:08:47:4e:0c:b2:54:85:ac:4c:e9:7d:24:
12:95:1a:04:a6:28:c5:c9:66:93:6d:d6:db:ed:10:
4d:d6:b2:80:d6:30:95:76:a2:47:d1:1f:75:34:bc:
1e:aa:65:61:51:ad:dd:0e:cf:a7:26:62:a9:4e:90:
11:89:33:b8:31:65:0c:e4:9c:68:80:f9:bd:92:c6:
bb:5e:be:99:93:d3:c8:b7:b1:68:3f:e4:af:cd:5b:
33:9f:66:e4:32:9d:89:f3:48:b4:7d:0d:1e:08:19:
dd:4c:54:98:3e:92:c5:82:6e:62:a6:5c:8e:f4:fc:
21:06:f0:ab:ad:14:ac:a4:a9:48:cf:62:3f:36:99:
88:b4:79:25:97:a9:0e:7a:3f:82:37:c9:85:f0:9c:
b9:30:32:d5:d4:3e:13:9a:1b:7e:50:89:3d:00:bb:
a7:0d:86:c4:24:21:16:97:fc:cc:05:23:e7:90:e0:
bd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:00:F4:5B:6A:96:3D:4F:D1:3A:9F:F2:CC:30:AF:76:61:C1:45:D5
X509v3 Authority Key Identifier:
keyid:3E:70:C1:4B:F2:6F:AF:01:98:F1:E7:B2:47:29:CD:71:B3:35:18:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnDBS_JvrwGY8eeyRynNcbM1GN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/BgD0W2qWPU_ROp_yzDCvdmHBRdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1d2df9-8f82-4716-853e-53859490d26f/1/PnDBS_JvrwGY8eeyRynNcbM1GN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.59.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:34:c8:00:ae:32:ab:ea:c9:df:af:4c:50:de:f4:e1:f0:ff:
92:e9:70:e7:10:b0:bf:96:6c:f7:c6:a6:a3:a3:e9:9a:bc:7f:
d3:9e:e8:fc:3e:98:54:eb:25:2c:4b:7e:dc:32:04:e3:b7:b2:
a1:72:f5:4c:a4:47:c1:ca:0f:d2:87:e1:69:b0:a7:75:d4:8e:
ed:f9:03:01:67:7f:5f:f0:71:80:71:a6:fa:67:6d:3d:0b:f4:
62:e2:f9:27:96:1a:08:90:17:39:a1:f8:9e:f2:78:32:60:77:
8e:7f:9e:74:1c:f0:7b:55:3f:7b:14:f0:05:3e:d2:1d:b9:6b:
cf:93:71:51:c9:71:1f:b3:ed:82:bb:e0:a9:3a:b2:82:f7:96:
8f:07:82:ab:41:f9:9b:2d:bf:81:1d:fc:d5:cd:eb:1e:b8:28:
06:af:60:f9:ea:09:f1:77:fc:e6:d4:e8:69:cc:47:9f:55:88:
d5:f1:66:e8:69:78:ee:24:80:0f:e7:83:54:e4:c4:b2:33:c3:
fc:e0:e4:12:15:11:f1:90:d1:e7:87:85:55:89:8a:2d:71:5f:
82:38:df:f6:6c:1d:26:52:ba:d0:4f:a2:80:9e:2e:1f:41:d6:
f0:1a:69:14:c6:7b:1c:74:cf:c2:a5:a5:a9:4c:63:be:d3:dd:
2b:f5:97:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:22 2026 by rpki-client