Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/BKZ4AiIR4HJymEbg7yBDaPjsNEc.roa
File: BKZ4AiIR4HJymEbg7yBDaPjsNEc.roa (raw, json)
Hash identifier: NSmqFNuVNWWHUV4DP4w7GZulXixMLjJyMk9Zl8PMqNA=
Subject key identifier: 04:A6:78:02:22:11:E0:72:72:98:46:E0:EF:20:43:68:F8:EC:34:47
Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Certificate serial: 01A0A744A13B046754B17D4CBD073403A1A6
Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/BKZ4AiIR4HJymEbg7yBDaPjsNEc.roa
Signing time: Tue 15 Sep 2026 22:51:27 +0000
ROA not before: Tue 15 Sep 2026 22:51:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 5.253.184.0/23 maxlen: 23
45.81.161.0/24 maxlen: 24
45.81.163.0/24 maxlen: 24
45.130.33.0/24 maxlen: 24
45.130.34.0/23 maxlen: 23
88.214.0.0/24 maxlen: 24
88.214.1.0/24 maxlen: 24
88.214.2.0/24 maxlen: 24
88.214.3.0/24 maxlen: 24
88.218.197.0/24 maxlen: 24
88.218.198.0/24 maxlen: 24
88.218.199.0/24 maxlen: 24
185.114.204.0/24 maxlen: 24
185.219.160.0/24 maxlen: 24
185.219.161.0/24 maxlen: 24
193.111.184.0/22 maxlen: 22
193.135.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a7:44:a1:3b:04:67:54:b1:7d:4c:bd:07:34:03:a1:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Validity
Not Before: Sep 15 22:51:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04a678022211e072729846e0ef204368f8ec3447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2a:fb:79:04:25:1c:d8:5a:4e:91:f3:81:84:
b8:6c:24:b4:6c:b4:f0:f1:a7:df:7c:65:2a:f6:9b:
9c:6b:98:a0:d3:a1:41:00:9d:d7:e6:b3:24:1d:b4:
79:ea:ef:7e:ce:cb:6f:ae:ce:d8:a3:d0:91:f7:4f:
dc:e0:7f:c1:01:77:cc:8e:13:af:e7:d8:c1:fe:a4:
df:b3:fd:f1:33:a0:2a:59:a0:e9:1a:7c:ec:6d:ee:
3c:e5:55:bf:5a:1c:f9:38:0f:a3:fd:86:02:81:6b:
ac:fe:df:ad:dd:f9:1a:72:d8:44:7f:0b:a0:8e:28:
41:f7:54:da:5f:e8:6f:b4:e5:a0:80:9b:48:28:e5:
3f:8b:68:a8:3b:f0:0e:c7:43:72:15:a4:9c:d2:8b:
ca:b2:32:47:fa:71:e9:26:01:59:a6:40:31:df:6b:
18:6e:06:14:9d:ce:cb:9f:d7:bd:83:fb:34:e0:5b:
8b:ae:90:ca:6a:8c:43:ea:f8:39:20:7c:70:5e:92:
66:8f:53:1d:36:cb:7a:03:11:f7:fd:21:e5:e7:6b:
6e:82:ba:eb:61:ae:27:a3:70:6a:1e:3d:bc:a6:90:
f1:17:69:c9:80:74:7c:8b:e6:bb:7b:18:3a:3b:ce:
17:ab:17:76:02:96:29:48:47:0d:3a:75:c6:27:a9:
a3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A6:78:02:22:11:E0:72:72:98:46:E0:EF:20:43:68:F8:EC:34:47
X509v3 Authority Key Identifier:
keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/BKZ4AiIR4HJymEbg7yBDaPjsNEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.184.0/23
45.81.161.0/24
45.81.163.0/24
45.130.33.0-45.130.35.255
88.214.0.0/22
88.218.197.0-88.218.199.255
185.114.204.0/24
185.219.160.0/23
193.111.184.0/22
193.135.220.0/22
Signature Algorithm: sha256WithRSAEncryption
79:7a:29:5d:44:48:29:d3:d0:40:8f:5b:1d:13:da:02:bc:ae:
81:60:d4:5f:2c:98:d0:bb:f2:3f:5b:43:02:73:23:ff:d8:f2:
23:6e:fc:26:f0:42:ab:0c:ab:6f:98:53:18:f3:e7:57:e3:f0:
e2:ec:7f:ea:d0:40:32:53:a2:55:3c:04:79:84:d2:5a:0e:19:
1a:af:70:66:0d:a1:77:25:81:69:48:a8:25:90:42:f9:db:28:
b3:a7:75:32:69:4f:5c:68:f5:e1:99:53:9d:0d:aa:da:7c:ff:
51:23:5a:57:af:24:ad:2e:20:ac:96:14:21:ed:cd:a3:d6:a8:
f3:f2:ff:ee:66:49:fe:7f:b2:b6:56:a7:67:59:6a:e1:ac:fc:
af:b2:62:d6:91:5c:24:69:47:35:14:d6:ef:51:cc:61:cc:18:
f8:1d:ff:dd:00:f5:19:38:e2:99:47:b7:d3:e5:8d:c5:f4:57:
1c:be:5c:7f:ba:47:9b:6c:aa:84:1c:71:5f:6d:9c:95:01:ca:
55:cd:b8:12:08:6c:48:25:4a:68:eb:01:86:1b:80:1a:4d:1c:
08:41:10:64:51:5c:57:af:5c:8e:18:cf:88:94:5f:25:b1:7c:
81:91:ea:45:95:82:44:af:99:5d:5a:4c:50:30:b5:21:ae:11:
d9:3d:01:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:03:44 2026 by rpki-client