Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/BIWjRS8zCx6Ly9GztEn53lyLVuA.roa
File: BIWjRS8zCx6Ly9GztEn53lyLVuA.roa (raw, json)
Hash identifier: hj7SZXrhwEnqVdxbCJjZfYsJMWRsRO2+uJmorDiv/VY=
Subject key identifier: 04:85:A3:45:2F:33:0B:1E:8B:CB:D1:B3:B4:49:F9:DE:5C:8B:56:E0
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 01A0432407FDFBD037009F4A433519FDACE7
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/BIWjRS8zCx6Ly9GztEn53lyLVuA.roa
Signing time: Thu 27 Aug 2026 12:13:49 +0000
ROA not before: Thu 27 Aug 2026 12:13:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211439
IP address blocks: 37.44.212.0/24 maxlen: 24
171.22.220.0/22 maxlen: 24
171.22.222.0/24 maxlen: 24
171.22.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:43:24:07:fd:fb:d0:37:00:9f:4a:43:35:19:fd:ac:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Aug 27 12:13:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0485a3452f330b1e8bcbd1b3b449f9de5c8b56e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:53:79:c1:0e:87:73:8b:a1:c4:3d:37:4c:76:
bb:5b:70:85:b7:8e:27:03:db:c0:10:44:ca:a0:90:
f3:82:61:16:40:0c:c0:72:69:25:60:02:d2:f5:60:
a4:f2:dc:9e:40:a4:77:aa:c9:0d:0d:1b:bb:49:3b:
dc:08:be:63:04:b6:05:cf:fc:02:eb:50:8f:ac:c8:
c4:cf:6f:e7:8a:e1:22:ce:26:73:81:8e:50:b4:67:
22:1c:8b:b8:6b:a6:52:7a:ef:41:b9:b8:6d:d2:07:
04:c8:c5:d7:a7:44:86:29:72:3b:08:48:43:da:47:
a3:e9:2f:8f:70:c1:d7:8b:31:99:7d:97:6d:fc:89:
bb:a9:0f:c4:cd:1a:6e:1c:d6:ee:09:9f:ad:57:e7:
7f:57:92:1d:28:d0:13:dd:d7:74:04:41:04:71:f9:
a2:a5:6c:9f:49:c7:ff:49:b4:73:bf:56:71:81:ca:
0e:a5:43:51:2a:a6:e8:bf:ef:58:1b:2a:93:2c:6d:
c5:67:c5:77:27:ff:90:48:f7:dd:43:1c:90:c8:17:
13:d1:c9:fb:83:bb:85:41:57:19:41:53:03:9e:75:
d2:b1:e4:5c:9b:3d:68:87:f3:e7:3e:45:9a:07:cc:
4c:32:ce:7e:9e:d0:22:51:60:41:0a:88:6f:70:33:
12:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:85:A3:45:2F:33:0B:1E:8B:CB:D1:B3:B4:49:F9:DE:5C:8B:56:E0
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/BIWjRS8zCx6Ly9GztEn53lyLVuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.212.0/24
171.22.220.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:d3:3f:f2:28:ff:2e:75:fe:27:03:83:0c:83:75:96:be:5c:
38:d4:28:4e:4a:40:12:fe:e4:47:b6:10:d8:c7:1e:a5:70:cb:
02:43:81:1f:98:f2:05:9e:3c:10:fa:65:95:5f:e8:90:47:e9:
8c:e9:8a:6f:47:0c:3e:b9:a6:6c:df:c3:0a:f8:ef:5e:84:cb:
b6:35:4b:07:33:dc:35:9f:66:2f:45:d1:cc:f4:b2:54:dd:ea:
c7:a8:b5:29:57:b1:79:9d:ac:90:ea:c7:9a:30:4f:b3:5e:c5:
c6:ab:2f:71:cf:cf:cf:a8:2b:1b:9a:4a:f1:4e:4f:da:2b:f8:
e9:68:0a:cc:7f:db:d3:a6:67:99:7b:2a:ac:f8:57:73:a1:29:
53:f1:4a:9c:af:02:87:de:9a:2b:ab:40:c5:a4:2b:c1:57:72:
87:54:1f:0e:1d:2e:83:87:43:d5:8f:42:44:d8:aa:36:02:2d:
c7:ce:28:fe:06:1b:35:6c:e8:fb:17:4c:1a:70:0e:c4:45:15:
6b:66:9d:4f:a6:d4:2b:4f:35:da:3f:fa:b3:c4:23:bd:60:7d:
cd:49:ac:e6:71:e9:aa:a2:48:7d:bb:64:be:a7:ab:16:7b:d0:
69:78:b9:a8:06:3f:fb:3c:1b:88:77:8a:2b:9e:ff:52:a4:34:
7d:65:62:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 17:43:41 2026 by rpki-client