Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/BqWQxCnsQ0Pu5HCfqbDouobgXtE.roa
File: BqWQxCnsQ0Pu5HCfqbDouobgXtE.roa (raw, json)
Hash identifier: yjWd6U2FD+P6Yc6f3oXbXkhcwLLIFFwx55f/HEBAHxw=
Subject key identifier: 06:A5:90:C4:29:EC:43:43:EE:E4:70:9F:A9:B0:E8:BA:86:E0:5E:D1
Certificate issuer: /CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Certificate serial: 01A0F4CCD5572FD910F6544DA23F1F5E4285
Authority key identifier: 95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/BqWQxCnsQ0Pu5HCfqbDouobgXtE.roa
Signing time: Thu 01 Oct 2026 00:10:59 +0000
ROA not before: Thu 01 Oct 2026 00:10:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218721
IP address blocks: 103.102.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f4:cc:d5:57:2f:d9:10:f6:54:4d:a2:3f:1f:5e:42:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9522ab67922ce0275e8c61abfa82d2a754af6dc4
Validity
Not Before: Oct 1 00:10:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06a590c429ec4343eee4709fa9b0e8ba86e05ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bc:39:14:8c:7d:6f:08:0e:c7:f6:5d:a1:94:
8e:d0:58:b5:a4:8a:d2:75:6c:15:e6:25:ab:c2:dc:
12:50:98:30:fa:37:27:7a:95:62:90:0b:8b:25:ca:
1e:a3:82:eb:7e:96:63:12:01:f0:5f:fc:00:74:f4:
73:71:4f:b0:02:fa:b6:2c:13:cb:78:99:a2:d1:4a:
a8:1f:79:6e:58:9f:68:76:5c:bd:ed:3e:c8:a4:39:
53:20:ee:6c:2e:f8:69:7d:d0:4c:7e:90:e5:27:87:
8c:ff:49:a6:97:18:16:42:f9:6d:0b:33:47:ff:82:
df:fb:a8:aa:4a:a9:6a:9f:0b:72:62:2b:30:2d:ef:
a5:db:28:38:df:7a:d9:a6:43:97:4f:df:33:39:fb:
e6:97:d1:99:37:fd:28:d0:59:4b:52:4d:53:57:78:
34:7a:e4:68:3b:94:a6:b4:08:f9:c4:a2:91:03:ee:
c3:de:68:1f:51:19:0b:b6:f8:fd:d8:8b:85:a5:60:
0a:85:df:29:0c:69:7b:5a:de:8c:6e:b4:2a:3b:ec:
43:b9:61:15:a5:ab:bf:3e:2d:89:0a:a7:05:0f:fa:
5c:b0:7f:29:62:fa:78:4e:49:53:a8:7b:68:d2:f4:
16:86:10:61:53:d6:13:02:94:5f:af:48:99:1e:d1:
b8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A5:90:C4:29:EC:43:43:EE:E4:70:9F:A9:B0:E8:BA:86:E0:5E:D1
X509v3 Authority Key Identifier:
keyid:95:22:AB:67:92:2C:E0:27:5E:8C:61:AB:FA:82:D2:A7:54:AF:6D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/BqWQxCnsQ0Pu5HCfqbDouobgXtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/68918e-e9da-406b-9931-e526a9409fb8/1/lSKrZ5Is4CdejGGr-oLSp1SvbcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.102.229.0/24
Signature Algorithm: sha256WithRSAEncryption
18:f5:8d:ba:2f:0c:53:4f:28:56:f9:9d:be:c2:28:72:9b:8d:
cc:79:ac:66:00:db:b1:1c:f5:6e:dc:54:4b:cb:f4:ad:50:07:
92:e2:ca:57:e8:7e:12:17:71:e1:8b:61:d8:05:d4:22:9f:19:
63:42:fb:86:9e:53:67:e1:e8:4d:0d:6e:7b:f7:b7:81:13:68:
05:e0:b5:b6:9c:ad:0c:9f:8a:26:65:7a:ba:f6:c0:48:2b:81:
d4:74:49:0f:1a:71:c8:2c:6f:bc:b0:5a:a9:20:23:50:3c:22:
48:59:44:3f:07:cb:d0:de:04:b2:e8:bd:e3:dd:4a:d8:f4:05:
21:83:a5:99:50:05:cb:f8:74:80:55:25:f5:f4:1f:b9:23:8a:
03:e1:e6:a9:05:54:a9:e7:41:77:83:0f:d2:ac:db:25:81:c5:
bf:06:50:05:50:55:b5:21:01:ed:72:a4:05:87:28:f9:b1:13:
a6:54:94:63:c6:41:56:51:ac:38:a2:99:43:84:be:68:fc:47:
a8:09:ab:28:ae:9a:ec:11:e6:66:f0:2c:9a:05:0e:23:3e:78:
0e:bf:cd:a2:de:de:ec:3b:a5:17:19:1c:3f:1f:e2:e7:ce:5a:
08:2f:96:73:88:bb:8f:e4:1b:45:cf:1e:af:ee:55:59:b7:87:
04:e2:07:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:01:34 2026 by rpki-client