Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/bGlKraIhhwlevroXgB4rLlo-YME.roa
File: bGlKraIhhwlevroXgB4rLlo-YME.roa (raw, json)
Hash identifier: oIkXDeJlSani/t+wUjX7TTQDY2OjVB6ERk95GxJeYN8=
Subject key identifier: 6C:69:4A:AD:A2:21:87:09:5E:BE:BA:17:80:1E:2B:2E:5A:3E:60:C1
Certificate issuer: /CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Certificate serial: 019F0DCBA0457D9A70CDB225659EF136EA88
Authority key identifier: 86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/bGlKraIhhwlevroXgB4rLlo-YME.roa
Signing time: Sun 28 Jun 2026 10:34:36 +0000
ROA not before: Sun 28 Jun 2026 10:34:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 141.98.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0d:cb:a0:45:7d:9a:70:cd:b2:25:65:9e:f1:36:ea:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Validity
Not Before: Jun 28 10:34:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c694aada22187095ebeba17801e2b2e5a3e60c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9f:2d:82:55:15:11:d5:0d:4c:d1:a7:c0:8a:
03:3b:0a:e2:43:83:91:33:f6:f4:3b:8e:3e:e7:0e:
26:1c:a5:e5:60:d9:11:40:36:bf:19:ea:f0:af:9d:
c5:35:79:72:76:18:54:58:50:28:55:a5:70:ad:3d:
4f:8a:61:7f:9c:32:51:e1:e4:5d:bc:9c:b4:ff:ed:
7a:e9:08:3c:e2:0b:bf:c5:d4:16:b6:ed:a1:63:23:
d3:c6:7e:81:94:30:2e:61:22:93:90:4c:1d:e3:41:
db:67:8f:fe:63:c6:23:69:4f:37:e5:6b:3c:5b:48:
5a:24:dd:ac:9f:7e:ed:60:6a:bf:69:75:35:da:1f:
b3:55:d6:95:37:ea:d3:21:04:a5:d3:8d:00:8e:27:
d1:4f:8d:db:9d:29:f3:22:50:c5:2b:90:ce:a7:af:
4e:c2:c8:4d:46:d7:8e:3d:3f:c2:cd:6a:f4:86:29:
12:5c:5a:bc:12:d2:7a:ca:27:c6:3c:83:93:e6:20:
35:f6:fb:f4:9d:e6:ad:72:0f:06:73:f0:32:70:69:
07:73:ad:a2:17:f8:63:7b:55:9f:0c:8a:f8:7e:56:
0e:9d:4e:6e:66:cf:a4:b1:2f:12:55:44:b6:9a:bb:
dd:f6:73:bc:be:a6:88:5e:7c:46:6e:70:bd:c6:0b:
a8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:69:4A:AD:A2:21:87:09:5E:BE:BA:17:80:1E:2B:2E:5A:3E:60:C1
X509v3 Authority Key Identifier:
keyid:86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/bGlKraIhhwlevroXgB4rLlo-YME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.1.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:c8:bf:8a:fc:48:95:47:20:74:17:fe:ca:34:51:73:64:a5:
4c:19:3d:5f:59:a6:61:28:18:f6:38:ef:08:bd:81:76:76:e7:
60:41:8e:84:d4:fd:1f:b0:66:1f:ea:2c:76:1c:ba:2b:ba:c2:
a7:f4:3c:1f:f3:d4:cd:a2:48:3b:dd:a5:86:10:38:20:81:79:
ff:2e:32:a6:bf:da:a0:c1:42:ee:1f:7e:1b:94:49:26:dd:51:
8d:08:f3:c6:cd:96:ff:b4:24:e1:ec:4c:f6:27:2b:67:b0:07:
bd:56:b2:e7:8c:60:73:90:cd:36:af:44:4c:42:a3:8b:e8:43:
37:5f:32:57:8d:b5:9c:f8:52:4d:27:f0:b6:f4:b7:da:2f:fb:
96:bd:10:e3:95:ab:ff:1a:19:51:5d:99:d4:69:3d:be:7d:e0:
38:a2:38:fc:23:77:5e:10:5d:66:82:90:f7:f3:27:f6:66:a6:
9c:99:d2:33:75:2b:ce:37:a1:ac:31:0d:be:f8:12:fe:59:7d:
94:3d:5e:ad:be:96:e5:54:38:8a:98:e2:82:e6:2d:e5:37:a8:
1a:0f:47:f7:5b:43:e1:a6:44:a1:6f:9b:1e:ff:aa:e4:f9:38:
44:6e:8c:dc:23:7d:d3:ff:85:cd:f8:20:34:48:e9:d5:61:d9:
72:c2:25:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 09:59:58 2026 by rpki-client