Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Bn6dGqWBtiwAi3k-ZYNMfOsbG6o.roa
File: Bn6dGqWBtiwAi3k-ZYNMfOsbG6o.roa (raw, json)
Hash identifier: Umdup/aUSihxZT6AyBtTydahJomHeuJPHKs1Gxh/q+o=
Subject key identifier: 06:7E:9D:1A:A5:81:B6:2C:00:8B:79:3E:65:83:4C:7C:EB:1B:1B:AA
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FC924C0BF1526D6F71ACE8307EE48F973
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Bn6dGqWBtiwAi3k-ZYNMfOsbG6o.roa
Signing time: Mon 03 Aug 2026 19:40:56 +0000
ROA not before: Mon 03 Aug 2026 19:40:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 13.143.232.0/24 maxlen: 24
179.198.8.0/22 maxlen: 24
179.198.28.0/22 maxlen: 24
201.14.226.0/24 maxlen: 24
201.14.229.0/24 maxlen: 24
201.14.233.0/24 maxlen: 24
201.14.235.0/24 maxlen: 24
201.14.238.0/24 maxlen: 24
201.14.240.0/24 maxlen: 24
201.14.243.0/24 maxlen: 24
201.14.244.0/24 maxlen: 24
201.14.245.0/24 maxlen: 24
201.14.249.0/24 maxlen: 24
201.14.251.0/24 maxlen: 24
201.14.252.0/24 maxlen: 24
201.14.253.0/24 maxlen: 24
201.14.254.0/24 maxlen: 24
201.14.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c9:24:c0:bf:15:26:d6:f7:1a:ce:83:07:ee:48:f9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 3 19:40:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=067e9d1aa581b62c008b793e65834c7ceb1b1baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:60:9c:f5:a9:8f:65:89:92:b5:41:4c:02:56:
3d:2c:8b:e8:07:6f:4d:5a:57:d5:f0:68:2e:d0:66:
dc:b5:c5:10:4c:48:0e:37:08:7d:d8:19:bc:8b:01:
51:d6:6b:eb:cd:e8:ee:12:51:2f:93:41:6f:82:73:
59:b4:a9:9b:b3:d3:a1:bc:96:e7:3c:cc:07:22:7c:
fa:7e:c6:44:63:14:27:78:0d:f9:64:9c:b5:8a:d9:
d5:2c:e2:94:99:7e:f2:aa:a4:54:1d:11:fc:7a:7d:
4f:b3:f9:48:3f:6c:80:38:4d:71:08:cf:7e:bf:51:
f2:43:f2:0f:87:57:52:69:32:a9:70:7b:24:45:ae:
16:02:ac:72:38:77:4c:74:13:6c:49:16:e9:2c:62:
03:8d:85:06:cf:30:5d:d2:6e:85:9f:ae:e8:c2:77:
1b:1b:90:7d:11:36:ac:e0:17:46:f9:4c:f4:be:ec:
03:af:1f:6a:d6:71:71:eb:a1:af:6d:d9:ee:04:5b:
f4:75:b2:e5:c4:d1:b0:59:a1:e9:6a:c7:76:be:e3:
57:0d:9f:4f:95:8b:24:24:6b:25:c2:3d:21:87:20:
54:56:92:ed:9a:a9:1d:b1:7a:d6:fe:cf:75:90:ca:
cf:58:f4:42:56:32:45:94:8e:27:e2:dc:bd:c6:30:
bc:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:7E:9D:1A:A5:81:B6:2C:00:8B:79:3E:65:83:4C:7C:EB:1B:1B:AA
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Bn6dGqWBtiwAi3k-ZYNMfOsbG6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.232.0/24
179.198.8.0/22
179.198.28.0/22
201.14.226.0/24
