Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/BAIynlsyHU_iC9dbEPMu0P4DC0o.roa
File: BAIynlsyHU_iC9dbEPMu0P4DC0o.roa (raw, json)
Hash identifier: NwY40F+kFG2yfJLJ2eEnwJuZ8Y7l5nWAQmBeMkshuLg=
Subject key identifier: 04:02:32:9E:5B:32:1D:4F:E2:0B:D7:5B:10:F3:2E:D0:FE:03:0B:4A
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 019FA929B8268D809B5022C56D48608769CE
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/BAIynlsyHU_iC9dbEPMu0P4DC0o.roa
Signing time: Tue 28 Jul 2026 14:38:31 +0000
ROA not before: Tue 28 Jul 2026 14:38:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219139
IP address blocks: 193.160.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:29:b8:26:8d:80:9b:50:22:c5:6d:48:60:87:69:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Jul 28 14:38:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0402329e5b321d4fe20bd75b10f32ed0fe030b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3c:6c:33:58:63:d0:30:70:55:96:a5:83:a0:
9b:be:50:55:0a:04:26:a4:bf:b7:76:7b:d5:eb:29:
8c:d9:9a:59:15:58:63:3b:d9:5e:81:a7:bd:85:9d:
23:f8:7d:d5:7c:e5:f7:81:cc:81:b7:61:a0:2b:b5:
a3:8c:9b:0d:65:df:a2:cc:89:75:53:08:c5:a6:57:
01:38:a7:87:4e:e9:de:26:ca:01:be:f7:bb:47:de:
30:9c:a3:1f:2f:71:8f:bd:88:33:c3:ec:ec:aa:dd:
23:af:9f:45:b0:cb:d6:a7:34:4d:a9:a2:db:64:ad:
b7:eb:95:8e:61:61:bf:d4:36:40:e9:8f:b4:4c:29:
65:04:de:50:19:56:bb:47:b4:9b:e6:47:f1:5e:93:
4e:46:fa:e3:00:09:ad:c6:61:ba:b8:c2:fb:9f:c0:
f3:a0:64:a2:43:ff:e2:bc:48:87:7f:3d:af:9a:61:
51:76:e2:46:0e:3a:50:1a:38:37:bf:75:d0:7c:70:
c0:81:0f:31:02:38:ab:39:ce:2d:30:2d:eb:39:fc:
5d:d9:52:d0:2f:77:66:6f:8c:62:48:28:f8:18:4c:
db:f4:5c:90:fd:76:a1:b3:77:72:79:3f:67:8c:b7:
73:2f:8b:b5:84:9e:da:81:84:ae:3f:75:f5:57:0d:
54:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:02:32:9E:5B:32:1D:4F:E2:0B:D7:5B:10:F3:2E:D0:FE:03:0B:4A
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/BAIynlsyHU_iC9dbEPMu0P4DC0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.222.0/24
Signature Algorithm: sha256WithRSAEncryption
97:28:20:fa:ac:fb:71:3c:3f:5b:df:2e:10:fb:01:6a:fb:cb:
5a:59:de:64:db:07:5c:8a:19:82:6d:50:ab:0c:ee:79:6b:e3:
ab:79:70:07:a8:df:62:2e:3c:e8:74:cc:c4:d7:05:3b:33:50:
fb:58:9c:3e:76:c5:85:2c:db:74:47:a8:e5:d9:b5:ae:34:0f:
4f:2b:da:3f:d7:18:c9:bf:aa:02:9e:43:cc:c1:8a:27:7a:0b:
1e:21:9b:84:0d:b8:83:ef:5e:2f:a0:03:9b:a6:25:f2:6f:eb:
06:b9:68:79:53:ed:71:f6:5b:04:b1:aa:1b:a6:e3:60:fa:ac:
68:a7:cd:87:f0:f5:63:10:28:2f:02:8d:11:5a:4f:09:7c:5d:
6c:35:86:ed:f2:a6:89:8e:f6:b1:82:6a:37:cb:48:85:a0:5e:
28:d7:7f:92:ea:47:f9:cb:da:d6:ca:4d:a0:d2:2f:49:2c:86:
a6:2a:1f:38:91:c5:95:e9:69:bf:ca:31:54:0c:fe:a0:84:e2:
95:3e:a0:66:0f:76:a6:73:21:02:27:a0:2c:a0:91:af:6a:33:
b3:76:c0:6c:56:ca:70:6c:02:e2:c1:d9:2e:26:d5:87:a8:7a:
81:aa:86:7a:46:e8:04:94:1e:c8:8c:eb:64:48:2a:2e:da:08:
c3:99:6d:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+pKbgmjYCbUCLFbUhgh2nOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk
ZjM1NGEwHhcNMjYwNzI4MTQzODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDAyMzI5ZTViMzIxZDRmZTIwYmQ3NWIxMGYzMmVkMGZlMDMwYjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzxsM1hj0DBwVZalg6CbvlBVCgQm
pL+3dnvV6ymM2ZpZFVhjO9legae9hZ0j+H3VfOX3gcyBt2GgK7WjjJsNZd+izIl1
UwjFplcBOKeHTuneJsoBvve7R94wnKMfL3GPvYgzw+zsqt0jr59FsMvWpzRNqaLb
ZK2365WOYWG/1DZA6Y+0TCllBN5QGVa7R7Sb5kfxXpNORvrjAAmtxmG6uML7n8Dz
oGSiQ//ivEiHfz2vmmFRduJGDjpQGjg3v3XQfHDAgQ8xAjirOc4tMC3rOfxd2VLQ
L3dmb4xiSCj4GEzb9FyQ/Xahs3dyeT9njLdzL4u1hJ7agYSuP3X1Vw1UoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAQCMp5bMh1P4gvXWxDzLtD+AwtKMB8GA1UdIwQY
MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt
MjBlMTk3ODBjYjJlLzEvQkFJeW5sc3lIVV9pQzlkYkVQTXUwUDREQzBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl
LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaDeMA0G
CSqGSIb3DQEBCwUAA4IBAQCXKCD6rPtxPD9b3y4Q+wFq+8taWd5k2wdcihmCbVCr
DO55a+OreXAHqN9iLjzodMzE1wU7M1D7WJw+dsWFLNt0R6jl2bWuNA9PK9o/1xjJ
v6oCnkPMwYonegseIZuEDbiD714voAObpiXyb+sGuWh5U+1x9lsEsaobpuNg+qxo
p82H8PVjECgvAo0RWk8JfF1sNYbt8qaJjvaxgmo3y0iFoF4o13+S6kf5y9rWyk2g
0i9JLIamKh84kcWV6Wm/yjFUDP6ghOKVPqBmD3amcyECJ6AsoJGvajOzdsBsVspw
bALiwdkuJtWHqHqBqoZ6RugElB7IjOtkSCou2gjDmW0y
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:02:13 2026 by rpki-client