Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/BaQi6Zra4k2wbYz6ETPx5IMWnCg.roa
File: BaQi6Zra4k2wbYz6ETPx5IMWnCg.roa (raw, json)
Hash identifier: jDka3rLzJhOrSXN0lEaU1aRFWCnI3harvthZUBLScF8=
Subject key identifier: 05:A4:22:E9:9A:DA:E2:4D:B0:6D:8C:FA:11:33:F1:E4:83:16:9C:28
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D91E5AA86B7A2131BA79E4462E088746D
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/BaQi6Zra4k2wbYz6ETPx5IMWnCg.roa
Signing time: Wed 15 Apr 2026 16:07:20 +0000
ROA not before: Wed 15 Apr 2026 16:07:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202051
IP address blocks: 2.26.160.0/24 maxlen: 24
144.31.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:91:e5:aa:86:b7:a2:13:1b:a7:9e:44:62:e0:88:74:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 15 16:07:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05a422e99adae24db06d8cfa1133f1e483169c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4f:a4:94:21:e8:9e:e2:20:ac:70:0f:68:32:
b1:f3:35:82:a9:d3:f6:c9:54:44:b4:aa:bb:8e:01:
02:d6:e8:fa:71:5f:27:09:5b:e4:33:ee:93:7f:8f:
c5:e4:39:5e:9e:a5:d3:21:fe:89:e4:d4:9d:2c:ea:
50:ce:d5:90:e7:4a:70:ed:d4:ea:bb:f1:5d:74:fe:
09:c1:19:5c:c1:59:6e:22:fb:3f:5a:4f:17:ec:a4:
b3:e1:6b:75:d6:2c:35:8e:2d:64:5f:5a:49:f8:c9:
ae:bf:4e:1f:26:b7:e9:1a:fe:17:79:c7:bb:e4:4a:
a5:f4:cd:0d:18:44:bd:e0:8f:4c:c8:41:6e:36:61:
08:7b:34:54:d2:18:40:5b:13:35:2d:0a:a8:79:6d:
3b:65:ce:89:4b:ba:62:4c:18:f9:ac:ef:cf:18:ac:
59:09:6b:d4:85:68:a5:44:dd:d2:b8:d7:54:07:95:
42:48:3a:b6:c8:0d:ce:cd:fc:58:fd:08:10:c4:e4:
88:27:e3:21:42:a7:35:b5:3b:1f:d3:38:7c:1f:82:
eb:c9:2b:86:de:32:e9:d6:ed:04:30:48:56:c2:20:
d8:89:93:03:20:2b:65:9f:9f:0a:fc:7b:c9:c3:03:
7d:1a:c3:6b:57:96:3b:8f:1a:c3:70:8d:6c:e5:c9:
cc:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A4:22:E9:9A:DA:E2:4D:B0:6D:8C:FA:11:33:F1:E4:83:16:9C:28
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/BaQi6Zra4k2wbYz6ETPx5IMWnCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.26.160.0/24
144.31.159.0/24
Signature Algorithm: sha256WithRSAEncryption
88:7d:eb:a8:7f:c2:f8:f9:d8:a1:8c:b4:78:b1:9a:10:b4:d0:
7d:df:3d:0a:dc:b5:6a:31:ae:c7:8b:95:0d:fb:fa:6d:7d:6f:
6b:f0:95:38:1f:4f:81:a2:2c:f0:8a:c5:a8:70:28:26:2d:d4:
8e:28:29:d3:72:2b:2b:a5:77:db:4c:11:e8:59:b8:e4:87:6d:
9e:33:9b:29:0d:83:d4:98:6d:12:02:d6:44:44:8f:d9:8a:23:
a7:f8:83:a3:38:a1:a5:cf:2b:b5:ac:60:87:82:e5:71:c0:0b:
7f:43:2c:2f:7c:4b:ee:4b:0e:5f:5e:09:e3:fd:55:c9:13:df:
54:a0:52:2d:cf:15:cd:9b:e1:1e:41:43:8c:17:a6:20:17:c8:
d8:19:5d:16:b4:ee:3e:ce:b6:35:f9:1b:be:08:86:70:31:d2:
b2:bc:e6:15:bb:eb:84:7f:71:57:c6:a1:5b:47:84:a1:2a:4b:
c4:3d:0a:8d:35:be:47:e7:a7:c4:b6:9d:b2:da:73:5c:a2:24:
f5:eb:9d:d1:da:e4:bf:cc:50:14:bc:ef:ee:19:55:18:fb:c7:
30:3a:b7:16:94:d9:aa:fd:94:43:4b:8c:da:c5:0a:3a:23:33:
51:48:8e:73:66:c9:98:1a:ae:a0:cd:aa:70:ce:0c:06:cb:82:
44:78:a1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:58:35 2026 by rpki-client