Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/c10b5e-6eee-49a2-b447-1e6ded138d19/1/bjjAALgFVUM3aFXnho1YkQLd90A.roa
File: bjjAALgFVUM3aFXnho1YkQLd90A.roa (raw, json)
Hash identifier: b9O6VtHaS4ecpyD2zgO7fBR68/h1giUVaDWXCjvnsVs=
Subject key identifier: 6E:38:C0:00:B8:05:55:43:37:68:55:E7:86:8D:58:91:02:DD:F7:40
Certificate issuer: /CN=271f6c1770313c098ac3fcca409fa0a85f7aec1c
Certificate serial: 019D23FD09179F00AE53D3EDF69EDD3F31B3
Authority key identifier: 27:1F:6C:17:70:31:3C:09:8A:C3:FC:CA:40:9F:A0:A8:5F:7A:EC:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jx9sF3AxPAmKw_zKQJ-gqF967Bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/c10b5e-6eee-49a2-b447-1e6ded138d19/1/bjjAALgFVUM3aFXnho1YkQLd90A.roa
Signing time: Wed 25 Mar 2026 07:54:38 +0000
ROA not before: Wed 25 Mar 2026 07:54:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47863
IP address blocks: 93.191.0.0/21 maxlen: 21
93.191.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/c10b5e-6eee-49a2-b447-1e6ded138d19/1/Jx9sF3AxPAmKw_zKQJ-gqF967Bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/c10b5e-6eee-49a2-b447-1e6ded138d19/1/Jx9sF3AxPAmKw_zKQJ-gqF967Bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jx9sF3AxPAmKw_zKQJ-gqF967Bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:23:fd:09:17:9f:00:ae:53:d3:ed:f6:9e:dd:3f:31:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=271f6c1770313c098ac3fcca409fa0a85f7aec1c
Validity
Not Before: Mar 25 07:54:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e38c000b8055543376855e7868d589102ddf740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:00:b7:cf:ef:d4:bd:17:8b:84:fb:04:f6:82:
40:d6:c3:3d:a9:8f:fd:45:3f:d6:ac:ba:51:e3:da:
17:69:6f:55:d0:06:a0:b4:85:2d:be:c1:e4:bc:2a:
8b:8b:c6:ce:b7:b2:9f:16:ae:fa:f2:5f:1f:73:05:
d3:a7:76:76:d5:d2:2a:75:6e:9e:9a:70:0b:5f:85:
22:15:60:e3:a5:fc:be:b0:c9:63:f4:83:37:a6:4b:
90:ac:68:b3:7a:bc:e0:34:cc:53:24:37:e3:a2:90:
10:e0:fc:e4:e4:71:5a:8c:52:a2:a3:14:61:6c:71:
76:2b:e1:4d:ab:dd:17:2d:ce:e0:23:dc:14:eb:ae:
59:5a:43:c5:15:ff:0c:ae:38:ed:db:72:3d:88:9f:
3c:5c:d4:49:26:00:0e:e2:6e:c0:d1:72:03:df:86:
43:9c:31:2e:25:23:f4:39:33:66:14:5d:cd:bc:e1:
e2:d4:ef:47:bd:86:c2:81:88:b7:41:9e:b0:a7:f1:
45:d9:2b:3d:c6:57:74:15:e6:2d:94:73:5c:4b:fd:
36:2c:e4:09:4a:9e:71:a6:35:f0:01:f8:80:05:13:
6b:f7:a5:8a:1c:56:23:4b:b8:7f:4b:43:5f:47:28:
8a:52:84:07:b4:7a:6f:3a:bf:72:e4:6f:53:a8:02:
91:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:38:C0:00:B8:05:55:43:37:68:55:E7:86:8D:58:91:02:DD:F7:40
X509v3 Authority Key Identifier:
