Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/BYqvFkUU3ZowtH6iDT51feINiUw.roa
File: BYqvFkUU3ZowtH6iDT51feINiUw.roa (raw, json)
Hash identifier: VG9HQbHV/Rm8pjqTyEWqXmJossCVquAK5L8rjVDQW4M=
Subject key identifier: 05:8A:AF:16:45:14:DD:9A:30:B4:7E:A2:0D:3E:75:7D:E2:0D:89:4C
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 019D00257C2AE5E1F3A8A513B5D74CD2ADBC
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/BYqvFkUU3ZowtH6iDT51feINiUw.roa
Signing time: Wed 18 Mar 2026 08:52:29 +0000
ROA not before: Wed 18 Mar 2026 08:52:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213348
IP address blocks: 109.248.136.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:00:25:7c:2a:e5:e1:f3:a8:a5:13:b5:d7:4c:d2:ad:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Mar 18 08:52:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=058aaf164514dd9a30b47ea20d3e757de20d894c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b7:00:44:48:d4:93:b4:98:4e:f3:c7:9b:40:
2f:10:2b:58:4e:a5:23:b8:6a:21:4b:be:09:c4:c4:
6a:b2:31:39:1f:84:ce:b8:8c:31:6c:cd:d7:83:50:
a4:68:67:27:84:10:7f:1a:72:2c:ba:39:9a:b3:6b:
ca:70:64:58:ad:3e:51:3f:19:82:a6:b2:9b:e1:d9:
10:51:64:f0:b3:a1:dd:d7:ec:d7:cc:a7:1c:72:ff:
28:7e:a6:7e:8b:91:07:37:03:24:aa:21:ca:81:9d:
6c:f7:fa:90:3c:92:bc:3b:a7:0e:ca:b5:3f:fe:e9:
50:75:62:85:de:9a:ad:ce:d9:c2:eb:1e:f5:fc:39:
4c:1a:06:97:0c:59:5e:a0:12:a4:1e:49:2b:3e:e3:
83:16:76:cb:67:af:76:02:af:52:33:11:83:e8:f8:
76:83:e3:14:9f:97:ab:33:31:75:27:ff:c9:19:4d:
a6:3b:9a:76:96:4b:08:d2:3f:8b:3a:d4:ff:48:e3:
ba:c4:9e:a4:fd:e2:53:42:bb:fc:8d:cf:f8:99:dd:
b4:61:74:f6:05:76:21:3e:c6:4a:0e:ec:ab:cf:e3:
6a:f0:34:76:96:eb:92:e5:38:65:90:c5:3d:ce:e5:
90:a8:20:81:14:fb:52:ed:5e:8d:b4:8c:cf:b2:b3:
c7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:8A:AF:16:45:14:DD:9A:30:B4:7E:A2:0D:3E:75:7D:E2:0D:89:4C
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/BYqvFkUU3ZowtH6iDT51feINiUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.248.136.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:8e:b4:e7:c1:cc:04:0a:cd:b9:69:6d:15:6f:6d:a3:73:92:
ff:9b:72:29:40:1d:75:49:46:87:19:61:98:d1:9c:e2:74:90:
f2:da:e5:89:c8:f2:b8:77:c1:57:3b:a2:5f:d2:f5:c9:bf:49:
91:88:40:ff:39:04:d4:8b:c0:15:7e:6b:aa:b3:24:89:ad:e8:
02:df:fa:72:3a:a1:9e:69:0d:06:57:44:28:c4:3c:cc:32:53:
10:f0:85:34:9d:7a:6d:2a:98:f4:b9:a9:30:7f:e7:c0:96:f9:
83:e2:a6:70:6a:be:d8:46:6a:a4:6f:e3:38:0d:c6:9e:2d:a1:
4d:11:ee:21:1c:9b:26:13:44:94:86:b2:61:4b:4f:70:6f:04:
a1:e6:9e:70:43:c8:a5:66:9c:ba:de:0a:ef:92:0d:91:70:bf:
4f:8b:0e:13:37:7f:2a:24:40:16:57:b8:ce:cd:f7:5c:39:d4:
5f:e9:00:83:31:60:c9:55:7f:59:9c:aa:94:7e:2a:c6:65:83:
f1:28:20:6c:6f:7b:bb:ab:4b:47:4c:6d:71:9e:73:4c:48:d6:
57:76:0d:72:20:9f:fb:cb:38:f9:05:76:39:03:68:51:76:0e:
49:8f:dd:88:9d:31:f0:7f:a5:46:62:8b:06:20:13:b9:e3:ec:
a1:d1:9e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 04:21:22 2026 by rpki-client