Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/BaSF_ZGkeScNLZyzpNr5WLb2t4c.roa
File: BaSF_ZGkeScNLZyzpNr5WLb2t4c.roa (raw, json)
Hash identifier: 2BBTfQtCotzZDQlBL99JCiD7kOOIYBfNbtG6mjQoESc=
Subject key identifier: 05:A4:85:FD:91:A4:79:27:0D:2D:9C:B3:A4:DA:F9:58:B6:F6:B7:87
Certificate issuer: /CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Certificate serial: 01A080D1FCF89AC907EC19844F7B870D7A4D
Authority key identifier: 11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/BaSF_ZGkeScNLZyzpNr5WLb2t4c.roa
Signing time: Tue 08 Sep 2026 11:40:40 +0000
ROA not before: Tue 08 Sep 2026 11:40:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213753
IP address blocks: 164.138.0.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:d1:fc:f8:9a:c9:07:ec:19:84:4f:7b:87:0d:7a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11125404c6dd472f1001ed9ffdf726762ac7701d
Validity
Not Before: Sep 8 11:40:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05a485fd91a479270d2d9cb3a4daf958b6f6b787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c2:3b:ae:b0:a3:21:24:86:58:e3:53:a6:23:
2c:8f:31:99:f6:35:be:ed:b9:f2:d4:c7:9b:23:1a:
71:ca:97:9e:80:7e:e9:98:4c:6c:d9:8d:98:f5:e1:
1b:7b:02:0c:3f:4b:78:d8:65:1a:fd:fe:ae:69:46:
f3:44:08:7a:c1:e0:dc:3d:da:79:3e:93:ac:29:39:
11:3d:b0:57:43:8d:7a:86:62:10:d3:29:02:e2:9b:
9e:63:3f:73:4d:6d:bc:67:89:2a:b0:5a:af:93:c6:
73:85:83:49:94:c2:77:88:75:83:be:c8:94:94:53:
d8:ac:29:51:ba:47:21:68:48:85:b1:c6:e3:20:51:
34:1a:00:f7:2d:c3:c7:ec:6c:87:29:62:70:a8:03:
15:4f:b9:2b:e8:bb:5b:17:f8:c0:22:ee:52:8e:32:
a6:0e:00:40:8a:b1:d5:b0:52:30:88:aa:00:8c:1a:
94:0b:ac:1c:5c:cb:7b:03:26:cc:39:48:d3:fc:8f:
ef:7f:e9:01:15:a4:08:e9:c0:5d:41:8e:b1:46:1a:
af:a7:cb:c5:92:e5:f6:8b:e3:30:54:86:c9:bf:6d:
b7:5e:4b:6e:e0:68:74:25:f6:cb:ad:81:0d:83:df:
16:de:da:a8:c4:39:2d:5a:d9:79:f3:dd:73:53:71:
02:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A4:85:FD:91:A4:79:27:0D:2D:9C:B3:A4:DA:F9:58:B6:F6:B7:87
X509v3 Authority Key Identifier:
keyid:11:12:54:04:C6:DD:47:2F:10:01:ED:9F:FD:F7:26:76:2A:C7:70:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERJUBMbdRy8QAe2f_fcmdirHcB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/BaSF_ZGkeScNLZyzpNr5WLb2t4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/cf9cd6-e717-4dda-82ef-6dfe0f7d53bd/1/ERJUBMbdRy8QAe2f_fcmdirHcB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.138.0.0/22
Signature Algorithm: sha256WithRSAEncryption
