Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/BnHMfXgVzli6KeGQd5B5wI2n9-0.roa
File: BnHMfXgVzli6KeGQd5B5wI2n9-0.roa (raw, json)
Hash identifier: y+V9QXcIs3B9divyAKDL+I7ev3N/MtcnLMS1hWW9Vz8=
Subject key identifier: 06:71:CC:7D:78:15:CE:58:BA:29:E1:90:77:90:79:C0:8D:A7:F7:ED
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 019DB45CB1A3C2E817E51DF01A15676A3396
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/BnHMfXgVzli6KeGQd5B5wI2n9-0.roa
Signing time: Wed 22 Apr 2026 08:44:26 +0000
ROA not before: Wed 22 Apr 2026 08:44:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213702
IP address blocks: 103.27.157.0/24 maxlen: 24
132.243.221.0/24 maxlen: 24
132.243.223.0/24 maxlen: 24
132.243.225.0/24 maxlen: 24
132.243.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b4:5c:b1:a3:c2:e8:17:e5:1d:f0:1a:15:67:6a:33:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Apr 22 08:44:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0671cc7d7815ce58ba29e190779079c08da7f7ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6d:0d:28:0b:e7:48:de:b6:60:2f:03:b9:00:
69:b3:83:48:be:5a:2d:c0:c0:de:76:5b:b2:0b:74:
04:df:d2:02:81:20:a8:f4:a0:40:ac:61:ec:db:f4:
bd:c9:f4:6d:d1:37:5e:04:03:3e:74:ae:0b:9c:38:
3f:b5:e5:72:23:c8:3e:2b:22:e7:89:66:88:bd:d2:
05:0e:d1:d2:25:d4:c5:dc:3b:9c:10:f1:21:89:ac:
12:69:eb:e7:9d:df:58:ab:d7:06:9b:0a:f1:61:3d:
60:01:da:5a:99:05:da:01:fe:df:fa:3b:97:15:d5:
8c:70:3d:e1:11:7a:e1:2c:95:91:2a:5a:29:40:42:
67:dc:74:f1:bb:66:13:33:eb:e7:4c:00:98:39:7b:
38:c2:d6:fb:c7:ed:ca:f9:3c:6c:7a:46:2a:ba:93:
0a:97:dc:b1:c9:8d:75:52:bc:11:6b:3a:9a:b7:0a:
77:83:0d:07:b2:b8:13:e0:7d:cf:3c:c1:83:89:3b:
49:33:4c:6d:bf:3b:d4:32:be:b4:eb:7f:7b:25:5e:
49:c8:ba:6e:58:46:33:d8:b3:43:27:1d:13:ea:df:
55:67:66:37:5c:ba:88:ce:69:84:b6:47:c0:e7:bc:
91:8e:17:84:97:48:95:15:5e:f9:0f:ec:f0:ed:fd:
7f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:71:CC:7D:78:15:CE:58:BA:29:E1:90:77:90:79:C0:8D:A7:F7:ED
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/BnHMfXgVzli6KeGQd5B5wI2n9-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.27.157.0/24
132.243.221.0/24
132.243.223.0/24
132.243.225.0/24
132.243.231.0/24
Signature Algorithm: sha256WithRSAEncryption
58:f4:4e:c5:6c:a3:1a:02:c6:c9:a8:ac:1e:d8:2a:89:04:0c:
12:19:e0:b9:62:13:3b:00:77:07:b8:ad:85:dd:fe:75:0c:a7:
f2:26:17:92:a5:51:8c:d7:25:b6:f4:8a:7b:fc:48:bd:f1:4e:
46:c7:c3:1d:fe:7e:d6:c8:59:4a:13:83:f4:0b:9b:a7:d2:a0:
1c:e9:a7:05:cd:49:8c:45:2c:cb:0f:54:49:30:95:f4:9f:ab:
c6:ee:41:94:b9:39:dd:d7:fd:d4:fe:ff:5f:c2:74:59:87:ce:
ad:68:28:8e:12:10:19:7b:ff:85:2f:93:78:05:6f:0b:b5:be:
06:4e:85:ab:90:c9:40:2a:56:76:21:65:ba:5e:aa:e9:97:36:
a9:4c:c4:29:5c:2a:ac:3e:e5:d9:53:a1:83:13:51:8a:45:f3:
7d:47:50:e5:15:45:85:64:e5:08:43:10:7e:0c:3e:38:08:b0:
30:a8:8a:97:9c:63:86:f7:2d:85:26:8e:18:78:cb:b3:73:b4:
2e:a4:bd:4b:31:01:95:0a:c1:6c:4c:6f:db:67:fd:a6:fd:43:
ac:df:af:55:b6:50:27:ce:4f:05:28:b1:a6:de:76:ed:65:f7:
83:e7:b2:45:e8:b6:7f:cd:62:1b:16:80:3d:55:6d:1c:97:ac:
60:af:2d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:51:13 2026 by rpki-client