Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/Boq5FnsQ1zHK5tlVHDGyy0C7C5o.roa
File: Boq5FnsQ1zHK5tlVHDGyy0C7C5o.roa (raw, json)
Hash identifier: wbHOcTrZbo2OTduZKSVf5A1YGrGRl+CXjIyie/oBfaw=
Subject key identifier: 06:8A:B9:16:7B:10:D7:31:CA:E6:D9:55:1C:31:B2:CB:40:BB:0B:9A
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 019E8F2A3BDAAB7679AAA569840BEDCB034F
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/Boq5FnsQ1zHK5tlVHDGyy0C7C5o.roa
Signing time: Wed 03 Jun 2026 20:26:10 +0000
ROA not before: Wed 03 Jun 2026 20:26:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46475
IP address blocks: 178.20.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 05:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8f:2a:3b:da:ab:76:79:aa:a5:69:84:0b:ed:cb:03:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Jun 3 20:26:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=068ab9167b10d731cae6d9551c31b2cb40bb0b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:52:d9:00:1f:74:ca:9d:81:e2:54:01:66:f3:
be:c2:ec:8f:31:5f:96:c8:4c:2e:80:f5:16:3f:18:
91:bf:54:0e:f1:6c:16:ba:4e:67:b9:b5:2f:68:eb:
d9:1a:31:ef:e5:35:62:cb:10:1e:42:3b:9b:a5:04:
d8:e0:c2:3a:49:8e:57:da:ce:1b:05:07:8d:13:b9:
be:50:44:95:ba:27:ec:95:83:83:e0:ab:b3:c9:13:
9f:0d:f4:39:60:11:a1:79:63:bd:8d:ed:9d:51:51:
98:f6:df:cf:75:3e:cd:5a:7f:1e:ff:bc:0b:ab:58:
28:cb:8a:81:45:bd:98:a2:a6:32:09:5e:46:c2:6b:
47:62:49:b0:bf:86:de:bd:d7:a5:10:47:4d:28:d1:
5f:1b:ef:0b:9d:d6:9f:68:a4:bf:66:cf:92:c2:2b:
55:0c:15:69:55:4f:43:a1:7c:af:a5:4e:86:42:e0:
e4:86:b6:be:10:12:89:5a:62:d8:d1:b4:1c:ac:09:
40:71:f2:51:92:d8:de:24:dc:72:8f:68:67:8d:7c:
70:c4:e6:92:c6:cb:40:e7:92:e9:28:9c:40:46:01:
4a:f9:fa:97:48:54:92:71:43:cc:bb:eb:68:35:42:
dc:1a:f8:26:fa:fb:13:b0:d4:5e:12:a9:eb:d2:b2:
f1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8A:B9:16:7B:10:D7:31:CA:E6:D9:55:1C:31:B2:CB:40:BB:0B:9A
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/Boq5FnsQ1zHK5tlVHDGyy0C7C5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.20.28.0/24
Signature Algorithm: sha256WithRSAEncryption
12:87:e2:c6:4c:72:50:0c:81:74:c5:1e:ff:74:61:cc:2d:0e:
e9:c2:8f:7c:97:84:73:ca:fd:cd:c4:f0:83:83:e1:89:9a:4f:
03:e9:3e:99:91:a7:90:e1:dc:79:e2:6c:58:93:60:ca:9e:93:
53:39:c8:bc:14:b0:75:3f:d4:d0:9a:39:69:8d:7d:a3:fa:46:
18:da:f4:64:f8:27:b8:f2:62:7c:6a:4c:46:90:37:94:92:39:
42:3e:60:8d:d0:11:29:3f:2f:7d:50:81:ad:9e:28:68:2e:70:
7d:28:ab:46:42:99:15:e9:f5:72:3b:2f:d5:2c:38:93:24:e4:
8c:70:15:1a:ef:7f:f4:7c:ee:5b:50:00:06:5f:aa:8c:f6:16:
f2:f3:91:80:d1:c4:d7:fd:7e:6c:c7:83:17:1a:a5:37:c5:d6:
a4:97:74:30:3e:a5:4a:ce:03:b2:45:ef:33:16:07:dc:53:7d:
1d:42:63:11:51:89:82:85:3f:74:72:0c:88:b9:ef:a6:1e:46:
b0:23:11:69:a9:6b:f1:ff:50:7b:eb:19:89:25:b0:58:1c:42:
d3:45:5d:6f:4d:e2:46:2d:33:67:e6:69:a1:38:59:aa:2c:ee:
10:46:34:e8:28:61:4b:f9:f8:9a:33:50:71:cd:06:45:ce:0d:
5a:a9:cb:34
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ6PKjvaq3Z5qqVphAvtywNPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2
OWExZmQwHhcNMjYwNjAzMjAyNjEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjhhYjkxNjdiMTBkNzMxY2FlNmQ5NTUxYzMxYjJjYjQwYmIwYjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1LZAB90yp2B4lQBZvO+wuyPMV+W
yEwugPUWPxiRv1QO8WwWuk5nubUvaOvZGjHv5TViyxAeQjubpQTY4MI6SY5X2s4b
BQeNE7m+UESVuifslYOD4KuzyROfDfQ5YBGheWO9je2dUVGY9t/PdT7NWn8e/7wL
q1goy4qBRb2YoqYyCV5GwmtHYkmwv4bevdelEEdNKNFfG+8LndafaKS/Zs+SwitV
DBVpVU9DoXyvpU6GQuDkhra+EBKJWmLY0bQcrAlAcfJRktjeJNxyj2hnjXxwxOaS
xstA55LpKJxARgFK+fqXSFSScUPMu+toNULcGvgm+vsTsNReEqnr0rLxzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAaKuRZ7ENcxyubZVRwxsstAuwuaMB8GA1UdIwQY
MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et
OTk0ODA2ZjA4MWYwLzEvQm9xNUZuc1ExekhLNXRsVkhER3l5MEM3QzVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw
LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAshQcMA0G
CSqGSIb3DQEBCwUAA4IBAQASh+LGTHJQDIF0xR7/dGHMLQ7pwo98l4Rzyv3NxPCD
g+GJmk8D6T6ZkaeQ4dx54mxYk2DKnpNTOci8FLB1P9TQmjlpjX2j+kYY2vRk+Ce4
8mJ8akxGkDeUkjlCPmCN0BEpPy99UIGtnihoLnB9KKtGQpkV6fVyOy/VLDiTJOSM
cBUa73/0fO5bUAAGX6qM9hby85GA0cTX/X5sx4MXGqU3xdakl3QwPqVKzgOyRe8z
FgfcU30dQmMRUYmChT90cgyIue+mHkawIxFpqWvx/1B76xmJJbBYHELTRV1vTeJG
LTNn5mmhOFmqLO4QRjToKGFL+fiaM1BxzQZFzg1aqcs0
-----END CERTIFICATE-----
Generated at Thu Jun 4 13:01:27 2026 by rpki-client