Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/BVq9qXe2XplihlBzTr7lb82zre4.roa
File: BVq9qXe2XplihlBzTr7lb82zre4.roa (raw, json)
Hash identifier: 317TbwY05dAyVEWEHTA+tDQYBDkUcmlN6KvuQ6xdAGU=
Subject key identifier: 05:5A:BD:A9:77:B6:5E:99:62:86:50:73:4E:BE:E5:6F:CD:B3:AD:EE
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019FFD2240B4E847480166CCD7DD820A5F61
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/BVq9qXe2XplihlBzTr7lb82zre4.roa
Signing time: Thu 13 Aug 2026 21:58:28 +0000
ROA not before: Thu 13 Aug 2026 21:58:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26042
IP address blocks: 217.117.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 13:46:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fd:22:40:b4:e8:47:48:01:66:cc:d7:dd:82:0a:5f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 13 21:58:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=055abda977b65e99628650734ebee56fcdb3adee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9a:64:da:bd:e0:1a:da:02:a1:9b:e4:91:6d:
5c:92:1e:3a:a3:ed:88:98:9b:d1:68:4f:a6:55:ba:
fa:b0:a4:91:f0:22:d4:7a:f0:df:54:06:90:f1:9a:
a2:60:6c:5b:41:f5:19:14:09:96:63:ea:ad:11:44:
81:37:2a:be:f8:f5:55:ae:08:8a:a9:28:27:08:9d:
e6:a5:e7:0a:a2:ee:ca:b0:52:b8:84:04:12:2a:72:
66:d0:68:ac:95:68:4c:29:6d:78:56:67:48:59:1e:
e8:29:7f:d4:a6:a7:78:f7:69:b1:07:fe:47:b3:6c:
e8:ef:fa:75:bc:aa:4c:fe:6c:f2:e8:0b:6c:85:a9:
87:3a:4d:d5:be:d3:db:61:83:e5:73:8f:b6:35:ac:
e6:57:e3:20:19:10:4e:9d:b5:1b:93:ef:3d:0d:20:
61:07:49:7f:97:d5:69:26:67:cd:35:0e:dc:4d:87:
28:63:ce:d8:06:97:96:d4:20:97:16:5c:5e:73:a5:
a9:45:13:f8:05:8c:8e:db:6b:dd:3e:8d:14:97:b7:
71:e8:d0:38:6d:e3:af:c6:b7:b8:c7:b0:78:bf:fe:
59:d4:cb:c6:e3:ab:c1:9b:e3:c8:74:1d:ce:39:6e:
1b:fb:a4:d7:ac:1b:cb:cc:61:b4:4d:a6:48:2a:bf:
d4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:5A:BD:A9:77:B6:5E:99:62:86:50:73:4E:BE:E5:6F:CD:B3:AD:EE
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/BVq9qXe2XplihlBzTr7lb82zre4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.117.162.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:da:60:36:5f:37:27:5f:49:38:26:df:00:7d:40:d6:fd:2d:
39:10:5a:b6:cf:39:8b:06:2f:2e:00:bb:ed:e2:ad:20:a1:9e:
67:8d:05:43:04:42:f4:17:47:e6:50:f1:57:77:4a:65:09:22:
5f:ea:b5:d9:9c:dd:e6:8a:87:3f:c1:57:5f:3c:d8:ec:a2:40:
38:0b:48:6f:c0:27:e6:b2:77:b9:2c:2e:29:d7:cc:0f:7b:53:
7b:b0:a3:77:04:c4:7d:c2:a7:14:8c:42:8f:ad:c0:a1:f4:57:
5d:ba:82:98:2e:36:de:b9:2e:6b:c1:7f:07:d5:24:ee:5a:0a:
dc:91:26:d6:c8:65:5d:cc:79:4a:05:98:7e:0f:aa:be:a3:4c:
cb:5c:0b:9b:68:97:eb:fa:21:f9:a2:a7:54:b6:4c:49:cf:38:
5d:12:41:27:9e:f0:d7:26:4c:f1:93:d1:72:5f:a7:1f:68:7b:
58:84:36:e0:86:db:63:d7:0b:05:7c:9a:a4:fb:fc:93:60:fb:
70:05:da:29:a4:85:43:a9:7f:ae:66:5a:87:77:d0:e0:cf:2f:
eb:06:9b:23:2a:da:06:5d:e7:62:23:dc:a3:03:f2:8e:26:5d:
df:b6:a3:da:68:73:ae:97:b5:e3:62:63:77:0a:2f:c3:e0:d1:
9f:82:00:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/9IkC06EdIAWbM192CCl9hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYwODEzMjE1ODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTVhYmRhOTc3YjY1ZTk5NjI4NjUwNzM0ZWJlZTU2ZmNkYjNhZGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ppk2r3gGtoCoZvkkW1ckh46o+2I
mJvRaE+mVbr6sKSR8CLUevDfVAaQ8ZqiYGxbQfUZFAmWY+qtEUSBNyq++PVVrgiK
qSgnCJ3mpecKou7KsFK4hAQSKnJm0GislWhMKW14VmdIWR7oKX/Upqd492mxB/5H
s2zo7/p1vKpM/mzy6AtshamHOk3VvtPbYYPlc4+2NazmV+MgGRBOnbUbk+89DSBh
B0l/l9VpJmfNNQ7cTYcoY87YBpeW1CCXFlxec6WpRRP4BYyO22vdPo0Ul7dx6NA4
beOvxre4x7B4v/5Z1MvG46vBm+PIdB3OOW4b+6TXrBvLzGG0TaZIKr/U0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAVaval3tl6ZYoZQc06+5W/Ns63uMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvQlZxOXFYZTJYcGxpaGxCelRyN2xiODJ6cmU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2XWiMA0G
CSqGSIb3DQEBCwUAA4IBAQDF2mA2XzcnX0k4Jt8AfUDW/S05EFq2zzmLBi8uALvt
4q0goZ5njQVDBEL0F0fmUPFXd0plCSJf6rXZnN3mioc/wVdfPNjsokA4C0hvwCfm
sne5LC4p18wPe1N7sKN3BMR9wqcUjEKPrcCh9FdduoKYLjbeuS5rwX8H1STuWgrc
kSbWyGVdzHlKBZh+D6q+o0zLXAubaJfr+iH5oqdUtkxJzzhdEkEnnvDXJkzxk9Fy
X6cfaHtYhDbghttj1wsFfJqk+/yTYPtwBdoppIVDqX+uZlqHd9Dgzy/rBpsjKtoG
XediI9yjA/KOJl3ftqPaaHOul7XjYmN3Ci/D4NGfggAR
-----END CERTIFICATE-----
Generated at Wed Sep 9 18:17:58 2026 by rpki-client