Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Bof9PnMSTo1lOct5GDM94SPzcL4.roa
File: Bof9PnMSTo1lOct5GDM94SPzcL4.roa (raw, json)
Hash identifier: W5+5wBJEIoBnQpyWRogq7T54AFODthy+gGaXTGQVKNA=
Subject key identifier: 06:87:FD:3E:73:12:4E:8D:65:39:CB:79:18:33:3D:E1:23:F3:70:BE
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A115CF08D6F85E2DF1B0136F8A06CC2EEA
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Bof9PnMSTo1lOct5GDM94SPzcL4.roa
Signing time: Wed 07 Oct 2026 10:00:51 +0000
ROA not before: Wed 07 Oct 2026 10:00:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58057
IP address blocks: 45.136.137.0/24 maxlen: 24
45.136.139.0/24 maxlen: 24
193.33.94.0/23 maxlen: 24
193.163.86.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
2a04:ccc0:ffff::/48 maxlen: 48
2a04:ccc1::/32 maxlen: 48
2a04:ccc3::/32 maxlen: 48
2a04:ccc4::/32 maxlen: 48
2a04:ccc5::/32 maxlen: 48
2a04:ccc6::/32 maxlen: 48
2a04:ccc7::/32 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a0c:3b80::/32 maxlen: 48
2a0c:3b81::/32 maxlen: 48
2a0c:3b82::/32 maxlen: 48
2a0c:3b83::/32 maxlen: 48
2a0c:3b84::/32 maxlen: 48
2a0c:3b85::/32 maxlen: 48
2a0c:3b86::/32 maxlen: 48
2a0e:b107:1165::/48 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a10:2f00:18d::/48 maxlen: 48
2a10:2f00:18f::/48 maxlen: 48
2a10:2f00:193::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:cf:08:d6:f8:5e:2d:f1:b0:13:6f:8a:06:cc:2e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 7 10:00:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0687fd3e73124e8d6539cb7918333de123f370be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:78:a7:c1:17:19:46:e2:0d:97:69:1c:fd:84:
ff:1a:61:de:b1:c4:78:e4:70:f9:51:56:4b:df:72:
28:08:25:42:a1:b7:71:a4:ea:7a:b7:8b:55:35:a8:
32:aa:a4:3a:ef:9c:24:6c:ab:07:d6:39:c9:bf:f4:
a4:55:ae:cf:f6:b8:1f:dc:e7:e5:bd:f9:52:89:ae:
06:19:64:3a:42:8f:86:04:33:0c:47:fc:0f:64:2d:
8e:c2:d6:88:5c:91:3b:86:47:d3:31:80:2f:4d:69:
20:e3:d7:71:3a:05:67:30:a5:e5:19:35:7d:f5:6f:
2c:66:69:d8:c8:64:0a:80:ab:f6:ec:e5:86:93:62:
05:3e:20:73:e0:76:ad:4d:71:39:e9:cc:22:6c:6c:
3f:45:e4:7a:62:3a:81:47:31:5e:f5:e4:6c:c1:d2:
20:11:65:a0:31:e7:9b:47:ad:d8:4b:89:15:65:23:
19:14:1e:30:8e:da:72:12:9d:86:a9:ce:c1:78:75:
57:d2:55:4d:11:89:08:0a:e8:3a:19:87:c8:06:62:
82:7d:0f:ae:ba:f2:8e:7d:9a:b2:35:93:7b:7c:df:
a0:51:8f:48:fe:86:3a:30:96:e1:54:fb:f6:2b:a3:
4e:63:39:84:13:99:39:05:e4:07:41:06:98:e8:83:
98:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:87:FD:3E:73:12:4E:8D:65:39:CB:79:18:33:3D:E1:23:F3:70:BE
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Bof9PnMSTo1lOct5GDM94SPzcL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.137.0/24
45.136.139.0/24
193.33.94.0/23
193.163.86.0/24
194.50.92.0/24
IPv6:
2a04:ccc0:ffff::-2a04:ccc1:ffff:ffff:ffff:ffff:ffff:ffff
2a04:ccc3::-2a04:ccc7:ffff:ffff:ffff:ffff:ffff:ffff
2a09:4c0::/29
2a0c:3b80::-2a0c:3b86:ffff:ffff:ffff:ffff:ffff:ffff
2a0e:b107:1165::/48
2a0f:e404:102::/48
2a10:2f00:18d::/48
2a10:2f00:18f::/48
2a10:2f00:193::/48
Signature Algorithm: sha256WithRSAEncryption
58:cd:3d:b1:96:6f:63:c3:5e:82:25:0e:3d:f0:13:b1:00:78:
e5:74:a8:db:0f:66:3e:a6:69:c0:d9:32:b6:19:fe:9e:0d:ef:
de:86:58:d9:ac:82:47:5c:2d:52:a4:b6:49:3b:7a:98:ac:5f:
8c:8e:9b:fa:37:84:df:fe:d2:3a:a0:18:7b:e4:14:69:1e:8f:
a3:d3:65:bc:b9:a9:70:e6:4a:03:c1:39:14:51:19:f8:4d:8a:
f1:df:fe:52:05:42:84:5a:0d:20:f7:7c:53:77:6b:3c:05:89:
b6:33:9c:45:37:f3:a3:a8:97:46:89:e5:81:33:52:15:61:da:
1b:4a:41:27:65:df:d3:2b:41:2d:7c:e4:dd:1d:2f:57:8f:6e:
b1:1b:b4:e7:0a:ab:b2:f9:28:4b:6e:96:69:23:15:98:03:84:
91:a1:e1:bc:77:90:34:d3:d0:c9:fc:ab:48:ac:37:2e:65:cb:
2e:80:65:b5:dc:5b:6c:3e:1c:07:c2:95:5b:c0:d1:a0:49:d9:
18:20:13:46:2c:4d:c7:43:f6:7e:7c:b8:98:a0:f5:00:d4:8c:
c9:cb:76:22:5b:83:57:fc:cc:a0:db:32:8b:03:fb:31:76:f6:
2e:1e:6e:fe:73:38:1a:da:fa:27:7c:4d:90:6a:50:4f:47:10:
cb:12:10:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:31:23 2026 by rpki-client