Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/BNGsIBv7sWp2fOKlpI8C175vLlQ.roa
File: BNGsIBv7sWp2fOKlpI8C175vLlQ.roa (raw, json)
Hash identifier: eyM+s9WcByg+YY0/4Dp4QwuY5QeC3jXo3DV9x7QTm5Y=
Subject key identifier: 04:D1:AC:20:1B:FB:B1:6A:76:7C:E2:A5:A4:8F:02:D7:BE:6F:2E:54
Certificate issuer: /CN=b14aba8b60749393478e83c360e6cbd75d156f89
Certificate serial: 019D53A7E7B6ECB6C0F766C261000A08C00F
Authority key identifier: B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/BNGsIBv7sWp2fOKlpI8C175vLlQ.roa
Signing time: Fri 03 Apr 2026 14:03:25 +0000
ROA not before: Fri 03 Apr 2026 14:03:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210020
IP address blocks: 188.124.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:53:a7:e7:b6:ec:b6:c0:f7:66:c2:61:00:0a:08:c0:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14aba8b60749393478e83c360e6cbd75d156f89
Validity
Not Before: Apr 3 14:03:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04d1ac201bfbb16a767ce2a5a48f02d7be6f2e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b1:f0:a5:5e:30:47:e1:a5:b7:96:4c:2d:2c:
6e:e4:95:d6:d8:34:4d:bc:17:ad:71:bf:09:35:6d:
84:11:11:dd:e6:e9:0c:df:1b:71:c6:d5:03:53:eb:
20:ea:6e:00:2d:38:f1:90:c3:1d:79:08:df:fd:15:
a0:23:68:ce:26:98:82:05:8c:47:4c:8d:e8:70:fd:
32:50:87:95:1b:6a:27:5f:7b:c9:87:68:d1:ba:1f:
9e:b5:80:eb:ce:c3:b0:65:8e:89:ec:88:1b:68:d5:
7a:61:b6:3d:f3:0c:86:03:6b:d3:cb:9a:13:05:84:
13:00:28:a6:82:6e:b8:c2:a3:d0:3f:8f:34:94:b7:
3d:c7:04:36:6c:69:ba:ae:ee:5b:55:7c:c3:53:3e:
93:90:ca:89:8c:7a:44:fb:b1:dd:2b:4a:f8:5a:85:
88:2d:c1:83:e4:4f:3a:f3:78:3a:ac:83:a1:ea:43:
ec:77:6f:16:98:43:84:5f:a0:de:b2:60:67:f9:f6:
db:0d:bc:4d:a0:67:86:4e:41:e6:9a:7f:8a:ec:ab:
e6:be:74:0a:40:64:a1:1b:ff:8f:46:d2:68:74:48:
b6:a1:a3:87:41:b2:9d:6a:b8:2f:46:65:eb:32:5a:
d5:18:50:4b:a3:d9:45:d3:1d:92:f0:f5:76:81:20:
32:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D1:AC:20:1B:FB:B1:6A:76:7C:E2:A5:A4:8F:02:D7:BE:6F:2E:54
X509v3 Authority Key Identifier:
keyid:B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/BNGsIBv7sWp2fOKlpI8C175vLlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.124.5.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:b7:a3:74:9d:a8:bc:f8:fe:65:4f:f8:d5:ec:b0:64:ec:92:
c2:ab:27:09:e5:22:d8:19:24:44:b1:c8:86:1a:3a:09:e2:41:
53:b0:3a:34:8e:75:9b:b7:26:2d:7d:99:17:41:7a:ad:09:54:
6e:81:28:4e:d6:e8:f4:b8:4e:54:fb:c3:ee:78:20:f5:50:54:
df:47:86:76:07:7d:bf:ff:9c:cc:74:d1:b3:34:5c:b5:00:c9:
ca:3a:13:f5:b2:6b:1f:6e:68:73:4e:13:20:da:fd:a6:b1:ba:
ff:d6:fa:6a:23:9d:a3:d7:89:eb:a0:d5:a7:c5:76:ec:59:a2:
51:e5:54:ea:b5:18:cc:77:30:ce:bc:52:9a:a5:82:f1:7e:ff:
6d:65:35:83:e7:02:56:03:75:a0:18:92:e1:ff:cd:79:2f:6f:
98:62:d0:ea:64:65:0d:48:3b:6c:ee:0f:34:c1:58:92:dc:2a:
a3:bf:c1:cd:04:8a:d6:52:af:fc:37:34:c3:74:b6:81:b6:11:
c6:52:36:75:90:a8:44:d7:7f:f5:b4:00:c3:aa:e4:ad:78:6b:
b8:03:f6:f6:98:1f:f8:c4:4e:6e:f7:7f:4b:f2:27:4b:27:03:
1a:a0:58:02:12:a2:25:53:c9:dd:01:df:94:ab:9a:73:94:8e:
33:58:ef:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:07:50 2026 by rpki-client