201.14.229.0/24
201.14.233.0/24
201.14.235.0/24
201.14.238.0/24
201.14.240.0/24
201.14.243.0-201.14.245.255
201.14.249.0/24
201.14.251.0-201.14.255.255
Signature Algorithm: sha256WithRSAEncryption
8b:97:3b:00:eb:0a:47:bf:e9:cb:28:8c:bc:9d:6d:60:48:f2:
2c:9f:23:a1:04:c4:b0:c9:dc:de:29:ad:bb:1d:ab:40:9d:94:
7b:ce:06:3a:ed:98:25:32:28:cd:0b:72:e1:b0:aa:88:e7:2b:
9d:3d:ee:8d:56:3b:f5:1d:0c:0f:34:f5:12:fb:6c:6e:23:6d:
34:35:8d:5e:d4:2b:d7:df:f4:f2:62:4b:16:8f:fb:ed:e0:b4:
f3:5d:bf:01:b6:32:83:e8:72:68:fe:1d:32:0c:fe:7c:b1:59:
15:01:23:74:c1:da:07:eb:7f:d6:26:f0:48:4d:80:48:96:ac:
a1:7c:c4:16:3b:2c:23:fb:37:0b:57:12:f6:29:94:8c:3c:c6:
16:71:48:9b:2b:2d:14:8f:62:57:43:b9:88:b3:04:83:df:16:
f4:04:f3:b6:c8:55:0e:2f:8a:7f:f8:eb:ce:e1:dd:57:41:d2:
04:8e:42:f4:a5:2c:f5:74:47:fe:f0:14:72:44:0b:26:33:33:
3c:3a:7e:8e:4f:1b:c9:a2:f5:67:70:7a:46:e4:b1:28:8e:49:
4d:7d:c0:e2:47:22:38:9d:e8:eb:cf:13:7b:8a:49:e6:d1:a9:
e1:fe:a5:b0:85:75:d3:de:68:16:96:e7:4b:95:ee:a4:26:35:
fd:a6:e7:a8
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgISAZ/JJMC/FSbW9xrOgwfuSPlzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwODAzMTk0MDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjdlOWQxYWE1ODFiNjJjMDA4Yjc5M2U2NTgzNGM3Y2ViMWIxYmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGCc9amPZYmStUFMAlY9LIvoB29N
WlfV8Ggu0GbctcUQTEgONwh92Bm8iwFR1mvrzejuElEvk0FvgnNZtKmbs9OhvJbn
PMwHInz6fsZEYxQneA35ZJy1itnVLOKUmX7yqqRUHRH8en1Ps/lIP2yAOE1xCM9+
v1HyQ/IPh1dSaTKpcHskRa4WAqxyOHdMdBNsSRbpLGIDjYUGzzBd0m6Fn67owncb
G5B9ETas4BdG+Uz0vuwDrx9q1nFx66GvbdnuBFv0dbLlxNGwWaHpasd2vuNXDZ9P
lYskJGslwj0hhyBUVpLtmqkdsXrW/s91kMrPWPRCVjJFlI4n4ty9xjC8AwIDAQAB
o4ICWjCCAlYwHQYDVR0OBBYEFAZ+nRqlgbYsAIt5PmWDTHzrGxuqMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvQm42ZEdxV0J0aXdBaTNrLVpZTk1mT3NiRzZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHAGCCsGAQUFBwEHAQH/BGEwXzBdBAIAATBXAwQADY/oAwQC
s8YIAwQCs8YcAwQAyQ7iAwQAyQ7lAwQAyQ7pAwQAyQ7rAwQAyQ7uAwQAyQ7wMAwD
BADJDvMDBAHJDvQDBADJDvkwCwMEAMkO+wMDAMkOMA0GCSqGSIb3DQEBCwUAA4IB
AQCLlzsA6wpHv+nLKIy8nW1gSPIsnyOhBMSwydzeKa27HatAnZR7zgY67ZglMijN
C3LhsKqI5yudPe6NVjv1HQwPNPUS+2xuI200NY1e1CvX3/TyYksWj/vt4LTzXb8B
tjKD6HJo/h0yDP58sVkVASN0wdoH63/WJvBITYBIlqyhfMQWOywj+zcLVxL2KZSM
PMYWcUibKy0Uj2JXQ7mIswSD3xb0BPO2yFUOL4p/+OvO4d1XQdIEjkL0pSz1dEf+
8BRyRAsmMzM8On6OTxvJovVncHpG5LEojklNfcDiRyI4nejrzxN7iknm0anh/qWw
hXXT3mgWludLle6kJjX9pueo
-----END CERTIFICATE-----
Generated at Tue Aug 4 09:52:39 2026 by rpki-client