Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/BEmzt_A8rBM1SIkcMkhPyKIBKWk.roa
File: BEmzt_A8rBM1SIkcMkhPyKIBKWk.roa (raw, json)
Hash identifier: 91C4kb7G6OhsLlyHOuAdM6SbjVzaOfUF2A+NX5AyJ4s=
Subject key identifier: 04:49:B3:B7:F0:3C:AC:13:35:48:89:1C:32:48:4F:C8:A2:01:29:69
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A07B88DA6E8D1C06E40662D416D3151781
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/BEmzt_A8rBM1SIkcMkhPyKIBKWk.roa
Signing time: Mon 07 Sep 2026 11:02:41 +0000
ROA not before: Mon 07 Sep 2026 11:02:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214309
IP address blocks: 144.31.220.0/24 maxlen: 24
185.176.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:88:da:6e:8d:1c:06:e4:06:62:d4:16:d3:15:17:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 7 11:02:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0449b3b7f03cac133548891c32484fc8a2012969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c8:20:9e:f8:76:c2:68:a3:dc:55:e5:cd:c5:
10:2e:0f:51:cc:e2:e3:7d:74:93:bb:b8:68:39:78:
13:5a:46:a0:f4:c9:4c:39:88:9e:cc:7d:40:c8:82:
96:65:26:74:49:02:48:b9:05:d0:28:a8:da:5e:65:
2c:85:57:b2:7b:f1:d8:ac:fd:17:1b:71:0d:54:da:
d3:e3:e0:b9:6d:08:d3:3c:1c:f1:ad:57:1f:0f:2e:
e7:c5:91:4a:a4:b5:6c:05:0e:ea:c2:67:20:8d:61:
54:ba:ce:9f:af:5a:1c:a5:bd:ad:dc:56:5c:e9:02:
ca:70:7f:98:c5:b4:91:b6:01:e7:b1:98:29:3f:b9:
a2:5a:8d:6d:d4:26:07:1b:be:ac:dd:3b:ee:ed:e3:
48:b1:18:4f:61:4d:93:a5:ab:00:73:cd:be:d8:a4:
85:18:01:0a:75:a2:db:fa:8a:00:4b:91:cc:2e:36:
9e:16:42:7d:6c:98:fd:77:50:de:d6:95:05:ef:dd:
71:4b:3c:24:33:f8:86:b7:82:77:2c:5a:cf:41:f1:
66:60:ef:be:44:5d:14:90:1c:bc:46:36:df:b8:ce:
f7:d1:d4:2c:1e:cc:ef:3d:42:94:75:f4:23:44:01:
da:36:d2:fa:eb:35:ba:51:1d:30:a3:06:a9:f4:cf:
d4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:49:B3:B7:F0:3C:AC:13:35:48:89:1C:32:48:4F:C8:A2:01:29:69
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/BEmzt_A8rBM1SIkcMkhPyKIBKWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.31.220.0/24
185.176.94.0/24
Signature Algorithm: sha256WithRSAEncryption
58:c9:14:83:c2:28:f3:50:02:cc:66:39:9b:6d:e8:04:01:27:
a5:cb:ef:a2:08:5b:49:0c:36:3b:2d:6c:60:b2:b5:f4:da:0a:
d9:d6:b9:1c:0b:de:39:05:4b:95:55:35:21:e4:63:e2:0e:3c:
18:25:17:35:e3:56:48:b5:b1:10:d6:ba:6c:dd:56:61:21:3f:
07:ba:8c:2f:a8:0b:9d:37:5d:1b:f8:e2:2f:37:71:b9:05:9b:
65:ff:64:e1:c3:56:4a:f0:8a:ae:7b:92:8c:15:8e:52:40:88:
f0:e0:e9:10:41:2e:72:1b:3a:11:e7:c5:b8:b3:19:a5:a0:9b:
b6:00:e0:0d:e2:6e:69:81:43:01:f5:bc:36:b0:7d:35:bc:08:
42:91:62:a6:6f:91:10:b8:08:52:31:7e:85:1a:05:4a:5b:e7:
e2:44:90:10:ca:8c:63:20:ef:ce:24:ca:69:a2:54:4d:c4:cc:
c8:c4:a0:25:60:b6:7f:01:47:80:de:85:d5:a7:0c:c3:16:71:
07:23:ea:15:45:78:b9:0c:c9:2e:44:19:34:15:c2:35:53:bd:
12:fb:b9:6c:7c:e3:b0:63:29:8f:79:b2:81:a7:ee:93:de:4d:
50:2b:d0:9f:bf:fe:82:d4:c6:33:7b:6a:11:59:c1:ec:cd:5c:
e8:5c:51:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:26:16 2026 by rpki-client