Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/bo1FemLpd4Lw3RSTdET4mjRPZAs.roa
File: bo1FemLpd4Lw3RSTdET4mjRPZAs.roa (raw, json)
Hash identifier: R1slazK5r4eMddfG8FJST6MtHsmiSFtwK3/24XRkNew=
Subject key identifier: 6E:8D:45:7A:62:E9:77:82:F0:DD:14:93:74:44:F8:9A:34:4F:64:0B
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A0229693D0134973C1A4C55CB20CFF9ADD
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/bo1FemLpd4Lw3RSTdET4mjRPZAs.roa
Signing time: Fri 21 Aug 2026 04:31:28 +0000
ROA not before: Fri 21 Aug 2026 04:31:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203442
IP address blocks: 201.10.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:22:96:93:d0:13:49:73:c1:a4:c5:5c:b2:0c:ff:9a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 21 04:31:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e8d457a62e97782f0dd14937444f89a344f640b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c0:71:2e:8b:9f:b3:fd:db:6e:50:f9:7e:49:
f0:2c:58:ec:cd:11:b3:57:89:11:26:26:42:e0:e8:
46:7d:c4:7a:91:7e:53:e4:9d:c9:14:dd:17:7f:3b:
1a:e1:dd:9d:c8:5a:36:42:31:ad:f4:d0:e1:9f:83:
48:0b:b3:31:42:d3:6e:df:c5:44:67:f3:03:28:a4:
f1:6c:48:7d:11:6f:b0:b5:a2:21:b2:32:d7:d6:e3:
b1:ce:d5:aa:e7:fa:08:a6:b2:e4:74:b8:e6:4f:b9:
81:9e:71:50:92:c0:b6:cc:84:7d:18:95:16:70:58:
3c:c3:e0:34:9c:a0:7f:1e:27:fa:cc:56:c5:b2:bc:
97:1c:ae:f8:61:cb:99:cd:1a:89:c2:21:63:c0:62:
2d:9d:76:1f:ac:28:ee:bd:0f:c4:bd:c2:35:fb:9a:
70:6b:4c:81:45:f9:9a:62:09:ba:3d:07:76:7c:ad:
03:52:97:f3:7a:65:3e:b8:a2:5b:ae:3d:44:ab:3a:
a1:84:81:46:ba:5a:6c:88:d4:35:5b:bc:66:af:fa:
13:04:2a:2d:2e:0d:dc:6f:82:ae:13:82:8f:9f:8c:
61:20:8e:89:17:65:fb:d5:70:33:e8:5b:0b:08:34:
6a:a2:2d:e2:f3:df:28:4a:bb:01:a1:59:95:1f:8d:
fe:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:8D:45:7A:62:E9:77:82:F0:DD:14:93:74:44:F8:9A:34:4F:64:0B
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/bo1FemLpd4Lw3RSTdET4mjRPZAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.10.92.0/24
Signature Algorithm: sha256WithRSAEncryption
50:8d:43:f1:9e:6a:53:39:ec:9b:1f:e0:82:fd:9c:23:4d:a6:
11:a5:a4:ba:5a:6c:02:b0:fa:31:4c:e0:9b:ef:d3:e7:f7:1a:
11:2b:66:a0:01:7a:ba:ee:e9:38:11:da:ee:9a:09:35:ab:39:
9d:85:25:70:ce:29:1c:00:1c:da:88:a2:2a:88:7e:cc:eb:fd:
db:d9:d6:dc:4c:fa:24:b5:78:da:8b:d7:71:3d:99:2b:f3:01:
bb:38:a1:c8:e7:92:9c:3b:fa:67:9d:ce:1f:4a:a5:89:78:18:
54:39:38:26:9f:fa:49:b3:41:e1:04:7e:87:a1:55:eb:e0:a3:
0c:96:11:ed:6a:c5:ff:9b:72:6a:7e:37:a1:41:89:ec:16:bc:
29:c1:45:af:37:c5:7e:c4:70:79:8f:e1:73:60:05:a8:f2:65:
a7:fc:84:d4:31:96:b2:de:74:9b:66:49:bd:11:42:30:2b:18:
6b:11:4f:ee:02:f9:75:ac:b9:24:88:85:02:66:15:40:5e:bf:
5e:e7:e1:db:da:f6:5b:ec:2d:51:1b:12:4a:1a:86:ff:67:15:
dc:e1:24:bf:ca:44:f8:03:ea:1f:43:c8:c6:26:bd:16:fc:19:
11:35:60:ac:61:88:de:e1:ca:2e:93:d4:53:92:a2:65:c4:05:
b9:af:16:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:20:27 2026 by rpki-client