Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/bkhPBuS_eFkclx_DIIoObMsi2C4.roa
File: bkhPBuS_eFkclx_DIIoObMsi2C4.roa (raw, json)
Hash identifier: 0UqQ4TPJlO0mJfAGxKgqNQzH8NCw4Nl0BDpBbkxcB50=
Subject key identifier: 6E:48:4F:06:E4:BF:78:59:1C:97:1F:C3:20:8A:0E:6C:CB:22:D8:2E
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A04DE4751ADB46CB56243DFA2D672C593A
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/bkhPBuS_eFkclx_DIIoObMsi2C4.roa
Signing time: Sat 29 Aug 2026 14:20:12 +0000
ROA not before: Sat 29 Aug 2026 14:20:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33993
IP address blocks: 2.56.178.0/24 maxlen: 24
45.9.12.0/24 maxlen: 24
45.9.13.0/24 maxlen: 24
45.9.14.0/24 maxlen: 24
45.9.15.0/24 maxlen: 24
45.9.16.0/24 maxlen: 24
45.12.114.0/24 maxlen: 24
45.12.115.0/24 maxlen: 24
45.15.130.0/24 maxlen: 24
45.15.147.0/24 maxlen: 24
45.128.49.0/24 maxlen: 24
45.128.53.0/24 maxlen: 24
45.136.114.0/24 maxlen: 24
141.98.188.0/24 maxlen: 24
141.98.189.0/24 maxlen: 24
141.98.190.0/24 maxlen: 24
141.98.191.0/24 maxlen: 24
171.22.133.0/24 maxlen: 24
171.22.134.0/24 maxlen: 24
171.22.135.0/24 maxlen: 24
171.22.136.0/24 maxlen: 24
171.22.137.0/24 maxlen: 24
171.22.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4d:e4:75:1a:db:46:cb:56:24:3d:fa:2d:67:2c:59:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Aug 29 14:20:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e484f06e4bf78591c971fc3208a0e6ccb22d82e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e1:62:c5:ce:9b:55:bc:4e:10:f1:ad:38:91:
2b:35:66:6c:12:98:22:fb:84:03:54:d3:18:07:8d:
0e:36:6c:aa:da:d8:f2:a9:4f:80:8f:11:ca:a8:ea:
00:6a:c6:5b:d4:85:5c:dd:87:2b:68:00:95:41:1a:
d1:65:d8:ff:6e:dd:d6:58:25:ac:01:ee:d6:57:16:
2d:ee:17:0f:49:ad:a7:a3:f8:15:c0:f4:0b:22:ec:
87:b1:05:ed:2a:3f:76:b1:0e:37:ae:52:d0:56:81:
f2:f7:9d:d8:9e:5f:42:c6:fe:f0:75:bc:50:9a:a0:
30:65:27:ef:f0:c6:8b:8b:c9:9b:11:9c:83:35:d2:
1d:13:52:bf:8b:fb:2f:04:74:bf:e2:dd:58:fd:0f:
67:a4:20:d6:55:eb:3e:e6:4d:77:3a:cf:23:1e:9e:
96:3b:68:8a:c9:d0:21:3d:bf:06:a4:ca:c8:ed:94:
30:5e:1b:79:f9:57:95:7a:4f:0c:00:c9:dc:f6:4c:
a6:00:b6:e4:ea:c0:72:1e:4d:62:0d:3d:83:76:d2:
a7:8d:e2:f4:d6:8d:3f:1e:bd:08:99:98:ba:07:6b:
e1:54:6c:e4:cf:be:76:44:5a:ea:1f:8b:5b:f6:b9:
e3:b3:d7:71:70:79:f9:48:eb:74:9d:db:74:72:f5:
80:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:48:4F:06:E4:BF:78:59:1C:97:1F:C3:20:8A:0E:6C:CB:22:D8:2E
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/bkhPBuS_eFkclx_DIIoObMsi2C4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.178.0/24
45.9.12.0-45.9.16.255
45.12.114.0/23
45.15.130.0/24
45.15.147.0/24
45.128.49.0/24
45.128.53.0/24
45.136.114.0/24
141.98.188.0/22
171.22.133.0-171.22.138.255
Signature Algorithm: sha256WithRSAEncryption
5b:8b:d2:fe:00:5d:d2:14:4f:6a:9e:3e:6c:fb:79:23:f7:9b:
65:32:0c:c5:9e:86:08:b1:c6:b9:e3:cc:8e:89:6e:6b:db:c1:
44:16:2b:18:fa:10:39:14:76:31:92:85:15:05:24:75:25:70:
93:ca:35:6e:4a:25:58:76:1d:4e:c9:3f:46:6c:7c:d0:95:21:
1a:0f:49:df:6c:a1:38:eb:e1:b3:c7:64:3e:5c:c8:9b:dc:f7:
8c:fc:46:d8:b2:c2:f1:4c:3d:c4:e9:5d:8e:71:db:4e:25:82:
71:83:3f:76:5a:5e:f1:e6:fd:ed:16:51:1d:14:45:3f:4e:f0:
1a:8a:d4:32:b2:46:d6:0d:66:4c:46:27:a5:0b:ee:8a:0e:e5:
4d:b2:62:2e:6b:b3:6b:f0:43:4a:d3:69:05:b3:80:88:86:f7:
46:a6:03:7b:fa:7a:ad:69:64:48:02:f8:e8:b8:34:08:e6:5a:
0e:2e:6d:9e:8d:6f:33:90:36:a3:a8:46:48:b9:8c:74:6e:88:
84:c4:b2:04:ea:42:f6:e7:5e:30:78:89:35:1f:ae:80:11:0d:
b6:2b:d7:68:ac:b1:87:ba:23:92:5d:66:bc:32:33:fc:9a:8c:
12:ba:60:02:71:3f:65:01:d5:c8:f2:0e:e4:4c:b2:68:09:48:
d5:fd:5d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:20:14 2026 by rpki-client