Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/BIyVEriVirZL2G6IXmONC3j3lQM.roa
File: BIyVEriVirZL2G6IXmONC3j3lQM.roa (raw, json)
Hash identifier: 2KsgdSq3eO8pkxPOaGPnwvEW5mBPFvoUQw9KkpOW5GY=
Subject key identifier: 04:8C:95:12:B8:95:8A:B6:4B:D8:6E:88:5E:63:8D:0B:78:F7:95:03
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01A07B51E7464B0588A2B5905D8658C19116
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/BIyVEriVirZL2G6IXmONC3j3lQM.roa
Signing time: Mon 07 Sep 2026 10:02:40 +0000
ROA not before: Mon 07 Sep 2026 10:02:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 194.64.89.0/24 maxlen: 24
194.163.68.0/24 maxlen: 24
194.163.80.0/22 maxlen: 24
194.163.92.0/24 maxlen: 24
194.233.31.0/24 maxlen: 24
194.233.148.0/24 maxlen: 24
194.233.150.0/24 maxlen: 24
194.233.151.0/24 maxlen: 24
195.180.128.0/22 maxlen: 24
195.180.139.0/24 maxlen: 24
195.180.150.0/23 maxlen: 24
195.252.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 13:42:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:51:e7:46:4b:05:88:a2:b5:90:5d:86:58:c1:91:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Sep 7 10:02:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=048c9512b8958ab64bd86e885e638d0b78f79503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a8:4a:29:ea:49:78:18:dc:4c:d5:c2:68:8c:
4a:b0:93:72:31:4f:78:aa:ee:18:8d:9b:69:35:43:
bd:ed:05:91:de:01:87:f8:92:11:d6:b6:fa:80:a1:
fc:b5:93:ce:b4:7e:df:fd:6a:57:1d:f7:ac:d0:4b:
0b:56:af:22:a2:9d:2c:a6:87:aa:cf:e8:a7:d5:cf:
c9:07:51:21:1d:55:32:38:ff:86:fb:39:24:da:1e:
5c:12:cf:f3:02:7a:c3:ef:f1:e3:1d:ac:3b:fd:fa:
59:3e:6b:44:33:24:30:42:33:9e:0c:1b:32:79:93:
81:8c:73:76:ef:81:ae:2a:03:2a:bb:64:24:27:00:
81:20:62:7c:4f:4a:c8:10:da:1f:9c:f4:38:0f:df:
47:da:33:85:2f:d2:b2:35:6d:ff:45:84:af:da:31:
5f:8a:1c:32:53:19:83:e9:32:08:02:06:42:e8:93:
ad:dd:3f:07:a3:56:4b:2c:fb:62:c7:c9:03:c5:f0:
5e:d4:2a:43:4f:15:82:52:49:14:90:79:ac:82:89:
7c:2d:ea:89:6c:9d:12:06:f0:79:54:48:5a:86:b0:
07:c7:b9:a9:df:26:8d:62:0f:c9:d0:30:cb:6c:65:
65:9a:ce:f7:6c:8b:f7:50:11:0e:61:4b:38:19:95:
1b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8C:95:12:B8:95:8A:B6:4B:D8:6E:88:5E:63:8D:0B:78:F7:95:03
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/BIyVEriVirZL2G6IXmONC3j3lQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.64.89.0/24
194.163.68.0/24
194.163.80.0/22
194.163.92.0/24
194.233.31.0/24
194.233.148.0/24
194.233.150.0/23
195.180.128.0/22
195.180.139.0/24
195.180.150.0/23
195.252.175.0/24
Signature Algorithm: sha256WithRSAEncryption
27:e7:f3:48:19:1e:03:88:5f:84:0f:ac:ac:9e:83:83:cc:52:
e1:bb:7b:cb:c4:39:0d:81:6c:20:0f:ae:f8:13:1a:56:5c:42:
c6:7e:70:0d:52:6d:eb:ce:23:58:b3:8e:17:bf:61:3a:ad:7d:
1f:0e:ab:fe:56:06:dc:54:30:22:9a:d3:82:f3:3c:dc:d7:e5:
5c:90:fc:b5:bf:e6:9c:e6:55:e1:1a:fe:ef:53:8a:11:3f:4b:
9e:42:c3:fb:b4:a2:ae:0d:f4:a5:66:9a:82:46:d4:f8:d4:ee:
d0:73:83:bc:7c:17:a0:44:a4:4a:7b:00:3b:f4:38:34:fa:fc:
4d:a5:4d:c8:9f:a9:a9:05:c3:1a:a4:1d:74:b6:89:11:28:85:
25:dc:1c:18:c0:a8:a8:e9:79:e0:0a:00:ee:8b:fe:15:67:5d:
d3:66:a7:54:b9:20:19:19:ec:4b:1d:5d:95:69:6c:e0:cd:ec:
e1:97:a4:fb:e8:96:3d:70:f7:af:01:d0:4d:b1:0f:01:5a:bb:
8e:78:e4:ed:9d:05:1b:29:97:f3:8b:d8:46:9c:2b:94:3e:0b:
4e:68:32:1d:8c:2b:0c:fe:61:92:08:b1:f9:32:b9:0c:20:f3:
1c:67:fc:88:31:44:ec:38:e5:a7:dd:20:bf:10:d3:df:b4:fc:
e9:a1:3d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 18:27:53 2026 by rpki-client