Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/bqSNo5kxYa13DI8C9QCpy4nV7Mk.roa
File: bqSNo5kxYa13DI8C9QCpy4nV7Mk.roa (raw, json)
Hash identifier: BubMw86WqvaBOSfoNUBrIVcL+fL5Ns64cLxY/APuJ7E=
Subject key identifier: 6E:A4:8D:A3:99:31:61:AD:77:0C:8F:02:F5:00:A9:CB:89:D5:EC:C9
Certificate issuer: /CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Certificate serial: 019B7758CA9513796A32AD7339BA49693FC4
Authority key identifier: A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/bqSNo5kxYa13DI8C9QCpy4nV7Mk.roa
Signing time: Thu 01 Jan 2026 02:17:46 +0000
ROA not before: Thu 01 Jan 2026 02:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3262
IP address blocks: 185.177.40.0/24 maxlen: 24
185.177.41.0/24 maxlen: 24
185.220.164.0/24 maxlen: 24
185.220.165.0/24 maxlen: 24
185.220.166.0/24 maxlen: 24
185.220.167.0/24 maxlen: 24
185.226.229.0/24 maxlen: 24
185.232.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:ca:95:13:79:6a:32:ad:73:39:ba:49:69:3f:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Validity
Not Before: Jan 1 02:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ea48da3993161ad770c8f02f500a9cb89d5ecc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d4:2b:46:96:c8:f5:18:b3:74:ea:26:c6:67:
7c:1c:a1:3e:6c:74:3f:ee:5c:c5:6f:ce:a0:88:c5:
b0:60:9c:7d:47:47:a4:2b:d9:d7:f2:d4:d4:59:93:
fa:fa:50:e6:5e:e1:96:3a:1f:5e:25:c2:3b:b1:fe:
53:c1:21:c8:c4:e3:ff:b3:ab:f9:cd:f3:ec:55:09:
27:14:99:fe:fa:2a:07:8b:00:bb:3f:f0:82:ab:97:
98:60:e5:ec:0b:bc:58:bd:e9:44:8d:20:01:1b:7d:
0b:b2:eb:ee:9c:4a:2d:b5:96:6b:5e:0f:92:6e:7a:
b6:1b:51:aa:25:86:b6:0d:0e:86:f1:6b:fe:e1:18:
ae:47:74:26:9c:34:5e:4a:4c:1f:a2:09:63:a3:69:
3e:a2:ab:37:ce:a8:b2:ac:ed:ab:d1:02:e5:89:c3:
d6:f1:51:6b:8d:e4:dd:10:03:41:fa:4c:80:27:b9:
bc:fa:02:5c:33:db:b4:0c:bd:b9:c3:0b:81:58:e9:
b4:28:bb:07:8c:5e:f5:79:d2:f2:fe:c9:76:93:54:
eb:3c:0c:2f:16:a9:b4:3d:af:75:26:2a:81:6c:aa:
6f:01:5f:3d:5d:06:26:c3:9f:35:e3:88:63:d9:df:
f2:d0:60:66:7e:f7:e6:b0:20:5c:d2:04:66:7f:17:
84:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:A4:8D:A3:99:31:61:AD:77:0C:8F:02:F5:00:A9:CB:89:D5:EC:C9
X509v3 Authority Key Identifier:
keyid:A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/bqSNo5kxYa13DI8C9QCpy4nV7Mk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.40.0/23
185.220.164.0/22
185.226.229.0/24
185.232.132.0/24
Signature Algorithm: sha256WithRSAEncryption
73:ed:dc:50:99:23:d4:a9:eb:24:a7:b0:e0:d5:6e:6c:49:fa:
06:54:68:b1:cd:9a:f3:b1:b7:fe:71:18:20:f2:87:2d:28:c9:
c4:1d:9d:15:95:c5:20:58:1e:66:7f:46:52:5f:9f:41:dc:47:
7b:94:14:18:fb:75:b5:dd:72:a0:ba:71:66:bc:97:8b:f9:c3:
bf:2a:c4:7a:6e:2e:22:74:f7:a4:6b:ec:8e:19:e5:34:90:77:
25:42:19:b3:e9:87:24:72:d2:a5:c1:5a:ac:36:10:b6:39:51:
e1:5a:ec:fd:b4:23:98:38:41:17:c9:ba:9f:7a:1f:4e:0d:e3:
da:d7:92:ac:8d:c5:f2:17:65:09:47:20:7e:26:b2:e7:8c:f0:
10:f9:ae:de:52:c2:10:47:a7:c0:17:40:79:a6:fb:54:a6:a4:
16:20:8c:23:3b:8d:09:48:4e:41:ad:53:84:c6:6e:05:d4:85:
65:d3:ec:82:51:48:46:fe:bd:a7:d1:41:92:78:9d:b6:ed:a3:
bd:a0:39:27:d4:2d:10:ad:93:50:d6:30:22:2b:0a:2a:6d:12:
a2:9d:6a:fa:09:1f:19:a4:9b:2d:3b:bd:1a:e1:50:ea:c7:93:
c1:85:13:c6:7b:42:ea:a5:bc:d9:bd:01:1c:a2:c0:16:84:e8:
ef:89:22:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:05:10 2026 by rpki-client