Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/BnkcR-zuhslzC_C9CeL-f_x72I4.roa
File: BnkcR-zuhslzC_C9CeL-f_x72I4.roa (raw, json)
Hash identifier: uJSNgD6syL3St9C1qBsFditKy3aI8wT2H1jOG8X0Y04=
Subject key identifier: 06:79:1C:47:EC:EE:86:C9:73:0B:F0:BD:09:E2:FE:7F:FC:7B:D8:8E
Certificate issuer: /CN=16979d37da016abd13279270ba55d6b3c2960578
Certificate serial: 019EB5FC4D9391FDD6BBDE0AD5BD9B7838A2
Authority key identifier: 16:97:9D:37:DA:01:6A:BD:13:27:92:70:BA:55:D6:B3:C2:96:05:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/BnkcR-zuhslzC_C9CeL-f_x72I4.roa
Signing time: Thu 11 Jun 2026 09:21:11 +0000
ROA not before: Thu 11 Jun 2026 09:21:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15576
IP address blocks: 91.198.229.0/24 maxlen: 24
2001:678:12a4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 18:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b5:fc:4d:93:91:fd:d6:bb:de:0a:d5:bd:9b:78:38:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16979d37da016abd13279270ba55d6b3c2960578
Validity
Not Before: Jun 11 09:21:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06791c47ecee86c9730bf0bd09e2fe7ffc7bd88e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b1:e7:26:20:e9:97:ee:fa:22:03:d7:3e:2e:
5d:c9:03:02:d8:b4:32:d1:16:58:f2:7a:3e:d7:07:
17:89:bd:af:18:f0:2c:a0:bb:b6:eb:79:93:94:3f:
6e:79:d0:93:f6:a0:31:d7:72:6c:61:70:6f:76:4c:
fc:6f:cd:2c:3e:22:a1:a3:30:0e:2e:dd:7c:b0:7a:
b7:ed:1e:a0:7d:1c:7f:02:5d:e8:72:7e:d7:af:04:
4f:10:44:98:c0:18:f7:11:8c:87:2f:c6:a0:08:cd:
fc:ce:8d:51:9f:49:36:62:bf:e8:1b:4d:98:39:2f:
bf:a9:e9:36:a8:37:4d:59:e1:99:52:6d:86:9c:8f:
44:38:36:d7:01:91:8d:59:1d:4f:5e:3e:f8:70:53:
5b:fb:fb:ff:3a:20:8a:9a:a2:83:57:97:dc:eb:04:
7a:a1:2c:5d:9a:33:9e:2f:64:2b:6f:00:07:91:cd:
a2:4d:94:59:f9:6e:16:d5:63:ef:ab:5e:a7:d6:6d:
39:02:88:b9:01:2f:2e:4f:a4:18:04:3a:87:98:a2:
33:42:6e:3e:d6:3c:5a:e4:7c:21:39:9d:23:04:e5:
7e:33:c2:5f:3b:ea:2a:5f:c2:ac:c8:f5:a3:82:3a:
78:c3:29:74:8a:78:7c:9c:b9:7e:a9:a5:0c:8d:10:
88:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:79:1C:47:EC:EE:86:C9:73:0B:F0:BD:09:E2:FE:7F:FC:7B:D8:8E
X509v3 Authority Key Identifier:
keyid:16:97:9D:37:DA:01:6A:BD:13:27:92:70:BA:55:D6:B3:C2:96:05:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpedN9oBar0TJ5JwulXWs8KWBXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/BnkcR-zuhslzC_C9CeL-f_x72I4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9825a0-1fdc-4162-8372-b9dbdc8b439c/1/FpedN9oBar0TJ5JwulXWs8KWBXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.229.0/24
IPv6:
2001:678:12a4::/48
