Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/BQEIBqLlhrcv4U9WmMzx1NlcRN0.roa
File: BQEIBqLlhrcv4U9WmMzx1NlcRN0.roa (raw, json)
Hash identifier: huXifm9uXVrOkPph8092Brb0t470qTrJHwbgPqd8z4w=
Subject key identifier: 05:01:08:06:A2:E5:86:B7:2F:E1:4F:56:98:CC:F1:D4:D9:5C:44:DD
Certificate issuer: /CN=28bac185b83f6de39abadcff3dfe4873d883c488
Certificate serial: 01A0245F68897D19CD4E5C8C76E43DBB5C4B
Authority key identifier: 28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/BQEIBqLlhrcv4U9WmMzx1NlcRN0.roa
Signing time: Fri 21 Aug 2026 12:50:27 +0000
ROA not before: Fri 21 Aug 2026 12:50:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207279
IP address blocks: 45.143.99.0/24 maxlen: 24
131.222.130.0/24 maxlen: 24
131.222.194.0/24 maxlen: 24
193.38.34.0/24 maxlen: 24
2a12:aac0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 18:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:5f:68:89:7d:19:cd:4e:5c:8c:76:e4:3d:bb:5c:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bac185b83f6de39abadcff3dfe4873d883c488
Validity
Not Before: Aug 21 12:50:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05010806a2e586b72fe14f5698ccf1d4d95c44dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fb:69:1a:a3:97:92:3f:8c:d4:ca:1d:b0:9b:
40:cb:df:a4:f0:ba:35:b5:db:0b:4e:92:b1:51:49:
19:78:60:e9:09:36:2c:7a:b3:55:cf:45:d9:a6:07:
fb:4e:33:29:5e:ed:24:3a:1b:9a:8a:83:9b:44:16:
52:21:0e:20:6c:35:64:89:8b:de:c8:ac:8c:df:6b:
09:b8:6b:fc:a4:17:31:4c:ce:47:ce:26:d1:57:41:
51:f5:e8:21:6e:1e:b7:59:c4:30:6e:36:b9:18:a0:
9d:39:5b:7c:31:21:f3:ff:a7:c2:be:84:de:64:34:
a2:55:98:5b:a8:91:32:81:9c:05:31:05:00:63:91:
4d:a2:2c:df:a8:4d:e9:48:1f:df:18:9a:d2:d4:b7:
17:78:f9:9b:20:6e:d1:b0:18:b1:67:b8:2e:ff:99:
cf:8d:90:fc:ca:55:21:e0:d1:60:60:0d:ab:75:66:
fd:b4:7f:4f:07:db:24:2b:4b:50:51:97:b4:0e:a9:
0c:d6:f4:fd:25:cb:11:52:c9:4d:af:f1:9b:87:e6:
04:4e:32:2b:59:39:7e:6d:82:d5:f3:c9:e7:e5:b9:
6a:bd:68:e6:ca:fc:12:c9:55:24:ef:d7:a0:4d:4a:
30:c6:ff:e4:b9:48:24:18:65:03:7f:b5:7e:5d:c5:
ea:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:01:08:06:A2:E5:86:B7:2F:E1:4F:56:98:CC:F1:D4:D9:5C:44:DD
X509v3 Authority Key Identifier:
keyid:28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/BQEIBqLlhrcv4U9WmMzx1NlcRN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.99.0/24
131.222.130.0/24
131.222.194.0/24
193.38.34.0/24
IPv6:
2a12:aac0::/29
Signature Algorithm: sha256WithRSAEncryption
99:d2:60:f0:d8:63:fa:26:7d:a0:12:98:02:be:57:e2:cd:79:
60:12:33:91:5e:97:d3:38:fe:36:25:10:91:a0:8b:6d:aa:49:
d0:ea:01:de:97:15:b7:63:23:ac:e6:03:8c:f6:ad:3a:56:e6:
c0:0d:0d:d1:3d:4e:9b:3f:d9:26:65:74:5b:93:47:37:42:a5:
bd:b5:28:fb:75:58:ad:90:7c:fc:f3:31:e6:71:3f:25:02:e5:
e3:55:f3:99:d1:1b:54:5b:9e:22:95:81:0f:45:e4:df:73:75:
77:de:6f:62:f6:62:2f:2a:e4:00:dd:64:35:3c:93:88:22:1b:
0d:cb:a8:7c:29:96:24:9b:58:48:50:c7:d3:f5:ba:d7:2f:4d:
9f:5f:4f:48:3e:c0:ed:41:0a:0f:e3:cf:61:20:17:93:ec:92:
d0:36:d7:c3:a6:36:b1:fd:d9:1d:63:87:3f:ea:e5:21:29:b9:
89:25:97:65:42:b8:fa:f4:f5:98:94:ad:1f:77:c5:18:ec:1e:
c9:fb:71:4b:91:5e:1d:44:de:35:59:b9:bd:fe:69:49:4a:f7:
3f:f3:9c:d9:20:97:4a:16:ca:ae:a8:14:77:02:71:05:98:46:
fe:0c:48:72:65:21:cc:ea:9a:c1:22:df:67:02:27:27:e4:c0:
e0:de:f3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:09:28 2026 by rpki-client