Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/BapY2XxqoZXbgQAX396R4F0sq10.roa
File: BapY2XxqoZXbgQAX396R4F0sq10.roa (raw, json)
Hash identifier: v1PBPfHj0irKhE+T39+boSsggJ2CQPjGbTo0Px6ja/w=
Subject key identifier: 05:AA:58:D9:7C:6A:A1:95:DB:81:00:17:DF:DE:91:E0:5D:2C:AB:5D
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A03F7C068EB126BCC811DF4C36D3B3CAEF
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/BapY2XxqoZXbgQAX396R4F0sq10.roa
Signing time: Wed 26 Aug 2026 19:11:27 +0000
ROA not before: Wed 26 Aug 2026 19:11:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197328
IP address blocks: 201.4.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:7c:06:8e:b1:26:bc:c8:11:df:4c:36:d3:b3:ca:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Aug 26 19:11:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05aa58d97c6aa195db810017dfde91e05d2cab5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:95:c6:14:5a:b8:35:c9:f4:ec:e9:25:56:00:
cc:69:69:e2:e5:a5:76:f2:13:be:d7:d0:dd:6a:54:
98:b9:3a:34:0f:4b:21:65:f0:0d:7c:15:d9:e3:55:
dd:14:8c:8b:4c:9c:3b:e8:1f:cf:59:17:71:5a:3a:
6e:36:50:a5:96:3f:d1:6c:20:fe:ac:a3:61:73:01:
23:56:c9:82:7c:4d:34:b2:fe:6f:9d:4c:8c:64:f7:
f0:83:a9:25:d0:b0:a7:9a:74:88:3b:fa:5e:6c:ed:
64:6f:91:7b:a8:4d:a5:b0:52:38:99:f7:fd:ee:a7:
50:e6:6a:a2:76:e3:b0:5d:ae:8e:66:83:75:0e:62:
ea:49:19:43:33:e3:da:c7:df:1d:6d:ef:7d:75:a3:
86:58:a6:e5:38:c5:63:e8:ae:a5:c0:2e:df:3b:0b:
06:3e:d9:47:0a:db:d2:d4:29:eb:98:a6:a0:77:21:
58:db:62:4a:01:1c:c5:42:7d:47:43:eb:eb:4c:61:
1c:9e:f2:1a:bc:c6:c3:cb:29:fe:08:fc:d5:cc:a2:
19:e3:2e:ea:e2:6e:00:fe:7f:8c:25:a5:76:54:0c:
c2:4b:1b:67:58:76:8b:4e:e8:f8:dd:06:d0:d0:f3:
cc:0c:8c:bc:67:0d:86:a1:52:f7:63:71:01:42:0d:
66:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AA:58:D9:7C:6A:A1:95:DB:81:00:17:DF:DE:91:E0:5D:2C:AB:5D
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/BapY2XxqoZXbgQAX396R4F0sq10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.4.73.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:8a:23:9f:18:28:50:0e:3c:a0:88:47:79:10:7c:4e:2b:c0:
1e:c7:8e:e5:77:32:b4:31:90:91:18:30:43:56:7a:c6:3b:82:
0b:32:d0:8e:75:80:94:65:eb:5c:17:9c:16:ad:1a:2a:7f:f9:
8e:23:93:7d:8a:10:b9:6f:57:76:31:ea:68:40:a3:00:4f:f8:
af:ff:39:22:65:dc:e1:4a:ee:d3:c1:1c:b2:16:5f:56:0c:c4:
7d:7d:2d:00:20:52:17:f5:ad:f3:8c:fa:8b:74:90:cb:fd:21:
4d:2b:67:cd:07:f0:f2:d8:1f:81:26:a2:5e:37:7e:4a:e7:f8:
fc:4c:85:62:24:52:e6:2c:97:63:e1:36:f9:1e:ad:90:78:34:
3a:2a:e0:ac:dd:6a:7c:7d:00:ca:f7:e8:1d:8d:98:cf:6e:fc:
09:2d:a7:3c:51:62:a3:8a:16:da:66:dc:7e:3c:87:0b:62:72:
4a:c9:33:64:d9:c8:18:aa:44:ac:db:9e:85:63:7c:bd:aa:6f:
06:e2:11:f1:88:c8:fc:82:38:9e:a6:90:a0:ac:cb:9f:d1:71:
50:8d:f8:60:42:1d:e3:6a:07:a2:32:b7:91:5a:30:30:55:14:
33:34:9b:61:90:88:3f:fd:9b:5f:51:1b:07:7b:e5:db:08:06:
3d:72:ec:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:40:16 2026 by rpki-client