Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/BnDaXn6JXgpX35DdVWmNALLjVsg.roa
File: BnDaXn6JXgpX35DdVWmNALLjVsg.roa (raw, json)
Hash identifier: X0eAvfAtk6gZOJ4XQkS/7CStvPQE5JyER3BxoLKJHGo=
Subject key identifier: 06:70:DA:5E:7E:89:5E:0A:57:DF:90:DD:55:69:8D:00:B2:E3:56:C8
Certificate issuer: /CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Certificate serial: 01A1084967697BC8ABA60C5927B69267E3BA
Authority key identifier: 8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/BnDaXn6JXgpX35DdVWmNALLjVsg.roa
Signing time: Sun 04 Oct 2026 18:59:50 +0000
ROA not before: Sun 04 Oct 2026 18:59:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218953
IP address blocks: 45.158.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 21:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:49:67:69:7b:c8:ab:a6:0c:59:27:b6:92:67:e3:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Validity
Not Before: Oct 4 18:59:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0670da5e7e895e0a57df90dd55698d00b2e356c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b0:be:03:1b:c7:9f:95:dd:71:52:46:fd:91:
ad:70:6f:99:9a:85:de:2e:d3:d3:4a:ad:b3:1b:4d:
be:8f:c3:1d:0f:b9:51:c4:46:30:63:9a:37:dc:41:
cf:be:07:fd:8d:e8:ac:03:1f:a2:3b:cc:8a:d2:4d:
39:7f:5e:44:60:c8:8f:22:ec:2c:92:96:6b:4a:c7:
a3:d4:a7:28:73:cf:dd:ce:e7:70:e3:dc:ae:79:69:
30:97:7c:51:0d:57:3c:ff:c5:64:c7:b8:9d:4c:70:
a1:49:11:d0:34:c8:ca:7d:72:5a:70:18:d3:2a:52:
d2:50:4a:06:18:7e:01:08:4d:0b:1f:38:a3:24:92:
19:e7:e1:19:3e:91:2c:75:36:1f:f7:f7:70:0c:fc:
16:85:d8:5a:0d:34:ac:49:08:52:34:e8:9a:7f:43:
51:a6:a5:0e:7e:53:97:17:7c:85:3c:5b:02:b8:f3:
2d:4b:9a:8b:de:1e:55:74:1a:2e:d1:be:99:17:b6:
5e:6b:d2:8a:59:78:c5:4e:cf:a7:22:41:2a:07:4a:
98:15:ac:74:a2:ba:9b:c6:89:88:bc:8d:c2:97:fd:
b1:da:0f:63:97:a0:58:1f:a6:13:c0:65:20:04:4b:
0d:95:a0:4a:af:81:2e:b7:38:d2:98:58:ac:c7:15:
13:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:70:DA:5E:7E:89:5E:0A:57:DF:90:DD:55:69:8D:00:B2:E3:56:C8
X509v3 Authority Key Identifier:
keyid:8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/BnDaXn6JXgpX35DdVWmNALLjVsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.137.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:9c:eb:94:0c:d7:fa:5c:22:7d:98:8e:db:d1:d3:af:32:dc:
cf:7b:c0:59:6d:ef:88:9f:80:3f:f4:e6:7e:02:ba:89:8f:10:
01:37:17:f7:c8:72:1e:00:68:0e:ad:ad:4c:15:ab:18:45:c0:
4e:38:05:26:c4:c0:30:df:2d:05:1d:a3:93:57:d3:04:2e:50:
39:f1:e9:cd:d5:c7:1c:93:9d:6d:74:7f:8b:2b:09:1c:df:2f:
7f:f0:be:98:6a:ea:16:d0:c2:92:14:6c:bc:eb:77:81:99:9a:
22:04:73:1a:17:74:d1:4c:14:c9:e3:45:3f:95:0a:a1:c6:96:
07:9b:9d:bb:55:70:4d:e4:65:d1:39:9d:ee:f3:8d:ad:72:a1:
47:ae:b4:cd:50:b8:e9:f2:c0:c7:76:52:01:69:46:81:7f:4b:
f6:38:c0:05:bd:2d:2c:82:a6:ae:07:df:4a:90:3b:ff:3b:90:
1c:bc:5b:01:25:14:87:91:5c:fd:41:a4:57:d5:44:68:9a:4b:
59:35:0f:67:20:d3:47:00:ef:e8:bf:94:f5:a5:d1:be:4d:a2:
3f:fe:32:72:a4:a6:01:f3:a4:ed:2b:e0:c4:07:cb:dd:a9:df:
7a:b8:95:c0:3c:98:ac:a2:c4:cd:77:e6:55:84:a5:57:2e:7f:
fe:4d:03:19
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaEISWdpe8irpgxZJ7aSZ+O6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYjEzMDhjNmE5NzdkNWNiOTAzYmYyNWE5NjMwOGIwZThj
ZTNiNDYwHhcNMjYxMDA0MTg1OTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjcwZGE1ZTdlODk1ZTBhNTdkZjkwZGQ1NTY5OGQwMGIyZTM1NmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07C+AxvHn5XdcVJG/ZGtcG+ZmoXe
LtPTSq2zG02+j8MdD7lRxEYwY5o33EHPvgf9jeisAx+iO8yK0k05f15EYMiPIuws
kpZrSsej1Kcoc8/dzudw49yueWkwl3xRDVc8/8Vkx7idTHChSRHQNMjKfXJacBjT
KlLSUEoGGH4BCE0LHzijJJIZ5+EZPpEsdTYf9/dwDPwWhdhaDTSsSQhSNOiaf0NR
pqUOflOXF3yFPFsCuPMtS5qL3h5VdBou0b6ZF7Zea9KKWXjFTs+nIkEqB0qYFax0
orqbxomIvI3Cl/2x2g9jl6BYH6YTwGUgBEsNlaBKr4EutzjSmFisxxUTpwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAZw2l5+iV4KV9+Q3VVpjQCy41bIMB8GA1UdIwQY
MBaAFIuxMIxql31cuQO/JaljCLDozjtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTdFd2pHcVhmVnk1QTc4bHFXTUlzT2pPTzBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83NzY2ODEtYjVlZS00MzBmLTg2OTMt
MTAxYWJkNzM5MWE2LzEvQm5EYVhuNkpYZ3BYMzVEZFZXbU5BTExqVnNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy83NzY2ODEtYjVlZS00MzBmLTg2OTMtMTAxYWJkNzM5MWE2
LzEvaTdFd2pHcVhmVnk1QTc4bHFXTUlzT2pPTzBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ6JMA0G
CSqGSIb3DQEBCwUAA4IBAQCLnOuUDNf6XCJ9mI7b0dOvMtzPe8BZbe+In4A/9OZ+
ArqJjxABNxf3yHIeAGgOra1MFasYRcBOOAUmxMAw3y0FHaOTV9MELlA58enN1ccc
k51tdH+LKwkc3y9/8L6YauoW0MKSFGy863eBmZoiBHMaF3TRTBTJ40U/lQqhxpYH
m527VXBN5GXROZ3u842tcqFHrrTNULjp8sDHdlIBaUaBf0v2OMAFvS0sgqauB99K
kDv/O5AcvFsBJRSHkVz9QaRX1URomktZNQ9nINNHAO/ov5T1pdG+TaI//jJypKYB
86TtK+DEB8vdqd96uJXAPJisosTNd+ZVhKVXLn/+TQMZ
-----END CERTIFICATE-----
Generated at Tue Oct 13 04:32:04 2026 by rpki-client