Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/bnmuHr70BJVsgOcpxZizqtCasww.roa
File: bnmuHr70BJVsgOcpxZizqtCasww.roa (raw, json)
Hash identifier: Nkv2j5AyKeUwX+JWCkDpHg3DA6I8oDo313t6v/WpZI8=
Subject key identifier: 6E:79:AE:1E:BE:F4:04:95:6C:80:E7:29:C5:98:B3:AA:D0:9A:B3:0C
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 01A010DC4B81FF86BF2905A406D74E63F9B5
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/bnmuHr70BJVsgOcpxZizqtCasww.roa
Signing time: Mon 17 Aug 2026 17:54:27 +0000
ROA not before: Mon 17 Aug 2026 17:54:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219005
IP address blocks: 130.78.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 16:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:10:dc:4b:81:ff:86:bf:29:05:a4:06:d7:4e:63:f9:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Aug 17 17:54:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e79ae1ebef404956c80e729c598b3aad09ab30c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:17:3e:26:2d:a9:d4:69:98:6a:ab:a5:de:7c:
f2:c5:00:81:86:c6:e4:a6:ab:80:e5:3b:4e:63:18:
8e:f7:ee:3d:d0:f3:6e:38:3a:1d:60:b1:a0:ef:b1:
85:d7:6e:05:21:36:e5:0d:35:c4:cb:c3:6e:d6:6b:
31:42:9b:57:4c:22:2c:cd:de:95:53:78:8b:e5:24:
4e:5d:1b:06:c8:00:e3:b7:c2:b1:f4:6e:7d:79:1c:
2f:7c:27:ea:c7:aa:40:8f:32:0e:e6:ea:99:69:db:
35:63:95:e0:83:8b:45:7a:ff:37:f4:a7:1f:3e:a3:
4a:64:49:5d:9e:3c:a1:eb:fd:a9:98:3a:2f:f8:8d:
47:c6:66:1b:fe:12:94:a2:bd:cd:6d:29:4b:f3:cc:
cd:ca:24:86:b2:32:59:b7:48:87:24:9a:df:af:0c:
92:14:d8:f0:eb:1c:2e:d1:0f:4f:3c:ff:ac:64:a0:
95:31:c0:b6:73:f2:e4:75:5b:21:e8:e0:9e:96:a7:
e9:33:fc:27:5e:7e:5b:c7:75:aa:68:bf:29:64:65:
7a:8b:25:9b:27:31:15:b1:7f:e7:ac:14:51:17:c0:
6c:78:2a:ba:ad:d6:d5:fc:5b:70:ac:04:22:53:d3:
32:f7:48:20:73:6b:79:fa:01:89:82:2c:75:0c:3f:
de:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:79:AE:1E:BE:F4:04:95:6C:80:E7:29:C5:98:B3:AA:D0:9A:B3:0C
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/bnmuHr70BJVsgOcpxZizqtCasww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.78.190.0/24
Signature Algorithm: sha256WithRSAEncryption
46:4f:85:54:a0:84:e1:1e:c5:e5:e4:a4:d3:70:65:6a:0f:c7:
2f:89:70:35:2d:e8:9b:9a:79:76:70:0f:be:6d:06:6f:c2:25:
5d:2c:e9:1d:63:67:05:a9:36:cc:db:c3:44:6e:27:8e:45:26:
4a:76:f7:24:54:9e:9e:63:87:f7:79:13:da:17:8d:5d:81:ee:
2a:d7:0b:ce:de:26:b6:83:99:f2:b8:08:1c:8e:87:fc:14:c5:
d5:dc:e7:5f:fc:3b:94:a1:f5:c2:24:b1:06:ce:dc:2c:c8:49:
65:68:e3:a4:c9:13:7e:c8:01:84:15:0a:e9:b6:b9:1a:85:29:
36:97:fb:34:6f:eb:13:9b:7e:00:39:3e:0f:3f:f8:70:39:10:
36:3b:73:1a:7b:45:c1:bc:1a:48:06:28:29:fc:fb:22:55:3d:
f1:fa:ec:a9:70:34:c4:a8:25:63:c1:3e:ce:c5:87:e1:bf:c6:
51:df:b1:74:58:99:e9:27:6d:6e:c4:99:a3:4d:63:d2:a2:13:
5e:10:a5:a8:d8:27:6c:51:90:c2:4c:7f:d2:bf:ae:cc:75:1e:
81:df:36:b7:2f:12:7f:46:17:99:26:86:1a:db:af:11:93:fb:
48:d1:e8:34:00:c8:e5:85:ad:9e:35:a6:72:33:66:be:e9:f0:
12:3b:e5:50
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAQ3EuB/4a/KQWkBtdOY/m1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmZTUzYzBiZmMzYzhmYjU2YjgxMTkxMzE3MTQ0NDQzZTBl
MjlkMjUwHhcNMjYwODE3MTc1NDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTc5YWUxZWJlZjQwNDk1NmM4MGU3MjljNTk4YjNhYWQwOWFiMzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhc+Ji2p1GmYaqul3nzyxQCBhsbk
pquA5TtOYxiO9+490PNuODodYLGg77GF124FITblDTXEy8Nu1msxQptXTCIszd6V
U3iL5SROXRsGyADjt8Kx9G59eRwvfCfqx6pAjzIO5uqZads1Y5Xgg4tFev839Kcf
PqNKZEldnjyh6/2pmDov+I1HxmYb/hKUor3NbSlL88zNyiSGsjJZt0iHJJrfrwyS
FNjw6xwu0Q9PPP+sZKCVMcC2c/LkdVsh6OCelqfpM/wnXn5bx3WqaL8pZGV6iyWb
JzEVsX/nrBRRF8BseCq6rdbV/FtwrAQiU9My90ggc2t5+gGJgix1DD/e1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG55rh6+9ASVbIDnKcWYs6rQmrMMMB8GA1UdIwQY
MBaAFF/lPAv8PI+1a4EZExcUREPg4p0lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWC1VOENfdzhqN1ZyZ1JrVEZ4UkVRLURpblNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iYzYwODktM2Q5MC00NTI5LWJiNDct
NWNmNTZlZTQzNWIzLzEvYm5tdUhyNzBCSlZzZ09jcHhaaXpxdENhc3d3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9iYzYwODktM2Q5MC00NTI5LWJiNDctNWNmNTZlZTQzNWIz
LzEvWC1VOENfdzhqN1ZyZ1JrVEZ4UkVRLURpblNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgk6+MA0G
CSqGSIb3DQEBCwUAA4IBAQBGT4VUoIThHsXl5KTTcGVqD8cviXA1Leibmnl2cA++
bQZvwiVdLOkdY2cFqTbM28NEbieORSZKdvckVJ6eY4f3eRPaF41dge4q1wvO3ia2
g5nyuAgcjof8FMXV3Odf/DuUofXCJLEGztwsyEllaOOkyRN+yAGEFQrptrkahSk2
l/s0b+sTm34AOT4PP/hwORA2O3Mae0XBvBpIBigp/PsiVT3x+uypcDTEqCVjwT7O
xYfhv8ZR37F0WJnpJ21uxJmjTWPSohNeEKWo2CdsUZDCTH/Sv67MdR6B3za3LxJ/
RheZJoYa268Rk/tI0eg0AMjlha2eNaZyM2a+6fASO+VQ
-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:40 2026 by rpki-client