Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/BJEVa_aX9GRfgBGuldqxrBW_ggU.roa
File: BJEVa_aX9GRfgBGuldqxrBW_ggU.roa (raw, json)
Hash identifier: yxFSDsFQ1W994H/MWEZPZMlBkPI/Yd+y9utpq4Nr9O8=
Subject key identifier: 04:91:15:6B:F6:97:F4:64:5F:80:11:AE:95:DA:B1:AC:15:BF:82:05
Certificate issuer: /CN=42cf4a128d09dfc4b8b035a12cd831f9f7b01469
Certificate serial: 019B7A5B7FDE2949F748C90FFEE474ADBBB0
Authority key identifier: 42:CF:4A:12:8D:09:DF:C4:B8:B0:35:A1:2C:D8:31:F9:F7:B0:14:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs9KEo0J38S4sDWhLNgx-fewFGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/BJEVa_aX9GRfgBGuldqxrBW_ggU.roa
Signing time: Thu 01 Jan 2026 16:19:35 +0000
ROA not before: Thu 01 Jan 2026 16:19:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209380
IP address blocks: 45.67.152.0/24 maxlen: 24
45.67.153.0/24 maxlen: 24
45.67.154.0/24 maxlen: 24
45.67.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs9KEo0J38S4sDWhLNgx-fewFGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5b:7f:de:29:49:f7:48:c9:0f:fe:e4:74:ad:bb:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42cf4a128d09dfc4b8b035a12cd831f9f7b01469
Validity
Not Before: Jan 1 16:19:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0491156bf697f4645f8011ae95dab1ac15bf8205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3c:fc:40:d7:65:87:ea:18:7d:ff:8b:00:9c:
ff:e4:83:9f:6d:18:25:2a:33:57:5a:6d:24:0c:bf:
f6:f3:77:bb:03:fc:d5:e5:2f:31:9c:f4:df:49:6e:
0f:4e:d0:90:f9:31:ef:f3:84:c4:46:96:99:02:3e:
71:6b:35:b3:dd:f7:84:e9:55:74:d0:9a:8b:d6:09:
b4:df:37:3a:61:a7:84:f8:d2:61:5d:63:c2:52:e1:
09:ec:46:b9:80:f2:ce:a0:93:a1:65:3c:b7:e0:4b:
60:cd:e3:e5:1b:aa:8d:df:4e:34:ff:9f:f9:c0:a5:
d0:de:76:68:f7:3b:33:e3:0f:3e:40:57:be:77:af:
84:2d:4a:c9:5a:21:d1:c6:bf:f5:db:9f:f0:4d:01:
3c:be:83:30:1b:f8:7b:15:a9:c2:2e:9f:43:4e:d5:
7b:74:04:60:e1:be:4c:9f:be:12:9a:60:10:0f:98:
f6:1d:97:1b:27:5e:b5:80:6d:63:72:ee:ff:96:6b:
0d:ed:1c:ff:eb:c1:4b:bd:21:02:5c:8d:71:12:81:
21:08:96:f7:b6:7c:eb:94:99:3c:b0:72:87:a9:dd:
fa:6d:12:0d:cb:3b:67:22:f4:c9:a4:90:99:d0:8a:
ba:21:64:55:a3:36:ec:c4:8d:77:45:39:6e:32:a9:
89:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:91:15:6B:F6:97:F4:64:5F:80:11:AE:95:DA:B1:AC:15:BF:82:05
X509v3 Authority Key Identifier:
keyid:42:CF:4A:12:8D:09:DF:C4:B8:B0:35:A1:2C:D8:31:F9:F7:B0:14:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs9KEo0J38S4sDWhLNgx-fewFGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/BJEVa_aX9GRfgBGuldqxrBW_ggU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.152.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:c0:5a:5b:cf:44:a3:e9:b7:e8:38:42:ea:fe:41:c4:75:fe:
9c:18:da:b6:4d:5c:70:06:d0:72:c2:be:3d:d0:01:91:59:5e:
a1:b4:09:f3:23:85:ce:85:51:50:e0:56:50:8a:e2:1b:c4:ee:
f6:2a:9d:96:6d:68:02:f4:46:89:8b:b4:5e:4b:62:64:e6:f3:
7a:cf:a8:eb:50:29:4f:27:c1:20:bc:df:13:71:e2:93:eb:cf:
27:25:5b:ea:80:35:ba:ed:23:eb:4f:4c:f7:ae:96:8e:28:84:
0d:4b:9c:87:a9:bc:14:8a:1d:c6:b2:68:51:30:55:27:08:3d:
be:96:22:ab:a0:07:9e:6c:e0:fa:81:08:af:9c:25:45:09:94:
5b:73:52:0e:8c:bb:bb:62:fe:46:32:5a:24:ba:f0:7f:5a:47:
c2:4d:7e:8c:26:de:6b:91:47:a9:94:64:0e:c2:54:1d:92:ad:
f9:7d:5a:98:7c:53:4b:40:e3:cc:5b:1f:fd:00:4f:76:1c:63:
1b:00:d1:51:88:7a:85:3b:bb:98:e1:2d:36:64:a8:07:75:b2:
a7:36:78:ec:14:a7:19:35:ab:36:06:c5:c5:43:ec:0c:56:5f:
6e:3d:2d:c6:ea:96:3f:b9:1e:c8:91:03:da:67:ba:a6:85:d7:
3f:8f:aa:c5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt6W3/eKUn3SMkP/uR0rbuwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyY2Y0YTEyOGQwOWRmYzRiOGIwMzVhMTJjZDgzMWY5Zjdi
MDE0NjkwHhcNMjYwMTAxMTYxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDkxMTU2YmY2OTdmNDY0NWY4MDExYWU5NWRhYjFhYzE1YmY4MjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTz8QNdlh+oYff+LAJz/5IOfbRgl
KjNXWm0kDL/283e7A/zV5S8xnPTfSW4PTtCQ+THv84TERpaZAj5xazWz3feE6VV0
0JqL1gm03zc6YaeE+NJhXWPCUuEJ7Ea5gPLOoJOhZTy34EtgzePlG6qN3040/5/5
wKXQ3nZo9zsz4w8+QFe+d6+ELUrJWiHRxr/125/wTQE8voMwG/h7FanCLp9DTtV7
dARg4b5Mn74SmmAQD5j2HZcbJ161gG1jcu7/lmsN7Rz/68FLvSECXI1xEoEhCJb3
tnzrlJk8sHKHqd36bRINyztnIvTJpJCZ0Iq6IWRVozbsxI13RTluMqmJjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFASRFWv2l/RkX4ARrpXasawVv4IFMB8GA1UdIwQY
MBaAFELPShKNCd/EuLA1oSzYMfn3sBRpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXM5S0VvMEozOFM0c0RXaExOZ3gtZmV3RkdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC81ZGE3MjktYmEyNi00ZmRhLTkwMTEt
MGIwNDM3NWY5YjM2LzEvQkpFVmFfYVg5R1JmZ0JHdWxkcXhyQldfZ2dVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC81ZGE3MjktYmEyNi00ZmRhLTkwMTEtMGIwNDM3NWY5YjM2
LzEvUXM5S0VvMEozOFM0c0RXaExOZ3gtZmV3RkdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLUOYMA0G
CSqGSIb3DQEBCwUAA4IBAQAcwFpbz0Sj6bfoOELq/kHEdf6cGNq2TVxwBtBywr49
0AGRWV6htAnzI4XOhVFQ4FZQiuIbxO72Kp2WbWgC9EaJi7ReS2Jk5vN6z6jrUClP
J8EgvN8TceKT688nJVvqgDW67SPrT0z3rpaOKIQNS5yHqbwUih3GsmhRMFUnCD2+
liKroAeebOD6gQivnCVFCZRbc1IOjLu7Yv5GMlokuvB/WkfCTX6MJt5rkUeplGQO
wlQdkq35fVqYfFNLQOPMWx/9AE92HGMbANFRiHqFO7uY4S02ZKgHdbKnNnjsFKcZ
Nas2BsXFQ+wMVl9uPS3G6pY/uR7IkQPaZ7qmhdc/j6rF
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:56:14 2026 by rpki-client