43:31:b1:05:a4:09:fa:11:b1:db:8e:56:b4:40:5c:a8:82:2a:
6d:57:96:6e:35:3e:b1:16:9d:2b:ce:16:ca:58:e0:a8:fe:0a:
13:a1:be:77:cb:6c:d6:7a:7c:7f:13:6b:0e:8b:c7:a8:c6:9f:
9f:df:e8:01:d0:d9:96:a2:f8:68:89:a5:34:9f:30:7a:e9:2a:
f6:be:79:82:e5:91:61:6a:27:42:25:72:58:a1:8a:43:5e:d8:
be:0f:df:94:b8:22:cd:56:4e:9f:68:e4:33:54:9b:00:f1:d3:
3b:f6:fb:8a:9b:2f:1c:41:cc:5b:16:3d:af:d5:e6:2e:7a:11:
0b:02:ab:e1:d8:db:3e:29:3b:3e:6e:b8:cc:92:92:b0:ef:2a:
62:49:69:ca:fe:9a:da:48:fb:f5:89:10:4a:2c:4b:48:a7:dd:
4d:e9:33:14:a9:bd:ed:a5:d5:6d:4f:cb:bc:f1:84:45:a8:e3:
f7:bf:95:84:fb:93:0e:ac:98:33:55:f6:76:cb:2d:7d:93:c9:
cc:46:9e:34:13:87:d6:56:8b:62:88:26:82:f5:67:5d:b4:1f:
9f:13:81:5e:f0:d9:bf:b0:25:97:e1:14:3a:64:c7:89:96:41:
b9:33:8d:fb:3e:68:d6:37:bf:5b:44:af:5e:5b:3c:b1:2d:46:
48:d8:15:1b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCA0fz4mskH7BmET3uHDXpNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMTI1NDA0YzZkZDQ3MmYxMDAxZWQ5ZmZkZjcyNjc2MmFj
NzcwMWQwHhcNMjYwOTA4MTE0MDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNWE0ODVmZDkxYTQ3OTI3MGQyZDljYjNhNGRhZjk1OGI2ZjZiNzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18I7rrCjISSGWONTpiMsjzGZ9jW+
7bny1MebIxpxypeegH7pmExs2Y2Y9eEbewIMP0t42GUa/f6uaUbzRAh6weDcPdp5
PpOsKTkRPbBXQ416hmIQ0ykC4pueYz9zTW28Z4kqsFqvk8ZzhYNJlMJ3iHWDvsiU
lFPYrClRukchaEiFscbjIFE0GgD3LcPH7GyHKWJwqAMVT7kr6LtbF/jAIu5SjjKm
DgBAirHVsFIwiKoAjBqUC6wcXMt7AybMOUjT/I/vf+kBFaQI6cBdQY6xRhqvp8vF
kuX2i+MwVIbJv223Xktu4Gh0JfbLrYENg98W3tqoxDktWtl5891zU3ECbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAWkhf2RpHknDS2cs6Ta+Vi29reHMB8GA1UdIwQY
MBaAFBESVATG3UcvEAHtn/33JnYqx3AdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVJKVUJNYmRSeThRQWUyZl9mY21kaXJIY0IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9jZjljZDYtZTcxNy00ZGRhLTgyZWYt
NmRmZTBmN2Q1M2JkLzEvQmFTRl9aR2tlU2NOTFp5enBOcjVXTGIydDRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9jZjljZDYtZTcxNy00ZGRhLTgyZWYtNmRmZTBmN2Q1M2Jk
LzEvRVJKVUJNYmRSeThRQWUyZl9mY21kaXJIY0IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpIoAMA0G
CSqGSIb3DQEBCwUAA4IBAQBDMbEFpAn6EbHbjla0QFyogiptV5ZuNT6xFp0rzhbK
WOCo/goTob53y2zWenx/E2sOi8eoxp+f3+gB0NmWovhoiaU0nzB66Sr2vnmC5ZFh
aidCJXJYoYpDXti+D9+UuCLNVk6faOQzVJsA8dM79vuKmy8cQcxbFj2v1eYuehEL
Aqvh2Ns+KTs+brjMkpKw7ypiSWnK/praSPv1iRBKLEtIp91N6TMUqb3tpdVtT8u8
8YRFqOP3v5WE+5MOrJgzVfZ2yy19k8nMRp40E4fWVotiiCaC9WddtB+fE4Fe8Nm/
sCWX4RQ6ZMeJlkG5M437PmjWN79bRK9eWzyxLUZI2BUb
-----END CERTIFICATE-----
Generated at Mon Sep 21 10:17:12 2026 by rpki-client