Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/BdwGlkaptmMT9Oh-8i7s6EZ-lCA.roa
File: BdwGlkaptmMT9Oh-8i7s6EZ-lCA.roa (raw, json)
Hash identifier: 8vib6Tz+/3825HdXsp3W0N9Y0J7CwoyzAF/LuiUg6r4=
Subject key identifier: 05:DC:06:96:46:A9:B6:63:13:F4:E8:7E:F2:2E:EC:E8:46:7E:94:20
Certificate issuer: /CN=78f9b70628daad93af188a2239828db2c29c14ec
Certificate serial: 019F2368DFF5C694E63AFD796301DD929E69
Authority key identifier: 78:F9:B7:06:28:DA:AD:93:AF:18:8A:22:39:82:8D:B2:C2:9C:14:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ePm3BijarZOvGIoiOYKNssKcFOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/BdwGlkaptmMT9Oh-8i7s6EZ-lCA.roa
Signing time: Thu 02 Jul 2026 15:18:23 +0000
ROA not before: Thu 02 Jul 2026 15:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205729
IP address blocks: 149.62.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/ePm3BijarZOvGIoiOYKNssKcFOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/ePm3BijarZOvGIoiOYKNssKcFOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ePm3BijarZOvGIoiOYKNssKcFOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:df:f5:c6:94:e6:3a:fd:79:63:01:dd:92:9e:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78f9b70628daad93af188a2239828db2c29c14ec
Validity
Not Before: Jul 2 15:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05dc069646a9b66313f4e87ef22eece8467e9420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:63:b8:41:cb:1e:bb:8c:45:84:4d:f2:9e:4d:
fe:4c:35:a8:cb:c0:33:ea:cd:eb:7f:c2:97:68:72:
26:a9:d2:24:b6:00:67:52:17:90:c6:81:04:b7:ef:
5f:ae:d5:a9:a3:22:17:dd:4d:8a:80:b7:62:20:e0:
8f:2f:f9:b0:ae:0b:c4:4d:93:f9:a4:5f:22:67:e8:
10:03:45:4b:29:7c:be:91:16:b9:c0:5b:44:58:27:
2c:f2:6c:41:c7:d6:bf:42:fa:18:fa:c2:a3:e0:9e:
1c:25:a9:62:a2:a3:db:e1:27:47:de:a5:c2:e3:cf:
6f:9c:0d:6b:93:32:ca:38:e7:05:72:e4:3e:98:ca:
f2:9b:1e:97:73:6f:4e:75:94:a8:24:56:0b:98:bc:
40:0e:b1:bc:b5:58:0e:42:98:20:62:ad:75:5b:86:
47:06:98:cd:61:77:0a:a5:a8:e4:4d:d0:c7:bc:bb:
ec:f0:bc:03:44:d1:d4:43:45:d1:25:5a:55:1f:37:
c2:3d:6f:3c:7d:f4:35:d4:4b:f1:b7:16:0b:ba:b4:
48:fb:c2:68:29:f2:78:23:42:80:eb:53:de:c7:95:
fb:f5:39:2f:81:03:ea:4a:dc:29:97:fd:8d:8a:d3:
54:4d:22:0c:75:26:22:28:d5:ad:b7:34:6d:cf:09:
94:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:DC:06:96:46:A9:B6:63:13:F4:E8:7E:F2:2E:EC:E8:46:7E:94:20
X509v3 Authority Key Identifier:
keyid:78:F9:B7:06:28:DA:AD:93:AF:18:8A:22:39:82:8D:B2:C2:9C:14:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ePm3BijarZOvGIoiOYKNssKcFOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/BdwGlkaptmMT9Oh-8i7s6EZ-lCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b33a78-a51e-46e4-8648-0066f541faea/1/ePm3BijarZOvGIoiOYKNssKcFOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.62.32.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:2d:23:8f:f9:24:fa:8b:9b:61:70:2e:82:65:bb:43:4b:b4:
77:c7:cd:0f:79:5f:fe:d1:a9:b2:ea:b8:a0:9e:27:6e:19:58:
5b:d5:08:73:35:7f:5c:da:f3:40:c8:ee:eb:13:08:10:2c:12:
31:5d:a7:0f:7c:06:43:6c:52:e4:94:8e:8b:ca:1d:e0:6e:ac:
67:98:17:79:cf:f6:c5:8a:23:5f:5c:d7:83:c2:df:c7:54:58:
60:33:99:a2:2f:5a:d6:5e:2d:85:56:bf:01:d1:b9:a1:c6:ff:
92:d8:45:1f:f9:cb:ba:67:9b:2e:0a:77:3e:4a:af:bc:24:f0:
5f:58:95:be:be:3c:e1:3c:ed:75:e5:ed:38:d7:be:e3:20:cc:
22:61:d4:66:f9:95:9f:59:55:10:c5:97:9b:52:fa:e7:98:28:
44:c0:85:80:0e:18:14:3d:d6:bc:0d:92:81:76:f4:ed:1c:c8:
a5:a9:4a:5b:9c:08:7c:53:31:01:b1:48:86:ad:1a:e6:5a:8f:
a4:f2:ec:a9:e2:ec:a6:68:e2:75:ce:30:eb:3a:c7:94:87:82:
9e:ba:ef:8d:71:93:d9:73:a7:97:4b:39:ad:a9:9b:0e:77:99:
df:48:56:e2:66:2f:0a:f5:d9:22:92:fb:08:5a:96:11:b8:c7:
09:b1:8d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:46:51 2026 by rpki-client