Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/bAu2nHwwaI2xhx67rCFJbdWrOiQ.roa
File: bAu2nHwwaI2xhx67rCFJbdWrOiQ.roa (raw, json)
Hash identifier: PPgISwxtGfhelxALTN8TWlqq+07YWVYIQR2uMCsI0BQ=
Subject key identifier: 6C:0B:B6:9C:7C:30:68:8D:B1:87:1E:BB:AC:21:49:6D:D5:AB:3A:24
Certificate issuer: /CN=896a82a725ed22bb46847ae568912078de25c108
Certificate serial: 01A115FEDCEA5356775C07F927749735D63A
Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/bAu2nHwwaI2xhx67rCFJbdWrOiQ.roa
Signing time: Wed 07 Oct 2026 10:53:06 +0000
ROA not before: Wed 07 Oct 2026 10:53:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209980
IP address blocks: 92.43.224.0/21 maxlen: 21
193.220.160.0/24 maxlen: 24
193.220.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:fe:dc:ea:53:56:77:5c:07:f9:27:74:97:35:d6:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896a82a725ed22bb46847ae568912078de25c108
Validity
Not Before: Oct 7 10:53:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c0bb69c7c30688db1871ebbac21496dd5ab3a24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c0:f3:ac:df:72:fb:bd:fc:37:af:51:85:fc:
e1:31:cc:a2:1f:cd:24:79:fd:9e:2c:f0:5d:29:43:
68:4d:a8:3b:95:b7:7c:b7:b6:76:ea:74:29:61:7b:
d6:0d:03:1d:c1:29:ad:86:53:d3:9c:5b:58:b3:c0:
01:37:59:bd:53:fe:fd:14:46:a3:e7:76:c0:cb:7f:
19:e4:71:bb:4f:48:c1:00:5b:50:40:df:e8:18:4f:
63:54:b2:a4:a1:60:47:f9:4c:5c:fd:9e:9d:7f:91:
44:c3:00:f6:83:84:af:13:b1:ee:46:17:7a:77:fd:
f1:56:61:30:44:5d:ad:fb:74:a6:96:a1:18:f3:69:
c8:ed:92:6e:7f:b0:13:fc:a0:37:00:25:cf:f6:d2:
15:9c:2e:77:9d:fb:b7:4d:b3:47:65:8a:be:f2:f6:
aa:bf:1b:cb:3a:63:7e:9b:ab:bb:f8:2b:3e:dc:4f:
a5:ac:ea:4c:85:a2:5e:4d:44:87:fb:5c:80:17:a9:
3e:28:a1:3c:14:ac:b9:36:9a:bf:63:fb:3c:22:f3:
0c:a8:7e:8e:c5:31:20:b7:9f:2d:b1:9e:7b:0e:de:
a4:bb:34:00:12:a8:a6:fb:df:3e:75:8e:c3:7c:ab:
90:3a:16:2d:1c:60:88:4b:2b:a4:05:8f:90:31:fa:
b7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:0B:B6:9C:7C:30:68:8D:B1:87:1E:BB:AC:21:49:6D:D5:AB:3A:24
X509v3 Authority Key Identifier:
keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/bAu2nHwwaI2xhx67rCFJbdWrOiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.43.224.0/21
193.220.160.0/23
Signature Algorithm: sha256WithRSAEncryption
11:f2:59:cf:6e:69:0a:00:3d:df:64:0b:41:bd:46:86:33:ab:
0e:93:a6:a0:e4:ff:64:20:79:56:ee:d3:94:30:41:45:21:1a:
06:1d:0e:78:e6:49:01:c7:57:15:a2:2b:bb:d2:ac:f3:8d:33:
03:8d:52:2e:51:35:3d:60:74:30:a7:1b:0b:02:b1:9b:86:6c:
a1:2c:83:9c:e9:dc:47:1e:cf:63:4a:a5:ea:69:9d:83:85:1f:
3c:3f:93:72:ef:d0:14:3f:1d:96:0e:d6:3a:02:07:d6:f3:12:
45:6f:ec:99:75:40:bc:27:69:0c:29:bf:b4:d9:70:16:bb:d0:
66:5d:7c:4a:09:77:83:50:3e:e3:6f:4b:8d:4b:64:c6:53:84:
64:33:b5:0d:dc:97:38:af:40:56:50:cd:db:2a:40:b7:ba:83:
86:31:12:0b:dd:11:6c:68:0f:de:84:4f:60:fb:1e:00:e0:aa:
c2:e4:3f:84:73:51:e0:a0:7b:eb:de:ff:50:c2:39:0f:ac:53:
16:6d:38:05:a9:f8:21:1b:09:9a:46:17:ee:fc:1d:af:e6:4d:
86:b0:88:b6:0c:7b:2c:d7:d4:c2:58:9f:fa:74:65:5e:4e:a4:
7e:8d:82:9d:42:59:dc:43:36:c2:0f:6d:11:56:f2:86:ac:68:
78:ab:1b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:13:41 2026 by rpki-client