Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/BYI4akM6lhIw21VZknTh_NCIqSU.roa
File: BYI4akM6lhIw21VZknTh_NCIqSU.roa (raw, json)
Hash identifier: YdN03lqeu5vvLCQrhnxcW6iOxgWPrgZFciSU6zX3FMs=
Subject key identifier: 05:82:38:6A:43:3A:96:12:30:DB:55:59:92:74:E1:FC:D0:88:A9:25
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 01A0A37B144EA7DFD36A881CAEEE60446E44
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/BYI4akM6lhIw21VZknTh_NCIqSU.roa
Signing time: Tue 15 Sep 2026 05:12:27 +0000
ROA not before: Tue 15 Sep 2026 05:12:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46635
IP address blocks: 45.67.147.0/24 maxlen: 24
63.246.149.0/24 maxlen: 24
162.218.94.0/24 maxlen: 24
185.171.124.0/24 maxlen: 24
185.171.125.0/24 maxlen: 24
185.171.127.0/24 maxlen: 24
185.198.88.0/24 maxlen: 24
192.145.68.0/24 maxlen: 24
212.60.18.0/24 maxlen: 24
212.60.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a3:7b:14:4e:a7:df:d3:6a:88:1c:ae:ee:60:44:6e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Sep 15 05:12:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0582386a433a961230db55599274e1fcd088a925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c3:9e:08:ec:fe:5d:23:c5:19:fb:31:2d:df:
81:ba:ef:58:4a:e4:56:a8:4f:a0:40:f5:2a:fc:b8:
07:dd:af:98:77:c0:a0:b2:b0:e2:a7:8b:fa:6c:69:
62:de:de:f1:8d:b2:d4:b4:da:47:d7:df:20:aa:35:
ab:a5:a1:b2:31:19:e8:41:e4:4a:d0:5a:dd:64:6e:
39:e6:c3:a1:27:69:1d:86:9b:cf:38:a4:40:59:c6:
52:bb:36:74:04:7c:ff:86:7e:ff:b4:34:75:84:30:
0c:a6:57:cf:2c:17:fa:ba:03:d7:a7:81:55:3b:65:
f4:bc:99:b3:ec:20:4e:1d:c4:7e:f4:01:a6:81:d2:
39:7c:0c:75:38:4d:e1:0d:bf:89:6b:fe:60:ed:52:
9e:62:40:61:c8:0e:d2:56:af:c2:7c:ab:32:65:33:
f0:d3:bf:68:c5:01:d6:24:66:52:da:ea:d4:bf:17:
81:4b:83:d8:58:ba:94:f5:ed:b3:e1:6f:91:7a:ff:
04:42:01:bf:8f:04:54:ef:ed:df:a6:0e:76:02:9f:
c6:18:55:ce:06:32:e8:e5:64:2c:1a:4e:29:1c:1d:
8e:52:e9:08:39:6c:4b:04:c4:8d:22:25:97:cf:aa:
28:89:13:ed:44:35:50:ef:3d:13:33:9e:25:be:56:
38:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:82:38:6A:43:3A:96:12:30:DB:55:59:92:74:E1:FC:D0:88:A9:25
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/BYI4akM6lhIw21VZknTh_NCIqSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.147.0/24
63.246.149.0/24
162.218.94.0/24
185.171.124.0/23
185.171.127.0/24
185.198.88.0/24
192.145.68.0/24
212.60.18.0/23
Signature Algorithm: sha256WithRSAEncryption
76:77:6b:73:e4:32:2c:5a:a2:42:eb:29:76:4b:10:25:bb:8d:
0d:85:02:3a:3c:69:6c:1e:f2:7c:c9:61:93:e1:de:a0:93:78:
37:56:99:ba:c5:31:68:85:1e:a5:0e:9a:ae:a2:9a:61:56:4a:
73:af:ea:f6:01:da:8f:a9:4d:83:2e:61:d2:c2:df:0a:d2:5f:
d1:6a:cb:e5:da:05:d6:88:82:50:e3:6c:02:13:d0:d2:ac:17:
85:19:a5:5c:9b:06:fb:4c:5d:63:68:62:47:34:b4:b5:eb:66:
63:2a:a2:da:48:30:9f:19:97:7c:62:1f:d3:2a:dd:e1:58:56:
02:3a:eb:67:32:6a:c9:c4:d5:e2:1c:d5:2d:fd:aa:c6:f0:cd:
43:c8:30:0f:29:c3:50:d0:a2:f1:f2:90:14:87:e6:bf:03:87:
05:35:00:70:2b:3f:57:c4:e6:92:c8:48:f4:d4:8a:b1:f2:21:
e9:af:e9:6c:5d:5c:74:e6:b0:67:b2:56:0c:67:97:3b:cd:64:
9d:d4:5e:37:77:29:fe:ea:cf:7d:f7:f1:12:ad:c1:16:cb:47:
89:ae:3b:b6:25:0a:15:6e:43:bd:b4:32:02:c9:07:5f:76:7f:
c6:c1:5c:2e:21:db:5d:0c:99:f9:2f:9b:ca:9f:01:94:af:db:
d1:f6:2c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:07:21 2026 by rpki-client