Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/BxsmLSv0OmQvfaaR_vOsdlNufSE.roa
File: BxsmLSv0OmQvfaaR_vOsdlNufSE.roa (raw, json)
Hash identifier: IrSduUbt/RHhFn/tRQy34CtezG1zK3nRyCm+kU8vkDI=
Subject key identifier: 07:1B:26:2D:2B:F4:3A:64:2F:7D:A6:91:FE:F3:AC:76:53:6E:7D:21
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0398242FFFE7430429B6DA3AA35C09869
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/BxsmLSv0OmQvfaaR_vOsdlNufSE.roa
Signing time: Tue 25 Aug 2026 15:20:33 +0000
ROA not before: Tue 25 Aug 2026 15:20:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197715
IP address blocks: 193.38.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:42:ff:fe:74:30:42:9b:6d:a3:aa:35:c0:98:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=071b262d2bf43a642f7da691fef3ac76536e7d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4e:5c:cb:59:f7:ba:f6:d4:ca:82:01:3c:eb:
27:f9:62:5a:8a:f7:6a:d9:a3:d3:15:99:26:f3:49:
13:c3:7c:da:52:b3:96:36:73:01:01:56:da:49:86:
f4:7e:1d:ae:ee:36:14:e6:c3:d4:76:1c:0c:f0:a7:
31:76:06:cb:a1:8b:20:fe:4b:ed:03:76:fa:18:e5:
2d:c4:a2:70:c7:dc:a4:44:d0:0c:b0:c0:85:1a:e4:
b2:8a:87:55:db:26:68:59:ba:f4:1c:12:b8:fb:b6:
de:1d:e2:74:c4:34:29:55:9e:b4:6b:1d:fe:48:bb:
ac:79:f3:4c:ab:91:4d:f1:fc:0e:b0:78:6b:79:df:
18:d7:7b:7a:aa:f8:04:d7:51:c4:2c:df:a5:f2:32:
e9:5a:ee:13:6c:87:c8:9f:d6:52:7f:6b:ce:b3:fe:
2c:b2:b0:8c:63:4f:63:d8:ff:55:8e:9a:d9:c3:df:
57:e3:17:5c:9a:bc:d4:33:87:17:fd:d2:55:2a:61:
e5:83:62:78:3c:fb:f7:aa:d3:c9:85:eb:d0:09:93:
e3:eb:63:bc:54:a3:36:6e:ce:10:18:0b:61:38:25:
04:dc:64:92:45:53:e3:d9:9a:a5:60:0d:89:75:f5:
36:a2:8d:4d:82:1f:96:63:fc:dd:a3:de:57:68:1e:
8d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1B:26:2D:2B:F4:3A:64:2F:7D:A6:91:FE:F3:AC:76:53:6E:7D:21
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/BxsmLSv0OmQvfaaR_vOsdlNufSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.46.0/24
Signature Algorithm: sha256WithRSAEncryption
21:0f:59:51:67:40:ee:51:c5:0e:6b:05:66:71:01:0f:b0:6a:
31:23:ea:12:c5:48:49:dc:23:fa:e7:3e:53:74:ff:06:02:e7:
8f:35:91:ea:a5:a9:84:9d:e0:6f:64:49:4f:4c:2b:b2:f6:9e:
25:a0:66:a6:40:96:a9:2d:50:9a:cd:4c:87:a3:24:95:dc:4a:
3b:51:88:b1:32:fd:cd:42:ad:e7:90:82:23:35:09:ed:30:df:
44:33:0c:f3:df:93:2d:46:a5:e4:66:4f:86:57:4c:0a:ac:4d:
58:dd:a6:20:39:db:e9:63:74:4f:83:3f:1b:a5:85:8d:88:c2:
a0:79:e2:4f:11:b6:e5:ee:65:4f:76:aa:ad:b0:b3:28:9d:71:
0e:d4:4b:4b:4d:67:6e:71:60:32:61:03:fc:b2:83:84:1a:05:
21:b5:ec:ba:d7:ed:bb:55:96:dd:f2:fe:90:b5:8d:28:fd:52:
63:3c:09:41:48:02:78:24:ed:6c:be:26:19:d3:e7:d9:2d:1c:
76:75:45:0f:0f:51:97:ab:be:a3:7b:e1:a7:65:e0:8b:74:db:
5b:24:67:a9:84:33:79:77:dd:a7:bd:76:ce:ab:ec:ff:a9:85:
09:5a:b3:24:fa:e1:df:fa:68:e6:66:d9:e9:23:7e:c3:aa:80:
30:48:db:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:05:00 2026 by rpki-client