Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Bjq8uYkvKM7KdMuxKN3BWB4oemw.roa
File: Bjq8uYkvKM7KdMuxKN3BWB4oemw.roa (raw, json)
Hash identifier: rgnPGYcxU8djNtBHg4xXrBENSFb9JyVnYtblH3tzzLs=
Subject key identifier: 06:3A:BC:B9:89:2F:28:CE:CA:74:CB:B1:28:DD:C1:58:1E:28:7A:6C
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F23690845C1271EC0103DA5E91A826ADC
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Bjq8uYkvKM7KdMuxKN3BWB4oemw.roa
Signing time: Thu 02 Jul 2026 15:18:33 +0000
ROA not before: Thu 02 Jul 2026 15:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60633
IP address blocks: 193.5.38.0/24 maxlen: 24
193.246.32.0/21 maxlen: 21
193.246.40.0/21 maxlen: 21
193.246.208.0/20 maxlen: 20
2a02:a90:c405::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:08:45:c1:27:1e:c0:10:3d:a5:e9:1a:82:6a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=063abcb9892f28ceca74cbb128ddc1581e287a6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f2:12:b3:bb:13:c5:24:af:9e:36:e3:64:c1:
ee:f9:ef:0a:08:62:ed:71:88:e5:37:dc:ac:b6:05:
69:30:02:64:25:d4:c0:70:58:8f:ca:fd:21:aa:88:
3e:ee:46:0e:cb:b1:64:ab:80:5c:c5:3d:34:fd:dd:
04:2d:61:c4:ff:90:d5:b3:90:e8:0b:fc:90:e2:32:
bd:6a:73:eb:2a:56:6e:74:04:a5:97:d3:b1:82:24:
c4:2b:3c:e4:47:5e:fd:3d:52:3d:83:f0:46:02:e7:
03:4b:f9:09:2d:a6:f7:e5:16:4d:4e:38:ff:72:33:
60:3f:da:ce:44:88:3f:0d:53:ca:4e:45:7d:03:a6:
83:7d:59:7a:4e:33:59:cf:fb:30:d1:5e:12:1a:86:
1b:31:c9:11:9b:26:15:fd:88:06:39:80:45:16:70:
99:55:83:59:32:70:b3:9e:bc:f1:71:d0:8a:d4:12:
db:d6:10:6b:92:60:8d:24:84:6c:5b:97:a7:3a:4d:
4f:d5:b0:f7:e6:92:e4:79:66:4a:28:4b:75:41:63:
62:08:3e:e4:86:ae:77:2b:66:1a:d4:d5:ae:38:65:
1d:cb:fb:ab:37:ae:46:98:94:93:f4:9a:9e:8b:b2:
21:06:11:1e:9f:b6:87:c7:d5:b4:20:f6:be:64:2d:
fe:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3A:BC:B9:89:2F:28:CE:CA:74:CB:B1:28:DD:C1:58:1E:28:7A:6C
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Bjq8uYkvKM7KdMuxKN3BWB4oemw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.38.0/24
193.246.32.0/20
193.246.208.0/20
IPv6:
2a02:a90:c405::/48
Signature Algorithm: sha256WithRSAEncryption
40:2f:72:dc:59:71:86:36:c8:e4:ca:61:be:3b:a9:5e:08:ce:
a7:95:67:7f:e0:3d:7d:4f:33:2f:29:d9:78:53:62:0d:ff:3c:
60:b2:1e:78:7d:12:2f:dd:28:83:d3:b2:6a:e5:43:27:46:5b:
2b:52:9e:04:de:b0:75:28:75:bd:3e:81:01:0a:f8:03:62:b9:
