Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/BnWzhBw9quRcCqg-Btb_Rw8zxGU.roa
File: BnWzhBw9quRcCqg-Btb_Rw8zxGU.roa (raw, json)
Hash identifier: bT5+4BMUaYaI2hlhwHLR54Dvqj+cIntyC8I96Nleb+I=
Subject key identifier: 06:75:B3:84:1C:3D:AA:E4:5C:0A:A8:3E:06:D6:FF:47:0F:33:C4:65
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F5C3CEFC5088B2FBF8B08763CFB1C40A7
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/BnWzhBw9quRcCqg-Btb_Rw8zxGU.roa
Signing time: Mon 13 Jul 2026 16:08:45 +0000
ROA not before: Mon 13 Jul 2026 16:08:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147003
IP address blocks: 2.27.128.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5c:3c:ef:c5:08:8b:2f:bf:8b:08:76:3c:fb:1c:40:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 13 16:08:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0675b3841c3daae45c0aa83e06d6ff470f33c465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:33:a9:45:70:cf:ad:d3:21:c0:c6:fd:42:64:
4a:28:d5:eb:e1:2a:d1:7b:63:cd:56:20:51:fd:f8:
6d:fd:da:13:a6:00:42:de:34:1e:a9:9a:28:27:67:
ea:e7:08:ca:19:a0:29:ad:e5:c8:25:11:ec:2a:34:
86:29:73:02:56:12:77:ac:ac:76:04:b4:28:74:35:
af:f6:98:46:a4:9b:62:46:38:a6:10:dd:66:43:c0:
81:90:7a:62:e4:de:47:19:91:22:3a:ee:fe:70:a9:
24:74:ef:16:a6:2f:46:3b:58:3f:55:8a:29:3a:ce:
a7:08:59:87:61:80:83:69:e3:02:44:8a:72:1a:66:
31:a8:8c:b3:fb:60:cc:c2:e5:bb:e8:24:3f:c9:07:
20:94:78:0c:0e:b5:11:8f:b8:e5:bb:25:75:0b:04:
85:bc:c1:fb:3a:eb:92:42:c1:fa:0a:37:47:0c:75:
86:f8:b3:48:ad:18:da:a1:83:9a:16:fe:f0:cb:b4:
45:b8:f7:d8:f6:22:05:79:21:c8:76:9b:92:df:87:
b3:37:8b:4c:2d:85:f9:a8:69:48:6d:68:74:04:da:
3d:95:7c:05:7e:59:8b:75:d8:39:65:f0:cc:be:32:
fe:f6:74:cc:4d:09:74:51:50:0d:7d:06:a5:40:57:
e1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:75:B3:84:1C:3D:AA:E4:5C:0A:A8:3E:06:D6:FF:47:0F:33:C4:65
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/BnWzhBw9quRcCqg-Btb_Rw8zxGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.128.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:7b:20:f8:e2:64:f3:ff:91:76:46:e3:ac:e3:ba:03:c5:b7:
0e:93:eb:b7:54:69:ad:65:14:a5:db:d5:45:20:24:34:b5:52:
4d:95:d6:f6:85:4b:d7:0e:7c:61:6e:79:f0:bb:70:d8:6e:cb:
cc:4c:2a:83:fb:ed:8d:85:8c:9d:29:6f:c7:bf:f5:53:65:4e:
e0:ab:77:1a:50:1c:70:a2:31:b0:40:f7:89:64:4e:16:ec:ca:
51:2a:a3:d4:de:47:42:ad:3e:d8:a8:79:ab:ab:f4:74:76:34:
b5:31:99:ae:05:82:de:3c:6f:52:40:bf:c4:66:94:80:9e:d7:
dd:e0:28:a7:67:ab:b7:b8:92:b1:71:46:00:87:49:5a:4e:db:
e7:4f:24:f9:26:07:d2:7b:96:f1:6d:07:9b:c8:0c:db:e1:ae:
22:ee:fc:21:53:82:99:3f:30:b4:37:61:77:9d:c8:72:df:cc:
28:45:4b:4d:bb:c3:ec:03:52:d1:4b:68:ba:85:c0:d8:e5:e1:
66:2b:69:3d:70:a4:5b:92:34:83:65:7b:db:09:a4:37:4d:93:
86:d6:a0:cb:ef:13:57:e2:92:21:73:6e:42:bc:79:1a:c5:13:
f7:21:07:2e:84:64:25:79:7d:3a:4b:ab:65:38:7a:f6:a4:3e:
97:b4:f5:92
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9cPO/FCIsvv4sIdjz7HECnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNzEzMTYwODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjc1YjM4NDFjM2RhYWU0NWMwYWE4M2UwNmQ2ZmY0NzBmMzNjNDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzOpRXDPrdMhwMb9QmRKKNXr4SrR
e2PNViBR/fht/doTpgBC3jQeqZooJ2fq5wjKGaApreXIJRHsKjSGKXMCVhJ3rKx2
BLQodDWv9phGpJtiRjimEN1mQ8CBkHpi5N5HGZEiOu7+cKkkdO8Wpi9GO1g/VYop
Os6nCFmHYYCDaeMCRIpyGmYxqIyz+2DMwuW76CQ/yQcglHgMDrURj7jluyV1CwSF
vMH7OuuSQsH6CjdHDHWG+LNIrRjaoYOaFv7wy7RFuPfY9iIFeSHIdpuS34ezN4tM
LYX5qGlIbWh0BNo9lXwFflmLddg5ZfDMvjL+9nTMTQl0UVANfQalQFfhWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAZ1s4QcParkXAqoPgbW/0cPM8RlMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvQm5XemhCdzlxdVJjQ3FnLUJ0Yl9Sdzh6eEdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBAhuAMA0G
CSqGSIb3DQEBCwUAA4IBAQCteyD44mTz/5F2RuOs47oDxbcOk+u3VGmtZRSl29VF
ICQ0tVJNldb2hUvXDnxhbnnwu3DYbsvMTCqD++2NhYydKW/Hv/VTZU7gq3caUBxw
ojGwQPeJZE4W7MpRKqPU3kdCrT7YqHmrq/R0djS1MZmuBYLePG9SQL/EZpSAntfd
4CinZ6u3uJKxcUYAh0laTtvnTyT5JgfSe5bxbQebyAzb4a4i7vwhU4KZPzC0N2F3
nchy38woRUtNu8PsA1LRS2i6hcDY5eFmK2k9cKRbkjSDZXvbCaQ3TZOG1qDL7xNX
4pIhc25CvHkaxRP3IQcuhGQleX06S6tlOHr2pD6XtPWS
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:55:06 2026 by rpki-client