Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/BKcGZHswCDN6exEtNLIJAXLenaE.roa
File: BKcGZHswCDN6exEtNLIJAXLenaE.roa (raw, json)
Hash identifier: wJhVkjFHEiLPwGaGYtr9iWW3S/G+5/0wwq2hdVfzMeI=
Subject key identifier: 04:A7:06:64:7B:30:08:33:7A:7B:11:2D:34:B2:09:01:72:DE:9D:A1
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F8AE5606A10A1423F9C84C8F826522855
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/BKcGZHswCDN6exEtNLIJAXLenaE.roa
Signing time: Wed 22 Jul 2026 17:35:15 +0000
ROA not before: Wed 22 Jul 2026 17:35:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 2.26.178.0/24 maxlen: 24
2.27.98.0/24 maxlen: 24
2.27.247.0/24 maxlen: 24
2.27.249.0/24 maxlen: 24
31.77.100.0/24 maxlen: 24
31.77.106.0/24 maxlen: 24
31.77.217.0/24 maxlen: 24
193.23.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:e5:60:6a:10:a1:42:3f:9c:84:c8:f8:26:52:28:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 22 17:35:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04a706647b3008337a7b112d34b2090172de9da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:04:15:61:99:e9:26:ae:b8:62:25:dd:9b:c6:
b5:03:cc:58:f3:28:2c:ab:6c:a7:79:90:f1:80:19:
f6:c4:e6:25:6a:33:a6:2c:7c:85:ab:80:38:21:0c:
12:0f:fc:61:b7:d4:df:50:02:21:fb:1e:94:5c:4b:
c2:98:b9:a2:10:2e:42:7f:de:5e:26:1c:bf:e2:bc:
ad:92:27:49:5d:f9:55:da:bb:24:bb:1d:79:18:b2:
79:93:37:d6:7b:5d:3b:a8:e6:4b:65:96:cc:55:eb:
1b:bd:6a:92:6c:5a:9a:9c:82:e1:52:73:10:5c:05:
59:b9:a8:f4:3a:3f:be:e2:1d:e1:5c:f5:cc:cc:af:
9d:b3:81:06:1f:b1:1f:f7:7b:bc:81:ec:c6:0a:91:
fd:c0:a0:c4:3b:e8:fb:31:c3:c1:17:5c:8a:80:f7:
97:22:d8:9a:13:07:6f:af:c8:8f:a4:46:9e:6d:97:
1d:ec:05:2a:8c:5e:90:34:25:47:c4:45:28:ac:7f:
d1:b5:3e:1a:17:27:c8:7b:3c:86:db:08:a8:68:e4:
b8:61:e9:e4:a6:9a:95:43:f5:b9:81:3f:4c:f5:59:
5a:74:d3:66:c7:1f:f8:ba:10:3f:ea:87:3d:be:69:
8e:83:33:96:d4:05:c8:fc:15:da:7c:bb:21:95:24:
3d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A7:06:64:7B:30:08:33:7A:7B:11:2D:34:B2:09:01:72:DE:9D:A1
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/BKcGZHswCDN6exEtNLIJAXLenaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.178.0/24
2.27.98.0/24
2.27.247.0/24
2.27.249.0/24
31.77.100.0/24
31.77.106.0/24
31.77.217.0/24
193.23.217.0/24
Signature Algorithm: sha256WithRSAEncryption
23:c9:97:f0:83:8e:36:c6:1a:e6:29:bb:6d:6e:dc:6e:24:fe:
9c:05:29:3c:42:29:39:58:f0:61:4a:2f:ab:d5:9c:e4:e7:65:
4f:92:17:12:04:2f:7b:bf:87:6e:42:a6:6c:d7:3e:fa:2a:83:
bb:63:44:32:73:02:c4:cf:74:0c:e6:9f:54:c6:c1:23:e8:1e:
3b:1e:af:c4:7c:50:fc:05:a5:f5:78:a7:6b:00:81:7a:f9:9e:
81:35:54:13:d9:53:9e:ed:9e:43:23:38:0b:63:b1:96:f5:26:
35:7e:0a:fe:8f:b3:91:60:98:0e:f7:33:ed:ea:dc:b2:cc:62:
b0:a7:60:c4:81:df:a8:07:67:f8:9b:0c:0f:bc:43:c4:cd:4a:
09:c7:e1:82:0e:96:af:44:d3:ad:6e:3c:59:0e:d6:89:65:5d:
f4:0d:36:59:da:53:45:01:69:c6:32:3a:53:66:2c:a3:59:dc:
82:61:c5:f4:51:aa:d0:fb:4b:30:1a:e0:c1:fb:59:2c:92:2d:
0b:87:01:16:cb:95:62:57:5c:d6:21:c5:c0:5c:42:65:1f:14:
ca:31:c3:c8:df:95:16:0e:85:e8:b2:ea:1d:1c:1d:0e:ec:16:
9e:2c:f0:4a:b6:75:cc:02:6c:57:7e:87:c2:ca:a0:1a:1b:6a:
be:98:a2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:33:39 2026 by rpki-client