Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/BBMCp3XI6fUPNGiFtfO0986n1Ko.roa
File: BBMCp3XI6fUPNGiFtfO0986n1Ko.roa (raw, json)
Hash identifier: qMZxyeEgLDpsgSqlkuooSlzn2+QDVRPYCvdIlrpHAto=
Subject key identifier: 04:13:02:A7:75:C8:E9:F5:0F:34:68:85:B5:F3:B4:F7:CE:A7:D4:AA
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 019D3E56520011AF641AF55DB4C02BD30D71
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/BBMCp3XI6fUPNGiFtfO0986n1Ko.roa
Signing time: Mon 30 Mar 2026 10:42:17 +0000
ROA not before: Mon 30 Mar 2026 10:42:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208518
IP address blocks: 45.141.61.0/24 maxlen: 24
193.109.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3e:56:52:00:11:af:64:1a:f5:5d:b4:c0:2b:d3:0d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Mar 30 10:42:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=041302a775c8e9f50f346885b5f3b4f7cea7d4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2e:2b:40:7d:7f:81:9f:45:e8:78:0c:0a:51:
64:13:f6:ec:67:96:36:55:5d:f3:c8:6f:de:fb:72:
15:09:f9:96:79:72:cc:40:1a:f9:1c:41:59:81:04:
d6:76:a1:e2:78:f9:18:28:6e:dc:db:db:f6:22:20:
f1:ad:e4:87:df:23:c7:2b:ec:7d:a5:ec:a7:83:51:
2a:42:fc:91:23:a0:64:2c:da:1f:d9:7f:dd:6e:0e:
61:d4:65:ec:3b:d6:a5:cc:ea:4c:f3:37:59:cf:29:
26:47:f7:42:6e:fc:44:2a:ec:39:21:1d:8c:3b:58:
ad:50:5f:46:f1:fc:90:aa:96:a3:b8:a0:cc:53:09:
22:79:90:c2:83:d4:3a:15:02:2e:c7:91:28:09:2f:
99:97:52:d7:7a:94:85:ad:e5:f4:40:e4:be:61:bf:
ef:a5:19:4c:ed:4e:ca:03:7e:46:3f:31:c2:75:93:
9a:7f:44:0f:70:de:75:16:d0:df:77:06:36:e6:8b:
79:ca:82:a5:5b:09:70:f6:9b:7a:c3:80:9f:89:08:
85:c3:10:3d:02:26:11:9b:8d:6a:6a:b7:13:be:f6:
a9:73:cf:85:54:ec:5d:db:fd:8f:91:ee:b0:08:ef:
ea:cb:04:95:45:02:fd:f1:6f:4b:f0:d3:c5:78:7e:
0c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:13:02:A7:75:C8:E9:F5:0F:34:68:85:B5:F3:B4:F7:CE:A7:D4:AA
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/BBMCp3XI6fUPNGiFtfO0986n1Ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.61.0/24
193.109.136.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:87:6c:80:eb:ff:54:4d:e4:38:3b:dc:fc:93:ca:1c:97:5b:
83:d0:7c:86:9d:14:88:3d:cd:42:b5:14:ad:07:17:72:ea:4d:
c5:82:20:df:86:3a:2c:45:ac:a9:30:ee:a3:88:07:72:65:aa:
20:b5:f9:4c:6d:be:a6:61:aa:ec:79:bf:43:03:0d:b4:0b:ef:
6b:11:8d:f6:de:f9:d8:fc:b0:b5:0e:26:a5:be:83:60:65:29:
62:8a:29:ce:00:4a:88:06:15:60:11:cf:63:3d:0f:bd:c3:80:
ba:59:0c:3f:43:bf:e0:cb:ec:fe:e5:65:9b:42:e9:82:cc:cf:
40:8d:b2:18:90:ae:e3:63:13:6b:0e:be:75:58:80:e6:b4:5b:
6a:79:45:47:03:14:72:6a:6b:10:2b:80:a3:2d:73:16:dc:46:
f6:27:33:09:bb:f0:52:3b:ce:ff:71:6d:31:26:b3:22:1f:14:
4b:f0:ff:dc:e4:33:76:05:57:9f:80:df:d9:2b:46:d1:da:35:
81:4f:7a:5a:e5:fc:ac:58:9b:ca:c8:b1:e7:13:83:08:6f:2b:
73:7e:5e:4f:75:8f:f2:15:78:bc:29:34:d8:91:bd:d9:18:3c:
22:76:89:03:08:b9:91:5c:35:82:6b:5c:32:4e:af:24:96:4d:
a9:f2:c6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:58:26 2026 by rpki-client