Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Bfx8UIN20gDQs2wAya7C_kjVSLk.roa
File: Bfx8UIN20gDQs2wAya7C_kjVSLk.roa (raw, json)
Hash identifier: t2cTPWE6KOorbsp6cOo84wpQMfygPT3GLf0og9vuDCo=
Subject key identifier: 05:FC:7C:50:83:76:D2:00:D0:B3:6C:00:C9:AE:C2:FE:48:D5:48:B9
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A11D1AB7B43267F6CEB22D28B9B5310860
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Bfx8UIN20gDQs2wAya7C_kjVSLk.roa
Signing time: Thu 08 Oct 2026 20:00:52 +0000
ROA not before: Thu 08 Oct 2026 20:00:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206134
IP address blocks: 2.26.16.0/22 maxlen: 24
2.26.28.0/22 maxlen: 24
2.26.116.0/22 maxlen: 24
2.26.151.0/24 maxlen: 24
2.26.192.0/21 maxlen: 24
2.26.248.0/22 maxlen: 24
2.27.16.0/22 maxlen: 24
2.27.120.0/22 maxlen: 24
31.76.16.0/22 maxlen: 24
31.76.44.0/22 maxlen: 24
31.76.72.0/22 maxlen: 24
31.76.96.0/22 maxlen: 24
31.76.224.0/22 maxlen: 24
31.77.132.0/22 maxlen: 24
31.77.174.0/23 maxlen: 24
64.188.115.0/24 maxlen: 24
77.239.127.0/24 maxlen: 24
144.31.98.0/24 maxlen: 24
144.31.154.0/23 maxlen: 24
144.31.180.0/22 maxlen: 24
144.31.188.0/23 maxlen: 24
144.31.251.0/24 maxlen: 24
179.254.164.0/23 maxlen: 24
191.217.218.0/23 maxlen: 24
191.217.226.0/23 maxlen: 24
191.217.230.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1d:1a:b7:b4:32:67:f6:ce:b2:2d:28:b9:b5:31:08:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 8 20:00:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05fc7c508376d200d0b36c00c9aec2fe48d548b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:59:3a:f1:a0:d8:09:66:37:c1:cd:01:04:69:
34:02:86:3a:22:b4:d5:7d:dc:36:a3:6e:79:64:95:
5f:c4:db:27:e5:74:2a:89:00:d4:a5:5d:5e:2d:c8:
ed:53:16:db:a8:9a:fb:6d:77:3c:dd:d6:27:25:19:
ca:bc:6a:f6:de:db:00:5c:1e:a2:0b:17:c5:54:94:
fe:2e:eb:de:aa:da:dc:ef:d6:a1:f1:03:34:ee:4d:
85:3d:ac:07:dc:d2:9c:52:4a:7e:2d:4a:ba:f7:e1:
03:35:9c:0d:54:6a:a7:89:3d:86:ce:20:3f:34:06:
d2:8a:c1:f1:b9:a8:12:bd:3d:e7:ae:b9:43:d4:23:
15:33:cf:7d:9f:8b:32:ce:6e:fa:8e:02:e6:2d:09:
0c:06:10:e4:19:0b:c6:97:3c:17:7e:97:06:80:34:
98:4c:57:b7:47:f7:ca:99:00:97:4f:1b:61:ae:3b:
4a:97:67:d3:75:9f:32:cc:f2:7c:55:d4:e0:1f:de:
17:23:43:5f:61:be:75:0d:ec:64:33:f0:86:88:cb:
3b:ed:96:dd:d3:4e:32:8a:4e:da:13:14:0b:ed:94:
18:47:1b:44:e8:5c:b8:8c:d1:97:7f:ca:c1:9f:34:
91:14:17:c2:51:d6:49:29:6e:c3:47:68:4e:be:f0:
f6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FC:7C:50:83:76:D2:00:D0:B3:6C:00:C9:AE:C2:FE:48:D5:48:B9
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Bfx8UIN20gDQs2wAya7C_kjVSLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.16.0/22
2.26.28.0/22
2.26.116.0/22
2.26.151.0/24
2.26.192.0/21
2.26.248.0/22
2.27.16.0/22
2.27.120.0/22
31.76.16.0/22
31.76.44.0/22
31.76.72.0/22
31.76.96.0/22
31.76.224.0/22
31.77.132.0/22
31.77.174.0/23
64.188.115.0/24
77.239.127.0/24
144.31.98.0/24
144.31.154.0/23
144.31.180.0/22
144.31.188.0/23
144.31.251.0/24
179.254.164.0/23
191.217.218.0/23
191.217.226.0/23
191.217.230.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:e7:3e:00:ea:52:c7:4a:44:12:8c:f8:8f:5e:9e:59:b7:dd:
60:7e:d3:88:00:4b:b2:54:3f:e5:ae:7d:a5:f9:c9:9b:4a:e3:
be:59:c3:6e:77:2a:24:12:d7:24:ea:a5:09:c8:18:c3:2c:68:
ef:95:0d:55:4f:04:98:29:d9:25:aa:7a:f8:01:e1:4b:e7:79:
d8:56:16:9a:ab:43:a7:fa:43:10:70:8d:41:5a:76:48:c5:50:
48:d7:a0:d7:10:d1:6d:88:79:26:85:4b:c0:a9:dd:3f:c1:23:
07:fd:03:85:4f:d7:a8:b6:ad:c2:12:72:8f:66:5d:ee:ce:7e:
40:6d:06:2c:53:53:a2:13:8b:57:28:33:46:37:9b:80:38:c8:
d4:86:dd:e0:a2:f1:d7:41:e7:db:15:ab:c1:48:ed:01:6f:8f:
7e:e7:d0:ed:1a:6a:b7:ce:90:87:79:53:18:83:d4:c9:11:fb:
4a:90:b2:03:1c:cd:5a:d9:73:27:86:c8:56:66:06:90:db:2d:
af:bd:e4:cd:b7:b8:ec:89:c5:09:23:88:48:47:17:48:f6:72:
08:43:58:bf:89:f1:6a:b0:56:cd:c9:17:47:c2:77:6f:c7:57:
6a:33:c6:9e:16:2d:93:2f:d7:8f:85:ae:a2:64:13:c1:3a:ac:
d9:f5:f6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 20:14:52 2026 by rpki-client