Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/BCUxpGIKyaMC-Q3G7NnrsAkzmCI.roa
File: BCUxpGIKyaMC-Q3G7NnrsAkzmCI.roa (raw, json)
Hash identifier: ryv2XJUFPiF4ko9Nol2Ry4OYS00zMIo0eJUnMWOCOKY=
Subject key identifier: 04:25:31:A4:62:0A:C9:A3:02:F9:0D:C6:EC:D9:EB:B0:09:33:98:22
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01A03EE6CAE37BFBBEA04C748FC19DB4D8E6
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/BCUxpGIKyaMC-Q3G7NnrsAkzmCI.roa
Signing time: Wed 26 Aug 2026 16:28:27 +0000
ROA not before: Wed 26 Aug 2026 16:28:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.155.254.0/24 maxlen: 24
45.157.209.0/24 maxlen: 24
79.98.245.0/24 maxlen: 24
176.125.250.0/24 maxlen: 24
185.199.151.0/24 maxlen: 24
185.199.212.0/23 maxlen: 23
185.199.213.0/24 maxlen: 24
185.199.214.0/23 maxlen: 24
185.221.26.0/24 maxlen: 24
185.221.27.0/24 maxlen: 24
185.225.168.0/23 maxlen: 23
185.225.170.0/24 maxlen: 24
185.250.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:e6:ca:e3:7b:fb:be:a0:4c:74:8f:c1:9d:b4:d8:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Aug 26 16:28:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=042531a4620ac9a302f90dc6ecd9ebb009339822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6f:b6:73:34:18:eb:aa:1a:21:29:7e:a9:54:
bc:ef:a5:81:e4:39:6d:7c:99:69:70:ef:6b:05:2e:
72:eb:1b:06:f4:75:d7:5e:69:b3:7f:a6:51:49:a1:
5f:0d:35:1a:3c:55:d1:7c:e6:2b:0e:6f:5c:a5:f9:
61:a3:30:b6:31:6b:65:9e:d7:21:f7:b3:dc:e1:44:
bf:19:b4:22:c7:58:37:6a:cf:d2:93:03:63:b6:bc:
5d:ba:f9:3d:a8:38:e7:a2:e3:3e:7f:93:33:08:f7:
4d:fd:69:45:2b:d9:b8:49:dc:bd:d9:63:d7:b0:6e:
e6:7e:dc:68:1e:5b:f6:75:68:f3:50:5d:aa:86:e6:
76:05:e5:11:79:0d:c0:41:04:9a:98:84:e5:b0:95:
30:8e:09:f4:ac:84:f4:90:57:e1:89:b9:84:ec:25:
89:f4:dc:48:7f:12:52:03:69:a3:c6:90:64:17:ad:
f4:da:05:38:30:f9:9d:97:ce:04:88:16:da:21:89:
4a:a1:5d:cd:40:f9:16:81:a9:48:4e:47:f4:7d:7a:
3c:00:7b:75:97:5b:11:4b:a6:23:0d:24:90:06:0e:
6c:67:d0:85:bd:45:13:b8:87:69:d3:b1:2e:85:8d:
27:32:eb:bc:37:93:63:8c:fb:ef:d4:ab:b6:23:a0:
ea:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:25:31:A4:62:0A:C9:A3:02:F9:0D:C6:EC:D9:EB:B0:09:33:98:22
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/BCUxpGIKyaMC-Q3G7NnrsAkzmCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.254.0/24
45.157.209.0/24
79.98.245.0/24
176.125.250.0/24
185.199.151.0/24
185.199.212.0/22
185.221.26.0/23
185.225.168.0-185.225.170.255
185.250.26.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:32:3f:b9:9c:ab:11:91:aa:15:ea:14:77:54:37:67:eb:6f:
37:f8:99:ed:93:ea:b0:83:10:76:c9:05:60:9d:7a:4a:6c:7f:
56:ad:48:90:df:cf:01:2c:d1:a7:74:be:8d:e6:4d:3a:0c:2e:
29:bd:3c:a9:3e:e0:5c:9e:42:e4:43:17:a2:09:6a:45:08:3f:
84:cb:5d:89:c2:a4:82:97:e9:f3:0e:a2:eb:b4:bd:63:67:2f:
ef:dc:c2:25:5b:13:17:b4:92:0a:8a:ed:38:be:1a:d4:e1:a2:
58:59:28:61:6b:4d:ef:1e:c8:61:9a:95:f8:cc:68:ab:5f:2b:
5f:54:25:cd:90:24:2c:6e:b5:5d:07:a9:2b:7e:ca:52:fd:7c:
61:a2:7a:d3:5c:71:86:29:fe:00:cd:91:1b:a4:c9:96:e7:14:
cb:0a:02:65:96:69:c3:6e:3e:dc:b8:03:81:a5:04:24:f7:5b:
36:04:e9:14:3e:d3:49:2d:6b:04:b9:20:7a:14:5c:7b:73:15:
b2:3b:fe:71:ed:7c:5d:51:4a:5f:94:3d:55:92:60:1a:12:5e:
10:2a:37:1d:e8:71:5d:90:d4:a1:f9:5f:7c:6b:9a:52:74:dc:
67:ee:8d:15:09:e5:9b:1c:ab:c8:b1:a0:bb:6d:4c:28:9f:10:
6d:ac:6f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 09:43:44 2026 by rpki-client