Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/BqP1D1MTayuyl6fnms2fcBgesf4.roa
File: BqP1D1MTayuyl6fnms2fcBgesf4.roa (raw, json)
Hash identifier: dYd+DJ2FY+lz4/blcm5DcV9UVMdwinMoVFhVD2PWLiw=
Subject key identifier: 06:A3:F5:0F:53:13:6B:2B:B2:97:A7:E7:9A:CD:9F:70:18:1E:B1:FE
Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Certificate serial: 019A53365DCD05B04C35AD6CCEBB81036E02
Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/BqP1D1MTayuyl6fnms2fcBgesf4.roa
Signing time: Wed 05 Nov 2025 08:51:03 +0000
ROA not before: Wed 05 Nov 2025 08:51:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48309
IP address blocks: 37.191.64.0/20 maxlen: 24
37.191.92.0/22 maxlen: 24
188.136.128.0/24 maxlen: 24
188.136.129.0/24 maxlen: 24
188.136.130.0/24 maxlen: 24
188.136.131.0/24 maxlen: 24
188.136.132.0/24 maxlen: 24
188.136.133.0/24 maxlen: 24
188.136.135.0/24 maxlen: 24
188.136.140.0/24 maxlen: 24
188.136.142.0/24 maxlen: 24
188.136.143.0/24 maxlen: 24
188.136.144.0/24 maxlen: 24
188.136.146.0/24 maxlen: 24
188.136.147.0/24 maxlen: 24
188.136.149.0/24 maxlen: 24
188.136.150.0/24 maxlen: 24
188.136.152.0/24 maxlen: 24
188.136.153.0/24 maxlen: 24
188.136.154.0/24 maxlen: 24
188.136.155.0/24 maxlen: 24
188.136.156.0/24 maxlen: 24
188.136.160.0/24 maxlen: 24
188.136.161.0/24 maxlen: 24
188.136.162.0/24 maxlen: 24
188.136.163.0/24 maxlen: 24
188.136.164.0/24 maxlen: 24
188.136.165.0/24 maxlen: 24
188.136.166.0/24 maxlen: 24
188.136.167.0/24 maxlen: 24
188.136.168.0/24 maxlen: 24
188.136.169.0/24 maxlen: 24
188.136.170.0/24 maxlen: 24
188.136.171.0/24 maxlen: 24
188.136.172.0/24 maxlen: 24
188.136.173.0/24 maxlen: 24
188.136.191.0/24 maxlen: 24
188.136.196.0/24 maxlen: 24
188.136.210.0/24 maxlen: 24
188.136.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 08:51:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:36:5d:cd:05:b0:4c:35:ad:6c:ce:bb:81:03:6e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1
Validity
Not Before: Nov 5 08:51:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=06a3f50f53136b2bb297a7e79acd9f70181eb1fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4e:0c:c9:5b:80:fa:cc:41:31:b0:df:20:a9:
11:8a:36:b7:cd:97:e0:7f:99:02:5b:81:f6:ce:ce:
3f:82:f4:77:04:93:fe:5b:d2:46:ee:fe:19:30:a5:
44:a8:e7:b4:33:74:58:77:41:c1:af:52:b8:f7:9b:
40:33:48:d7:d4:da:62:4f:d2:cf:c3:7f:6b:c5:8c:
0d:b4:29:28:ab:59:2e:27:66:1c:ac:7d:82:38:9b:
54:35:86:5c:45:2b:79:f6:10:56:86:67:99:62:c9:
11:16:e0:8a:1e:50:51:65:aa:18:45:ce:76:7e:c6:
35:26:0f:3b:4f:a6:ab:29:d6:7a:72:28:13:79:3a:
22:d8:71:15:2b:6c:e4:0c:cc:32:a8:b1:1a:07:0d:
1b:eb:0d:52:5e:d1:e9:3e:e8:a1:82:c2:67:7a:05:
83:ac:46:46:03:7c:63:e1:d3:86:fa:ec:11:4d:d9:
4c:0e:46:9b:86:2a:37:f6:e5:f9:ab:59:8b:32:3b:
7d:be:f9:63:67:90:4b:ff:0f:ed:ec:6a:7f:ff:fe:
d1:6f:ff:70:f2:fc:7b:8e:c4:70:3b:70:09:11:d4:
dd:69:f8:5d:8b:33:cb:b5:0c:3b:5f:5d:b0:fb:8f:
4c:fe:34:70:ad:5f:44:e4:1e:c7:fb:cc:e4:09:fa:
c2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A3:F5:0F:53:13:6B:2B:B2:97:A7:E7:9A:CD:9F:70:18:1E:B1:FE
X509v3 Authority Key Identifier:
keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/BqP1D1MTayuyl6fnms2fcBgesf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.191.64.0/20
37.191.92.0/22
188.136.128.0-188.136.133.255
188.136.135.0/24
188.136.140.0/24
188.136.142.0-188.136.144.255
188.136.146.0/23
188.136.149.0-188.136.150.255
188.136.152.0-188.136.156.255
188.136.160.0-188.136.173.255
188.136.191.0/24
188.136.196.0/24
188.136.210.0/23
Signature Algorithm: sha256WithRSAEncryption
19:b6:90:17:4e:73:16:88:de:ae:a1:12:68:74:27:a3:da:1a:
56:79:3e:18:01:db:ad:85:a1:8c:98:7f:fc:e2:25:cc:6d:5a:
31:64:75:44:61:37:a0:b0:6c:a0:11:92:f7:b7:5f:52:cd:2b:
2b:a8:34:5a:ef:43:e7:a6:fc:19:a9:aa:a0:f4:a4:a8:d8:dc:
6f:9b:2c:4e:60:70:39:e7:5f:12:e6:90:e9:6c:45:58:20:94:
81:dc:3d:00:6b:c1:54:f9:5d:cb:9f:8e:31:7e:dc:20:a4:c3:
4c:5e:86:be:e0:b5:fa:1c:43:2d:db:46:52:34:a9:06:ce:2c:
e4:61:e4:31:fa:7c:2c:a2:cd:dc:6e:42:6a:40:c8:66:c8:a9:
40:da:4f:9e:f1:94:2f:ba:b0:d0:be:6e:92:98:79:50:6c:1a:
bc:57:04:3a:4d:8c:85:d4:f8:13:91:f9:d9:37:08:5e:bd:37:
2d:56:09:c9:d2:b4:b9:9e:97:a0:b1:f1:58:34:af:94:47:e3:
d7:89:86:93:2c:b7:f9:f9:5b:be:fc:b8:19:ed:ca:38:77:e2:
5e:16:01:13:c4:45:67:d6:e4:36:20:5e:79:30:cb:a9:74:03:
77:37:fc:fe:a1:ad:c5:15:1d:c0:ae:75:97:62:70:04:1f:26:
7a:7d:04:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:48:48 2025 by rpki-client