Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/BXh1_7ZwwX9FK_kCdM8cK1jRIS8.roa
File: BXh1_7ZwwX9FK_kCdM8cK1jRIS8.roa (raw, json)
Hash identifier: oL6ATaXHok6dXRyVcGy31NPIs9A817C4bEdadPAJet0=
Subject key identifier: 05:78:75:FF:B6:70:C1:7F:45:2B:F9:02:74:CF:1C:2B:58:D1:21:2F
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 019F36879934197953B286FEEF4E59F62D64
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/BXh1_7ZwwX9FK_kCdM8cK1jRIS8.roa
Signing time: Mon 06 Jul 2026 08:24:43 +0000
ROA not before: Mon 06 Jul 2026 08:24:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 2.58.99.0/24 maxlen: 24
91.240.33.0/24 maxlen: 24
109.196.104.0/24 maxlen: 24
109.196.106.0/24 maxlen: 24
109.196.107.0/24 maxlen: 24
109.196.108.0/24 maxlen: 24
109.196.109.0/24 maxlen: 24
176.101.57.0/24 maxlen: 24
176.101.61.0/24 maxlen: 24
176.101.62.0/24 maxlen: 24
176.101.63.0/24 maxlen: 24
213.109.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:87:99:34:19:79:53:b2:86:fe:ef:4e:59:f6:2d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jul 6 08:24:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=057875ffb670c17f452bf90274cf1c2b58d1212f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fa:ed:4e:12:f4:83:8d:b1:d3:50:3f:57:f7:
b0:52:ac:bc:28:f6:f8:c6:6f:18:50:c6:16:53:2c:
82:d8:ef:d7:12:01:61:7d:13:dc:26:e4:e5:c2:2e:
47:60:32:6f:e3:b4:20:d6:bb:5e:45:df:54:93:af:
a3:b3:52:ea:61:1b:31:44:5d:86:bd:17:db:15:67:
32:59:ce:c2:34:7c:73:7e:44:c4:36:c5:b4:72:77:
b1:44:7b:86:f7:0a:0b:0c:7a:a5:c4:44:4a:7d:56:
6f:fd:1c:d1:e7:ab:d1:0d:c4:95:39:7d:dd:e7:62:
cc:8d:4f:f6:ce:dc:95:75:1e:2c:36:bf:27:ff:95:
cf:1f:6d:c1:c4:46:98:56:51:7a:a8:01:96:a6:f6:
43:2f:17:c7:1f:6c:22:a0:e9:d0:66:9f:b0:01:b8:
ef:9f:94:d3:b3:32:15:59:38:42:01:92:d4:9a:3f:
55:9a:ee:44:5e:1c:91:53:6e:8b:b8:e2:83:87:ed:
7d:ed:5c:a9:7d:c2:54:7a:50:96:64:58:e5:23:30:
13:8a:a8:e2:ce:40:b6:69:05:63:5e:0f:95:d7:b7:
6e:97:f4:ee:9f:82:c1:eb:cc:1a:21:05:07:3f:ff:
9f:6f:0f:f9:4e:aa:84:6c:ed:86:14:ca:fa:9a:30:
b1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:78:75:FF:B6:70:C1:7F:45:2B:F9:02:74:CF:1C:2B:58:D1:21:2F
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/BXh1_7ZwwX9FK_kCdM8cK1jRIS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.99.0/24
91.240.33.0/24
109.196.104.0/24
109.196.106.0-109.196.109.255
176.101.57.0/24
176.101.61.0-176.101.63.255
213.109.111.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:f5:66:80:7e:ff:b2:47:28:ed:0e:99:15:75:15:af:b5:d8:
b0:5f:07:4b:ab:88:2b:f1:f2:ed:83:42:3d:36:51:0c:9f:43:
d1:ef:21:e4:b8:8e:6c:93:01:ab:a4:de:84:ba:95:60:98:0b:
e6:3c:a7:f7:44:1e:1e:a5:c3:13:3d:6a:bf:44:38:8b:a3:80:
e7:62:0b:88:62:16:42:b3:4b:63:56:5c:7a:25:65:39:63:9e:
81:9c:2d:61:24:07:35:68:0f:9e:0c:93:af:4b:d1:7f:23:c0:
d6:73:94:c2:20:6d:07:65:40:40:88:58:fb:ce:c9:c0:dd:f6:
8d:87:e4:db:90:32:aa:f3:33:30:a6:ee:22:86:5e:e4:fa:9e:
87:f4:8e:6b:d6:ae:ec:27:46:ba:d2:b2:cc:9a:1f:e9:27:0b:
10:b2:a1:0b:5a:d5:ed:19:7a:82:2e:6c:da:83:86:f5:ac:d5:
41:d2:33:84:8d:aa:fc:0f:44:dc:ee:e7:ad:1f:ea:ba:32:1c:
84:46:24:9a:d9:05:a7:27:c8:78:2f:ce:32:e2:86:5d:98:37:
24:4a:cb:19:4f:90:ca:d4:4a:7e:f6:14:01:e1:5f:23:f0:ff:
09:8b:38:1d:09:4c:9c:be:bc:14:26:98:14:ed:00:3f:09:a7:
3e:99:47:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:23 2026 by rpki-client