Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/BfYfQOHapCHfCms5Lr1waEt3jKI.roa
File: BfYfQOHapCHfCms5Lr1waEt3jKI.roa (raw, json)
Hash identifier: Q+nfLO9zJ+Xly+Cxgi5mCao5iV5E0VLX6/7J9a/ljIM=
Subject key identifier: 05:F6:1F:40:E1:DA:A4:21:DF:0A:6B:39:2E:BD:70:68:4B:77:8C:A2
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A136289575F2242C4EBEC77ACF326FCFDB
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/BfYfQOHapCHfCms5Lr1waEt3jKI.roa
Signing time: Tue 13 Oct 2026 16:46:31 +0000
ROA not before: Tue 13 Oct 2026 16:46:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218517
IP address blocks: 179.253.175.0/24 maxlen: 24
179.253.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:28:95:75:f2:24:2c:4e:be:c7:7a:cf:32:6f:cf:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 13 16:46:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05f61f40e1daa421df0a6b392ebd70684b778ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:71:f2:da:86:e6:1d:67:8b:a4:4c:19:59:cf:
b3:9b:16:f6:ae:ce:bd:3c:42:04:cb:96:e8:03:fd:
0a:e4:61:0a:59:29:81:7d:f5:ab:6e:2a:46:a1:9b:
75:58:77:2d:e8:da:83:d8:a7:82:de:d4:77:59:2a:
81:a7:1f:2e:d8:0b:24:92:9b:23:54:1e:e9:d8:68:
81:2b:f8:58:89:17:3a:81:9e:1c:05:18:d8:96:8d:
86:bc:12:bb:a0:c5:e2:8d:3a:8d:0d:5d:5e:75:7b:
d9:05:71:9e:e7:2f:d1:70:a4:bd:7c:7c:34:a0:4c:
99:f3:a8:aa:f6:3c:4b:b8:82:84:cf:a7:0f:10:c4:
b8:7d:42:38:ba:87:58:b1:7e:66:a4:bb:69:db:0b:
89:d2:fc:33:21:13:75:76:63:33:f7:c4:dc:9d:86:
20:50:ed:62:1c:a5:ce:5e:d6:9d:77:19:af:10:0e:
95:4f:85:eb:49:e1:6a:c8:8f:19:75:a2:45:c7:77:
31:12:9a:c2:f5:23:ae:a1:88:85:43:a3:ce:67:77:
84:2a:81:d0:c1:94:67:ae:80:39:2d:ff:5f:7f:13:
5e:a8:59:b4:f3:9e:4f:12:67:75:96:3a:af:9f:eb:
c6:04:e5:e6:40:8a:07:f7:7b:6e:72:ca:9b:4e:ed:
78:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F6:1F:40:E1:DA:A4:21:DF:0A:6B:39:2E:BD:70:68:4B:77:8C:A2
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/BfYfQOHapCHfCms5Lr1waEt3jKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.253.175.0/24
179.253.190.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:ad:7c:83:94:90:d6:75:96:c2:ad:40:b1:87:75:66:e3:3f:
05:43:7e:79:f9:16:04:60:0a:0e:4c:ac:68:41:c5:a0:ad:90:
62:cb:6e:59:93:1c:02:0d:8b:1c:dd:c6:37:cd:06:b8:bf:0e:
66:d0:ed:7c:ed:e3:3f:6d:8a:fc:db:3e:1d:83:a4:b8:bf:61:
94:ab:e7:86:66:ea:d2:49:fc:bc:30:27:ff:1b:e5:98:c6:f0:
9d:e7:d8:e2:56:d3:65:db:5b:31:fb:f1:6c:fc:a5:7f:f5:9e:
22:de:f8:98:58:46:87:2b:cc:68:46:8e:ce:a3:8c:9c:65:24:
0b:ad:4e:ec:9a:63:67:17:be:06:76:b7:5a:21:97:78:4d:74:
d8:e8:a0:8e:a5:69:51:23:8f:d9:9a:74:d7:0e:de:18:a9:69:
b8:69:44:3b:2c:79:81:b9:b0:ff:19:7c:18:bf:b6:79:de:d3:
ee:d0:5e:17:a6:3d:bb:64:c4:86:2f:4b:ea:8a:cb:bf:80:94:
b9:cf:d9:73:e6:44:f1:b5:38:03:83:6d:e7:a1:30:7b:d6:6c:
99:71:cf:4d:2e:60:94:11:2e:b6:4b:c7:0d:32:a4:38:70:19:
06:ee:ae:b1:b3:bb:03:31:78:bb:39:33:f7:5a:80:8e:d6:08:
3c:03:67:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 19:04:53 2026 by rpki-client