Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/BSNPFpVR5b3dpjWEAz6zwIgOTGs.roa
File: BSNPFpVR5b3dpjWEAz6zwIgOTGs.roa (raw, json)
Hash identifier: KPHora4kR+FTYsiviz68hIYdfe52RXk6GoGPQrVyDss=
Subject key identifier: 05:23:4F:16:95:51:E5:BD:DD:A6:35:84:03:3E:B3:C0:88:0E:4C:6B
Certificate issuer: /CN=42239fb9af128428f84fed9f358686717ed97601
Certificate serial: 01A0ECDE2C0138DB943DB51CBA2EC5A30654
Authority key identifier: 42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/BSNPFpVR5b3dpjWEAz6zwIgOTGs.roa
Signing time: Tue 29 Sep 2026 11:12:58 +0000
ROA not before: Tue 29 Sep 2026 11:12:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218656
IP address blocks: 153.52.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 16:22:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:de:2c:01:38:db:94:3d:b5:1c:ba:2e:c5:a3:06:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42239fb9af128428f84fed9f358686717ed97601
Validity
Not Before: Sep 29 11:12:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05234f169551e5bddda63584033eb3c0880e4c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:43:9d:4d:dd:2d:75:ba:66:62:56:47:a8:83:
c0:b3:06:34:95:b4:ce:71:a2:c6:6a:74:0c:20:b7:
07:fa:36:bf:94:5f:5d:2a:ff:39:f7:d5:d1:1d:0b:
25:fc:30:f6:f5:c7:22:17:b6:4e:f6:f8:32:a6:1a:
80:22:2e:9d:1e:61:9c:00:f4:83:7d:c3:32:ef:22:
c0:14:ff:d9:f6:bb:e9:a9:63:92:9f:b6:0d:87:e9:
27:b7:cb:54:84:f9:4a:53:8b:63:93:03:8e:5a:9e:
55:27:85:ea:c5:69:7a:18:ae:8d:6c:af:9a:52:c3:
f5:4c:0f:0b:e8:1f:69:77:5a:26:65:e4:2f:a8:e9:
b7:23:9b:35:56:34:ac:55:57:3e:ff:b3:77:ec:ef:
b5:ce:dc:f2:37:b5:8a:ac:d7:c0:ec:7a:5c:f6:dc:
81:37:3c:a8:0d:72:71:8a:e6:60:5e:72:f3:c2:6b:
68:02:fd:b2:e3:74:f2:5d:b8:2a:f9:9d:2d:89:80:
0e:3e:cf:20:72:47:5e:dd:1b:d3:53:61:8e:68:b4:
5f:9c:a9:6a:be:70:68:f0:ea:e5:e2:ee:6a:e2:c4:
96:01:3e:45:fa:09:ad:9f:65:06:a0:34:30:e3:3c:
a2:13:ff:ee:de:25:d9:60:68:5c:42:f9:b3:21:64:
df:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:23:4F:16:95:51:E5:BD:DD:A6:35:84:03:3E:B3:C0:88:0E:4C:6B
X509v3 Authority Key Identifier:
keyid:42:23:9F:B9:AF:12:84:28:F8:4F:ED:9F:35:86:86:71:7E:D9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QiOfua8ShCj4T-2fNYaGcX7ZdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/BSNPFpVR5b3dpjWEAz6zwIgOTGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3e3d40-2ae4-43f3-ae7c-bc5403ac2a95/1/QiOfua8ShCj4T-2fNYaGcX7ZdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.52.87.0/24
Signature Algorithm: sha256WithRSAEncryption
58:fa:1f:ac:a2:2a:3a:b2:e7:98:8b:59:ee:a6:84:5c:76:c7:
9a:af:a9:c9:90:0b:08:06:6d:4e:2c:45:f1:d9:8c:33:68:97:
0e:8c:f9:65:c5:3c:cd:8c:f9:e4:f9:fe:9e:cf:79:89:bd:78:
3c:e8:4e:1d:73:8c:22:2b:fe:a1:d9:49:17:ea:ab:09:1f:89:
5b:e1:f6:ad:96:0e:f5:ee:2a:fc:1b:f6:37:cc:48:1b:a3:46:
ea:4b:36:dd:26:3b:43:da:51:27:99:7c:c4:6f:44:5f:e8:12:
91:fd:dd:cc:d3:6a:20:2c:f5:53:d8:27:29:29:d6:3a:03:a5:
f2:e8:d3:40:6b:2c:3e:61:9e:38:43:bb:3f:05:ca:9e:84:3c:
68:f6:ca:04:c3:8d:83:44:41:7a:d6:66:68:18:22:84:94:27:
ac:aa:07:9d:1a:d8:50:2f:be:88:d6:3f:dc:cc:57:5b:62:80:
88:a5:a7:89:57:37:cb:d2:8f:a4:4d:a7:e9:ce:5d:83:d6:f4:
2f:56:61:b5:97:0f:01:cb:16:8d:85:79:ca:73:c0:d2:25:41:
1b:24:4c:fd:18:5d:a7:2e:6d:fb:9b:3d:29:7a:49:81:35:4e:
66:8f:d2:59:76:72:c4:71:37:e0:a5:a1:a1:26:2b:08:f3:c5:
dd:e5:d9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 02:55:21 2026 by rpki-client