Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/Bwqkw8hQYoLkRSGSy5raojcWLEM.roa
File: Bwqkw8hQYoLkRSGSy5raojcWLEM.roa (raw, json)
Hash identifier: s1cp6dxJOLvgMnvUq9xTUKfWPnoAGmbO9eTZnTJu10c=
Subject key identifier: 07:0A:A4:C3:C8:50:62:82:E4:45:21:92:CB:9A:DA:A2:37:16:2C:43
Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Certificate serial: 01A0D3BCB3BE550D54679F7350B1C8CBF73D
Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/Bwqkw8hQYoLkRSGSy5raojcWLEM.roa
Signing time: Thu 24 Sep 2026 14:05:54 +0000
ROA not before: Thu 24 Sep 2026 14:05:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211422
IP address blocks: 77.110.89.0/24 maxlen: 24
80.71.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:bc:b3:be:55:0d:54:67:9f:73:50:b1:c8:cb:f7:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c
Validity
Not Before: Sep 24 14:05:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=070aa4c3c8506282e4452192cb9adaa237162c43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:14:26:50:e6:bc:37:39:5f:71:be:6a:a3:db:
7f:5f:12:a8:94:f8:05:c7:ec:81:6b:b9:42:66:3a:
1c:84:00:29:3c:25:9c:e5:15:a6:dc:92:62:ab:a8:
a7:36:60:c4:ef:1e:0f:f9:ff:09:a8:1f:6e:05:8d:
8f:f4:7c:78:de:c6:0d:a7:c4:f9:e6:56:c2:ae:4e:
c3:a9:1f:4f:de:a4:8f:a8:d0:2f:18:01:03:98:41:
1a:3d:19:10:c2:ac:f9:62:cf:af:4b:61:13:8e:10:
81:f0:ef:63:0f:9d:53:56:6f:1e:57:52:47:7e:4c:
fa:85:95:08:a8:dc:7f:df:28:5c:b3:67:c2:d7:db:
e2:d9:c1:98:4d:27:9e:a6:ca:82:ea:e8:ad:62:79:
25:a8:52:dd:11:2f:98:d6:e8:fc:b6:59:83:e2:17:
98:f0:83:d7:48:c2:bb:88:43:36:93:9f:d4:4b:6b:
01:ad:9b:0a:c9:0b:6d:1d:95:b7:f6:67:9b:1b:b2:
75:38:5f:24:a0:6f:96:71:62:f2:97:f9:0b:b7:67:
22:a2:11:5f:eb:7e:60:f7:e7:45:a2:09:fc:cf:7b:
71:62:85:d1:dd:8a:83:16:97:72:a3:42:4a:4a:ec:
61:0d:a3:a9:07:1d:10:39:6f:47:fe:4b:fd:52:39:
ef:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:0A:A4:C3:C8:50:62:82:E4:45:21:92:CB:9A:DA:A2:37:16:2C:43
X509v3 Authority Key Identifier:
keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/Bwqkw8hQYoLkRSGSy5raojcWLEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.110.89.0/24
80.71.153.0/24
Signature Algorithm: sha256WithRSAEncryption
87:8e:53:05:5d:44:10:96:28:aa:e1:01:c0:d3:e7:5e:52:be:
18:9d:b8:f7:3a:31:61:d0:0f:91:d2:55:6a:fb:7a:06:de:4c:
a8:e4:82:73:17:65:73:2c:48:6c:95:bb:71:64:47:7e:7d:ee:
43:88:f0:77:b5:9c:55:5a:85:0a:91:96:82:98:a1:8e:d1:ea:
65:ea:66:9c:62:00:3c:f8:4e:3d:9a:53:f1:aa:b4:d7:dd:86:
7d:bb:83:45:06:30:5f:12:00:c6:fd:9b:05:db:08:df:6e:53:
90:ef:a2:97:f6:38:06:23:e4:1a:0c:19:9a:9a:a2:c9:56:28:
d8:6f:ae:b9:62:1a:53:1a:e9:f1:60:73:53:ce:bc:49:bd:67:
ae:05:88:3c:99:b3:0e:a4:3e:70:f2:d4:4d:53:aa:ae:c9:a5:
a1:5e:31:1b:ef:4f:95:77:af:71:f5:b2:d5:17:55:ad:cf:6d:
fb:89:54:ac:4b:64:49:2c:a7:cc:b6:96:46:77:b6:3a:e1:fd:
f4:e8:6d:cc:7c:ca:ae:5d:2e:ea:7a:ee:7b:cf:ae:0b:61:66:
57:10:95:eb:7e:56:72:06:e7:01:3e:99:04:1e:5b:43:79:e8:
22:2a:b1:95:b5:c9:7b:dd:cd:06:6d:8a:58:32:04:74:ec:de:
92:f6:5b:53
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaDTvLO+VQ1UZ59zULHIy/c9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0Y2UyYmYwMDAxY2Q0MzBlOTI3N2ZiMDBlZDFhYmU1MWMw
YjVjN2MwHhcNMjYwOTI0MTQwNTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzBhYTRjM2M4NTA2MjgyZTQ0NTIxOTJjYjlhZGFhMjM3MTYyYzQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxQmUOa8Nzlfcb5qo9t/XxKolPgF
x+yBa7lCZjochAApPCWc5RWm3JJiq6inNmDE7x4P+f8JqB9uBY2P9Hx43sYNp8T5
5lbCrk7DqR9P3qSPqNAvGAEDmEEaPRkQwqz5Ys+vS2ETjhCB8O9jD51TVm8eV1JH
fkz6hZUIqNx/3yhcs2fC19vi2cGYTSeepsqC6uitYnklqFLdES+Y1uj8tlmD4heY
8IPXSMK7iEM2k5/US2sBrZsKyQttHZW39mebG7J1OF8koG+WcWLyl/kLt2ciohFf
635g9+dFogn8z3txYoXR3YqDFpdyo0JKSuxhDaOpBx0QOW9H/kv9Ujnv5wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAcKpMPIUGKC5EUhksua2qI3FixDMB8GA1UdIwQY
MBaAFNTOK/AAHNQw6Sd/sA7Rq+UcC1x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEt
MWY1NDMxZTJhNWFmLzEvQndxa3c4aFFZb0xrUlNHU3k1cmFvamNXTEVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEtMWY1NDMxZTJhNWFm
LzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATW5ZAwQA
UEeZMA0GCSqGSIb3DQEBCwUAA4IBAQCHjlMFXUQQliiq4QHA0+deUr4Ynbj3OjFh
0A+R0lVq+3oG3kyo5IJzF2VzLEhslbtxZEd+fe5DiPB3tZxVWoUKkZaCmKGO0epl
6macYgA8+E49mlPxqrTX3YZ9u4NFBjBfEgDG/ZsF2wjfblOQ76KX9jgGI+QaDBma
mqLJVijYb665YhpTGunxYHNTzrxJvWeuBYg8mbMOpD5w8tRNU6quyaWhXjEb70+V
d69x9bLVF1Wtz237iVSsS2RJLKfMtpZGd7Y64f306G3MfMquXS7qeu57z64LYWZX
EJXrflZyBucBPpkEHltDeegiKrGVtcl73c0GbYpYMgR07N6S9ltT
-----END CERTIFICATE-----
Generated at Sat Sep 26 18:06:25 2026 by rpki-client