Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/BNDkBKCimrmVvK0MK2ipirRQNos.roa
File: BNDkBKCimrmVvK0MK2ipirRQNos.roa (raw, json)
Hash identifier: 8XtuRHZ4wa0PwGqbHefCr+9AUjZ6bo/8DJw1xwciAJI=
Subject key identifier: 04:D0:E4:04:A0:A2:9A:B9:95:BC:AD:0C:2B:68:A9:8A:B4:50:36:8B
Certificate issuer: /CN=53dd4bca47de917af4ff110513947f8242f3b036
Certificate serial: 019EF2FCD1265BCC40A5B3960714FFDF2E36
Authority key identifier: 53:DD:4B:CA:47:DE:91:7A:F4:FF:11:05:13:94:7F:82:42:F3:B0:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U91LykfekXr0_xEFE5R_gkLzsDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/BNDkBKCimrmVvK0MK2ipirRQNos.roa
Signing time: Tue 23 Jun 2026 05:38:35 +0000
ROA not before: Tue 23 Jun 2026 05:38:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29222
IP address blocks: 203.28.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U91LykfekXr0_xEFE5R_gkLzsDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f2:fc:d1:26:5b:cc:40:a5:b3:96:07:14:ff:df:2e:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53dd4bca47de917af4ff110513947f8242f3b036
Validity
Not Before: Jun 23 05:38:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04d0e404a0a29ab995bcad0c2b68a98ab450368b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e2:ab:24:0c:a2:ca:5c:39:66:62:65:8d:b7:
2e:0d:f6:b9:53:69:27:45:0c:ca:35:02:93:61:16:
13:ff:05:23:73:56:67:a4:6d:43:66:f1:d4:76:de:
d0:69:56:2b:fb:91:86:59:14:f9:47:79:2c:cb:ac:
80:70:bb:38:e7:c0:fd:8c:b8:ee:b3:c0:6f:dc:63:
f9:2b:ae:a7:8d:c3:f7:b3:21:b6:0a:80:5d:1e:61:
51:ef:ef:d9:8e:4e:32:34:1f:ab:31:61:9c:08:67:
dc:77:84:54:fb:b9:6e:9d:01:1c:c4:51:7b:99:f1:
9b:cd:c4:ac:be:2f:c5:c3:d4:fa:dd:81:bc:c7:ea:
83:4c:45:47:a5:a7:31:71:9a:2d:da:f6:01:53:2d:
e1:41:ec:83:1d:9b:e3:14:ad:91:45:fa:bd:1b:19:
52:f4:90:e5:ea:84:1b:fa:47:a0:30:24:5d:36:87:
48:af:23:79:74:ba:dd:26:cc:85:2f:5f:78:1c:92:
28:17:61:ce:46:cb:18:18:d6:5e:45:2b:5e:6f:4d:
62:a5:67:67:98:3a:53:81:99:ef:11:24:93:a0:fe:
2a:93:13:02:95:54:64:f5:eb:b6:46:a8:26:a5:15:
7f:26:bd:58:d6:ea:fe:f2:22:a0:1e:09:a2:23:86:
7a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D0:E4:04:A0:A2:9A:B9:95:BC:AD:0C:2B:68:A9:8A:B4:50:36:8B
X509v3 Authority Key Identifier:
keyid:53:DD:4B:CA:47:DE:91:7A:F4:FF:11:05:13:94:7F:82:42:F3:B0:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U91LykfekXr0_xEFE5R_gkLzsDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/BNDkBKCimrmVvK0MK2ipirRQNos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/71ee08-665b-458a-8721-c61f5e8251eb/1/U91LykfekXr0_xEFE5R_gkLzsDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.28.171.0/24
Signature Algorithm: sha256WithRSAEncryption
21:cc:c3:9a:93:06:cf:88:eb:20:76:59:eb:f3:1f:a2:7a:b4:
d0:45:f4:d6:8b:93:95:49:75:02:d5:05:7a:c3:fa:77:72:59:
f7:e8:7e:57:63:4f:87:e8:8c:2f:25:fa:26:2f:75:f4:6c:39:
84:24:50:d8:c8:12:8f:c3:ce:b2:47:5c:f8:26:6d:ba:b2:92:
cb:18:54:df:58:ce:4a:30:e8:ed:c1:4b:dc:f3:8b:a5:cb:c2:
56:48:c5:ea:1c:91:08:99:e4:24:5b:2a:dd:4c:af:e7:22:b9:
4b:f4:5c:8f:e3:73:61:8c:31:40:ab:69:64:b6:33:3c:9c:d7:
6b:03:aa:85:68:f6:8e:15:78:01:11:05:16:d9:d3:76:03:ca:
28:30:36:27:d5:d2:9e:9f:6a:07:e5:eb:87:b2:fc:ce:e4:72:
b2:07:3c:30:f6:d4:75:e1:6e:6b:20:95:0d:3f:9d:5b:a4:c1:
0e:42:25:40:a2:31:56:94:80:b5:3d:36:58:6a:54:91:32:df:
93:10:9e:1e:10:94:bc:57:f1:f8:f9:d8:f1:17:2d:95:50:b6:
70:48:b8:a4:14:de:d8:49:06:3d:a5:3f:2a:74:ba:fb:7a:d9:
b8:97:8c:f2:1b:6d:43:5e:ea:15:30:b1:81:db:cb:3e:7f:bf:
34:f7:77:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:04:59 2026 by rpki-client