keyid:27:1F:6C:17:70:31:3C:09:8A:C3:FC:CA:40:9F:A0:A8:5F:7A:EC:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jx9sF3AxPAmKw_zKQJ-gqF967Bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c10b5e-6eee-49a2-b447-1e6ded138d19/1/bjjAALgFVUM3aFXnho1YkQLd90A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/c10b5e-6eee-49a2-b447-1e6ded138d19/1/Jx9sF3AxPAmKw_zKQJ-gqF967Bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.0.0/21
Signature Algorithm: sha256WithRSAEncryption
69:74:ec:96:6d:9f:41:35:d8:08:0b:4a:b5:cc:0c:88:d1:43:
f3:b7:96:11:44:bd:ff:7c:26:a0:90:cd:90:cd:70:43:a5:1a:
ef:9e:7b:06:7f:6d:4a:94:83:de:17:63:09:84:9b:ad:dd:4f:
89:4b:d6:ec:0f:03:52:8e:cb:5d:5b:ba:72:87:78:8d:f8:88:
7f:4d:24:01:3a:f7:bc:cb:e0:5a:ac:c9:98:d5:d8:9d:c8:6a:
5c:72:68:32:44:fc:d4:54:ca:50:9c:b2:1f:77:00:bd:fa:f5:
df:c3:71:1c:d3:02:90:97:52:55:10:bf:af:5c:08:56:ab:c9:
11:da:8b:09:10:67:21:9c:65:85:5f:15:5a:2b:a0:6a:21:30:
45:75:c7:07:51:86:7f:24:27:26:83:36:03:65:a3:b6:17:c9:
f3:f8:c8:d3:86:f2:4d:5e:02:16:47:c8:75:0b:de:cd:7f:d8:
fe:e7:56:b5:13:b3:e3:ca:26:eb:fd:cf:73:ee:58:ea:34:f9:
3f:31:d0:13:bb:1f:ae:10:ed:5d:9f:fd:1e:f1:6f:5b:7f:e8:
97:12:65:76:07:6a:c4:34:09:3b:5f:2e:3c:2f:14:80:fa:79:
9e:e6:36:6f:ac:4c:07:79:09:69:23:4d:80:a2:b9:87:a7:90:
6e:4a:7e:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ0j/QkXnwCuU9Pt9p7dPzGzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MWY2YzE3NzAzMTNjMDk4YWMzZmNjYTQwOWZhMGE4NWY3
YWVjMWMwHhcNMjYwMzI1MDc1NDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTM4YzAwMGI4MDU1NTQzMzc2ODU1ZTc4NjhkNTg5MTAyZGRmNzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQC3z+/UvReLhPsE9oJA1sM9qY/9
RT/WrLpR49oXaW9V0AagtIUtvsHkvCqLi8bOt7KfFq768l8fcwXTp3Z21dIqdW6e
mnALX4UiFWDjpfy+sMlj9IM3pkuQrGizerzgNMxTJDfjopAQ4Pzk5HFajFKioxRh
bHF2K+FNq90XLc7gI9wU665ZWkPFFf8Mrjjt23I9iJ88XNRJJgAO4m7A0XID34ZD
nDEuJSP0OTNmFF3NvOHi1O9HvYbCgYi3QZ6wp/FF2Ss9xld0FeYtlHNcS/02LOQJ
Sp5xpjXwAfiABRNr96WKHFYjS7h/S0NfRyiKUoQHtHpvOr9y5G9TqAKRuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG44wAC4BVVDN2hV54aNWJEC3fdAMB8GA1UdIwQY
MBaAFCcfbBdwMTwJisP8ykCfoKhfeuwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSng5c0YzQXhQQW1Ld196S1FKLWdxRjk2N0J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9jMTBiNWUtNmVlZS00OWEyLWI0NDct
MWU2ZGVkMTM4ZDE5LzEvYmpqQUFMZ0ZWVU0zYUZYbmhvMVlrUUxkOTBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS9jMTBiNWUtNmVlZS00OWEyLWI0NDctMWU2ZGVkMTM4ZDE5
LzEvSng5c0YzQXhQQW1Ld196S1FKLWdxRjk2N0J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXb8AMA0G
CSqGSIb3DQEBCwUAA4IBAQBpdOyWbZ9BNdgIC0q1zAyI0UPzt5YRRL3/fCagkM2Q
zXBDpRrvnnsGf21KlIPeF2MJhJut3U+JS9bsDwNSjstdW7pyh3iN+Ih/TSQBOve8
y+BarMmY1didyGpccmgyRPzUVMpQnLIfdwC9+vXfw3Ec0wKQl1JVEL+vXAhWq8kR
2osJEGchnGWFXxVaK6BqITBFdccHUYZ/JCcmgzYDZaO2F8nz+MjThvJNXgIWR8h1
C97Nf9j+51a1E7Pjyibr/c9z7ljqNPk/MdATux+uEO1dn/0e8W9bf+iXEmV2B2rE
NAk7Xy48LxSA+nme5jZvrEwHeQlpI02AormHp5BuSn5t
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:48:54 2026 by rpki-client