Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/cbpB_BWVX0093UscZD9akdDjfGg.roa
File: cbpB_BWVX0093UscZD9akdDjfGg.roa (raw, json)
Hash identifier: f9SWTvOyecl2Rxf5tZkTEwdysJb0MNjoCC6KFs64dao=
Subject key identifier: 71:BA:41:FC:15:95:5F:4D:3D:DD:4B:1C:64:3F:5A:91:D0:E3:7C:68
Certificate issuer: /CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Certificate serial: 01A0C94E85CA26ADD4946B58512D1025BC3C
Authority key identifier: 6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/cbpB_BWVX0093UscZD9akdDjfGg.roa
Signing time: Tue 22 Sep 2026 13:29:21 +0000
ROA not before: Tue 22 Sep 2026 13:29:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199046
IP address blocks: 5.133.24.0/21 maxlen: 24
5.253.68.0/22 maxlen: 22
5.253.68.0/24 maxlen: 24
5.253.69.0/24 maxlen: 24
5.253.70.0/24 maxlen: 24
5.253.71.0/24 maxlen: 24
185.132.248.0/22 maxlen: 22
185.132.248.0/24 maxlen: 24
185.132.249.0/24 maxlen: 24
185.132.250.0/24 maxlen: 24
185.132.251.0/24 maxlen: 24
193.7.220.0/22 maxlen: 22
193.7.220.0/24 maxlen: 24
193.7.221.0/24 maxlen: 24
193.7.222.0/24 maxlen: 24
193.7.223.0/24 maxlen: 24
2a09:9900::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:4e:85:ca:26:ad:d4:94:6b:58:51:2d:10:25:bc:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6daacc448c4a23afc94a45a79b76dfbe830b2598
Validity
Not Before: Sep 22 13:29:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=71ba41fc15955f4d3ddd4b1c643f5a91d0e37c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d7:3e:00:1f:1a:ff:95:1b:f5:b9:87:d7:10:
67:fd:8e:c3:3a:27:3d:ae:24:3a:07:89:e3:61:80:
31:6d:45:7d:f6:6a:a8:16:fd:d9:29:12:c0:ac:8a:
1e:42:11:bf:10:3e:f9:bc:c0:da:b7:97:3f:3c:3d:
a1:10:57:63:08:48:67:7b:52:90:a9:40:a9:15:88:
cf:03:cf:9d:7d:a0:49:c0:b5:d2:f4:45:0e:82:69:
13:5b:36:a5:23:36:30:66:ff:e4:28:d5:72:c8:2c:
b9:cf:1a:d1:6f:90:42:9e:50:dd:ff:67:e9:66:e1:
a3:4b:6f:e6:ce:f2:c2:23:f9:38:9c:78:6c:a1:5a:
4f:32:fb:68:88:4e:e0:a4:f8:1f:ad:5f:34:d1:11:
19:60:a4:2d:7c:58:3f:6d:8d:10:50:fa:92:59:ff:
2e:69:0f:b1:18:cc:23:88:80:85:4b:73:d1:54:cb:
d2:43:90:37:d8:d1:76:3c:23:ec:69:f3:10:b1:ee:
3f:f1:2d:e8:42:fe:6e:8e:e2:fc:f7:a8:f3:a3:c4:
f8:a5:4d:59:a9:36:d2:a3:2f:52:01:02:6e:37:0c:
0b:10:de:2d:91:de:26:2d:b9:64:5c:bf:80:cd:4e:
df:fc:0d:fc:5a:10:b4:a8:3d:82:3f:a0:d2:ad:66:
76:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BA:41:FC:15:95:5F:4D:3D:DD:4B:1C:64:3F:5A:91:D0:E3:7C:68
X509v3 Authority Key Identifier:
keyid:6D:AA:CC:44:8C:4A:23:AF:C9:4A:45:A7:9B:76:DF:BE:83:0B:25:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/barMRIxKI6_JSkWnm3bfvoMLJZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/cbpB_BWVX0093UscZD9akdDjfGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34649e-9bc4-4018-b3a0-756f3cc3ec33/1/barMRIxKI6_JSkWnm3bfvoMLJZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.24.0/21
5.253.68.0/22
185.132.248.0/22
193.7.220.0/22
IPv6:
2a09:9900::/32
Signature Algorithm: sha256WithRSAEncryption
81:83:4a:76:f0:5c:80:7b:fb:83:03:4a:b4:03:b3:3d:5e:1d:
b2:68:ac:48:ea:c4:e5:c3:2f:0b:ed:88:4a:85:28:03:e0:93:
3e:ea:28:41:01:7c:7a:aa:15:c6:77:0b:a8:62:51:22:d2:6b:
25:6d:f4:c7:47:71:43:49:aa:0f:92:b2:99:1b:e4:cc:c8:55:
df:e9:ad:72:8f:bf:30:f9:b4:bd:70:3e:43:03:f6:d4:3b:e6:
28:cd:72:3b:7c:d5:14:17:84:a2:66:fd:ea:5e:0a:82:ac:7a:
c5:d5:15:ab:c0:1d:55:fe:57:cc:ab:f1:84:93:58:10:ee:37:
7b:d6:68:07:18:30:62:2d:c6:d4:53:4e:d1:66:ef:26:b4:6f:
6b:07:0d:ba:e4:1d:67:bd:33:80:a7:3d:87:16:52:8d:ef:4b:
ea:0f:f0:ab:95:fe:95:0c:38:c7:f5:c4:9e:ee:03:07:0c:70:
f1:b9:07:23:ee:4a:f6:89:56:61:fc:1e:47:03:bb:9b:f1:96:
29:76:f0:a5:85:9c:6d:a1:1d:0a:e6:ec:0c:70:62:b4:32:ea:
63:33:f1:4f:ed:29:d2:9b:3d:d5:0a:98:02:00:a0:56:cc:56:
27:40:32:ba:04:a8:d9:f8:d0:0f:35:95:fa:e0:43:4a:f6:e9:
06:68:bb:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:42:24 2026 by rpki-client