Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BHTWvL4cE6MrpGjcqmN0sGJdgZQ.roa
File: BHTWvL4cE6MrpGjcqmN0sGJdgZQ.roa (raw, json)
Hash identifier: rn/g1zCoytFZWMdwRFtO9/X11tvCHcsDwuQOfXywssw=
Subject key identifier: 04:74:D6:BC:BE:1C:13:A3:2B:A4:68:DC:AA:63:74:B0:62:5D:81:94
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 019D6D1624671FEA0FE01335CEED6814FB1E
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BHTWvL4cE6MrpGjcqmN0sGJdgZQ.roa
Signing time: Wed 08 Apr 2026 12:34:20 +0000
ROA not before: Wed 08 Apr 2026 12:34:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200045
IP address blocks: 2a0c:b641:ad0::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6d:16:24:67:1f:ea:0f:e0:13:35:ce:ed:68:14:fb:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Apr 8 12:34:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0474d6bcbe1c13a32ba468dcaa6374b0625d8194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9a:8d:3e:8b:39:cb:15:7d:0c:0c:c9:e8:d1:
68:62:78:6e:93:5d:91:c1:1e:0f:45:dd:57:d7:d5:
d6:60:33:2c:15:89:22:a8:5b:34:e3:a6:db:43:ea:
13:08:97:e2:0a:6e:58:09:6a:11:5d:e5:d6:a8:98:
7a:31:d1:6a:74:29:af:9e:e5:4f:c9:08:8a:85:21:
b0:4a:1e:c4:f4:71:79:80:55:d6:dc:f0:bf:a5:6e:
fe:55:9d:57:68:6b:22:0b:74:07:70:7c:08:40:1e:
b6:a1:8d:02:44:22:44:77:51:a0:e6:d0:37:3b:a1:
88:e3:31:ae:4f:d0:72:c4:98:70:60:04:0c:03:a4:
43:e1:bb:96:0a:e3:d4:89:8f:5b:39:84:5a:c0:d3:
f6:7b:e1:cd:17:53:f8:fc:10:85:f3:f3:81:9d:07:
8c:08:77:75:52:fa:21:1c:00:2b:85:a9:09:7f:14:
0c:53:43:b1:71:7d:73:6d:7e:f0:d0:bf:14:7c:ed:
4f:b8:f8:52:4b:21:a9:e5:f6:53:68:33:7f:26:dc:
81:f5:6d:02:26:f2:c5:e8:e4:f3:1f:d9:13:7e:a0:
e0:4f:e0:cb:22:fe:71:19:a1:f4:3e:30:7b:74:a8:
7f:b5:a3:44:c4:96:bc:68:12:09:c0:08:af:8f:41:
f1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:74:D6:BC:BE:1C:13:A3:2B:A4:68:DC:AA:63:74:B0:62:5D:81:94
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BHTWvL4cE6MrpGjcqmN0sGJdgZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:ad0::/44
Signature Algorithm: sha256WithRSAEncryption
64:dd:fe:82:4b:7f:8a:6a:38:b9:11:e1:8d:a4:1b:71:92:b6:
ac:7c:3c:d6:75:e3:53:8d:f4:99:04:d8:8a:f1:9a:62:c5:7c:
65:26:7b:93:d8:52:97:33:c8:26:15:03:d2:f2:3c:76:8a:cf:
66:1b:f8:30:4d:b4:2c:6f:01:32:b8:e4:59:c5:f3:a0:56:aa:
b2:38:6f:c0:cc:ed:9f:b4:ec:47:0a:a3:e2:40:31:95:2a:ff:
31:15:50:da:ab:30:a7:05:f0:1d:49:ff:74:6c:b8:2d:1d:20:
83:f8:5a:43:c4:53:ce:a7:b5:e0:f1:20:76:a9:50:8d:30:c0:
a9:ae:e5:9e:ac:e6:d3:0f:12:55:48:d0:29:a8:62:0e:46:77:
d5:77:8b:89:21:fa:74:cc:f9:80:53:80:ee:09:99:78:10:cb:
69:a3:c0:25:a8:ac:5b:f1:e6:de:df:05:3f:0e:a8:68:69:1f:
fd:28:b6:44:e5:8b:64:71:bf:8b:e6:f0:57:8c:fc:1c:47:c4:
9e:93:69:ac:c6:cd:41:64:d8:ee:f3:f7:a0:b7:12:b1:6d:9c:
0d:1f:e1:e6:ce:d8:2f:03:26:31:e1:b6:df:25:49:a0:60:03:
26:c9:f0:d4:37:b2:75:18:90:9a:bd:1c:54:b4:50:ca:36:60:
5a:22:de:4d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ1tFiRnH+oP4BM1zu1oFPseMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjYwNDA4MTIzNDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDc0ZDZiY2JlMWMxM2EzMmJhNDY4ZGNhYTYzNzRiMDYyNWQ4MTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpqNPos5yxV9DAzJ6NFoYnhuk12R
wR4PRd1X19XWYDMsFYkiqFs046bbQ+oTCJfiCm5YCWoRXeXWqJh6MdFqdCmvnuVP
yQiKhSGwSh7E9HF5gFXW3PC/pW7+VZ1XaGsiC3QHcHwIQB62oY0CRCJEd1Gg5tA3
O6GI4zGuT9ByxJhwYAQMA6RD4buWCuPUiY9bOYRawNP2e+HNF1P4/BCF8/OBnQeM
CHd1UvohHAArhakJfxQMU0OxcX1zbX7w0L8UfO1PuPhSSyGp5fZTaDN/JtyB9W0C
JvLF6OTzH9kTfqDgT+DLIv5xGaH0PjB7dKh/taNExJa8aBIJwAivj0HxjQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFAR01ry+HBOjK6Ro3KpjdLBiXYGUMB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvQkhUV3ZMNGNFNk1ycEdqY3FtTjBzR0pkZ1pRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQrQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBk3f6CS3+Kaji5EeGNpBtxkrasfDzWdeNTjfSZ
BNiK8ZpixXxlJnuT2FKXM8gmFQPS8jx2is9mG/gwTbQsbwEyuORZxfOgVqqyOG/A
zO2ftOxHCqPiQDGVKv8xFVDaqzCnBfAdSf90bLgtHSCD+FpDxFPOp7Xg8SB2qVCN
MMCpruWerObTDxJVSNApqGIORnfVd4uJIfp0zPmAU4DuCZl4EMtpo8AlqKxb8ebe
3wU/DqhoaR/9KLZE5Ytkcb+L5vBXjPwcR8Sek2msxs1BZNju8/egtxKxbZwNH+Hm
ztgvAyYx4bbfJUmgYAMmyfDUN7J1GJCavRxUtFDKNmBaIt5N
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:13:01 2026 by rpki-client