7e:a4:87:c7:1d:84:c9:4a:20:04:54:be:0a:87:85:70:9b:2b:
23:10:b0:e3:20:13:ff:73:ac:a3:d6:1d:51:52:3a:4e:1f:70:
9a:fb:0a:0e:dd:e4:b5:ac:ec:a5:8f:48:07:b1:74:94:0e:47:
26:f0:a1:fc:c3:94:07:0f:e3:cb:63:15:8f:69:3c:c1:a9:80:
b3:64:7a:f2:77:85:d3:eb:22:cc:7f:ea:4d:ec:11:c5:39:f0:
62:a1:8b:f5:5e:89:e8:bd:41:2b:52:01:6f:97:39:64:47:0b:
b7:e7:1e:ae:d9:20:48:f4:5a:54:a9:7a:d1:ac:e3:91:a7:05:
57:f2:81:aa:11:49:74:5b:24:64:3f:c0:a3:1f:73:34:e5:2c:
91:b3:a1:ca:69:d1:b9:50:ed:e4:11:6b:be:96:34:84:56:ad:
3c:d8:bf:96:a4:85:26:75:7c:dd:b3:5f:b5:f1:91:68:3d:9f:
4e:73:fe:59
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAZ8jaQhFwScewBA9pekagmrcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2MDY4ODk2YzA5ZGRkZjNjMWI3MzQ5NTYwZDBkZTRjNDBi
ZDlmOGYwHhcNMjYwNzAyMTUxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjNhYmNiOTg5MmYyOGNlY2E3NGNiYjEyOGRkYzE1ODFlMjg3YTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/ISs7sTxSSvnjbjZMHu+e8KCGLt
cYjlN9ystgVpMAJkJdTAcFiPyv0hqog+7kYOy7Fkq4BcxT00/d0ELWHE/5DVs5Do
C/yQ4jK9anPrKlZudASll9OxgiTEKzzkR179PVI9g/BGAucDS/kJLab35RZNTjj/
cjNgP9rORIg/DVPKTkV9A6aDfVl6TjNZz/sw0V4SGoYbMckRmyYV/YgGOYBFFnCZ
VYNZMnCznrzxcdCK1BLb1hBrkmCNJIRsW5enOk1P1bD35pLkeWZKKEt1QWNiCD7k
hq53K2Ya1NWuOGUdy/urN65GmJST9Jqei7IhBhEen7aHx9W0IPa+ZC3+cwIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFAY6vLmJLyjOynTLsSjdwVgeKHpsMB8GA1UdIwQY
MBaAFIYGiJbAnd3zwbc0lWDQ3kxAvZ+PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaGdhSWxzQ2QzZlBCdHpTVllORGVURUM5bjQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUt
YmQxOTI2NzZjOWJiLzEvQmpxOHVZa3ZLTTdLZE11eEtOM0JXQjRvZW13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jOGM2ZjYtNTk1Yy00NWIxLWE3NmUtYmQxOTI2NzZjOWJi
LzEvaGdhSWxzQ2QzZlBCdHpTVllORGVURUM5bjQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAwQUmAwQE
wfYgAwQEwfbQMA8EAgACMAkDBwAqAgqQxAUwDQYJKoZIhvcNAQELBQADggEBAEAv
ctxZcYY2yOTKYb47qV4IzqeVZ3/gPX1PMy8p2XhTYg3/PGCyHnh9Ei/dKIPTsmrl
QydGWytSngTesHUodb0+gQEK+ANiuX6kh8cdhMlKIARUvgqHhXCbKyMQsOMgE/9z
rKPWHVFSOk4fcJr7Cg7d5LWs7KWPSAexdJQORybwofzDlAcP48tjFY9pPMGpgLNk
evJ3hdPrIsx/6k3sEcU58GKhi/Veiei9QStSAW+XOWRHC7fnHq7ZIEj0WlSpetGs
45GnBVfygaoRSXRbJGQ/wKMfczTlLJGzocpp0blQ7eQRa76WNIRWrTzYv5akhSZ1
fN2zX7XxkWg9n05z/lk=
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:57:31 2026 by rpki-client