Signature Algorithm: sha256WithRSAEncryption
c5:4d:f8:18:2d:8a:ff:f7:c4:36:9f:a0:60:da:5c:4e:f7:7e:
f9:3d:ec:0d:e4:4d:c5:27:f1:65:6d:fb:7a:66:42:12:9d:a2:
de:63:34:ff:92:41:6b:ed:c2:75:86:38:d7:03:01:45:59:f2:
03:b3:e8:5f:7d:09:47:c5:7e:85:ce:a1:9a:41:4d:9b:5a:65:
35:b9:e5:d7:48:e0:1e:2c:9f:d4:cb:dd:1d:3b:d0:42:45:7a:
ed:37:62:21:e3:c1:a0:64:ec:0b:61:93:10:21:8c:02:de:5c:
ce:cf:83:4b:b3:86:7b:f1:75:5f:2f:0d:84:83:4e:c8:f6:de:
be:06:ca:68:26:c5:b0:95:59:3b:d2:66:92:e8:62:ef:cd:53:
c2:2d:1f:25:cc:d6:c6:4c:fa:b6:81:cc:8f:a9:73:97:fb:d4:
46:06:93:93:93:8a:2c:43:81:96:86:dd:8a:ba:77:2a:ec:b1:
59:4e:9e:ca:e9:78:8e:34:f1:b0:51:73:90:b7:a7:78:35:8d:
65:a8:5e:70:75:d7:0d:a6:f2:18:d5:2c:e3:b6:e1:04:b3:a6:
91:8c:91:53:3a:f5:91:78:54:d9:50:f3:0d:b2:13:5f:ec:14:
ff:2d:7a:9d:db:e1:d4:80:c0:58:9b:5b:d5:f8:27:4b:22:80:
23:a1:c7:bc
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZ61/E2Tkf3Wu94K1b2beDiiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2OTc5ZDM3ZGEwMTZhYmQxMzI3OTI3MGJhNTVkNmIzYzI5
NjA1NzgwHhcNMjYwNjExMDkyMTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjc5MWM0N2VjZWU4NmM5NzMwYmYwYmQwOWUyZmU3ZmZjN2JkODhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37HnJiDpl+76IgPXPi5dyQMC2LQy
0RZY8no+1wcXib2vGPAsoLu263mTlD9uedCT9qAx13JsYXBvdkz8b80sPiKhozAO
Lt18sHq37R6gfRx/Al3ocn7XrwRPEESYwBj3EYyHL8agCM38zo1Rn0k2Yr/oG02Y
OS+/qek2qDdNWeGZUm2GnI9EODbXAZGNWR1PXj74cFNb+/v/OiCKmqKDV5fc6wR6
oSxdmjOeL2QrbwAHkc2iTZRZ+W4W1WPvq16n1m05Aoi5AS8uT6QYBDqHmKIzQm4+
1jxa5HwhOZ0jBOV+M8JfO+oqX8KsyPWjgjp4wyl0inh8nLl+qaUMjRCIhQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFAZ5HEfs7obJcwvwvQni/n/8e9iOMB8GA1UdIwQY
MBaAFBaXnTfaAWq9EyeScLpV1rPClgV4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnBlZE45b0JhcjBUSjVKd3VsWFdzOEtXQlhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS85ODI1YTAtMWZkYy00MTYyLTgzNzIt
YjlkYmRjOGI0MzljLzEvQm5rY1ItenVoc2x6Q19DOUNlTC1mX3g3Mkk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS85ODI1YTAtMWZkYy00MTYyLTgzNzItYjlkYmRjOGI0Mzlj
LzEvRnBlZE45b0JhcjBUSjVKd3VsWFdzOEtXQlhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW8blMA8E
AgACMAkDBwAgAQZ4EqQwDQYJKoZIhvcNAQELBQADggEBAMVN+Bgtiv/3xDafoGDa
XE73fvk97A3kTcUn8WVt+3pmQhKdot5jNP+SQWvtwnWGONcDAUVZ8gOz6F99CUfF
foXOoZpBTZtaZTW55ddI4B4sn9TL3R070EJFeu03YiHjwaBk7AthkxAhjALeXM7P
g0uzhnvxdV8vDYSDTsj23r4GymgmxbCVWTvSZpLoYu/NU8ItHyXM1sZM+raBzI+p
c5f71EYGk5OTiixDgZaG3Yq6dyrssVlOnsrpeI408bBRc5C3p3g1jWWoXnB11w2m
8hjVLOO24QSzppGMkVM69ZF4VNlQ8w2yE1/sFP8tep3b4dSAwFibW9X4J0sigCOh
x7w=
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:41:10 2026 by rpki-client