Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/BIHuSmhdOpjtcnW87Zk9AiIeUMQ.roa
File: BIHuSmhdOpjtcnW87Zk9AiIeUMQ.roa (raw, json)
Hash identifier: aXn6G6JWMLGKSkwGd9D9rKmqQqkEcgFv2BEiiTxQpl0=
Subject key identifier: 04:81:EE:4A:68:5D:3A:98:ED:72:75:BC:ED:99:3D:02:22:1E:50:C4
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 019D24A4944228B0CF1306DFA5FBD441AC70
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/BIHuSmhdOpjtcnW87Zk9AiIeUMQ.roa
Signing time: Wed 25 Mar 2026 10:57:38 +0000
ROA not before: Wed 25 Mar 2026 10:57:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198154
IP address blocks: 89.46.217.0/24 maxlen: 24
188.212.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:a4:94:42:28:b0:cf:13:06:df:a5:fb:d4:41:ac:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Mar 25 10:57:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0481ee4a685d3a98ed7275bced993d02221e50c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:af:46:44:7d:c0:f3:3c:ba:40:08:d2:51:b8:
29:d9:5c:b2:f9:04:c5:49:15:70:5f:b3:b4:c4:e9:
da:e8:d1:41:7e:a2:fd:1b:5a:23:32:89:e6:04:12:
99:d6:49:3f:f0:ba:e3:2c:15:8e:ed:e0:a3:dc:04:
5d:78:82:83:a0:d8:9c:a3:0a:ef:cf:5a:ae:88:b0:
9a:29:c5:51:3d:6a:f8:17:ab:c5:b2:b6:9f:c5:aa:
47:3c:61:d2:5f:8d:e5:e8:54:c7:b9:08:23:03:df:
d3:01:49:b5:78:a4:5c:bb:19:0e:b6:67:a1:61:29:
3c:22:7d:8e:dd:77:75:40:8e:ed:e2:a6:28:5f:03:
27:54:8a:95:df:54:a4:2a:41:f6:02:70:8c:e6:aa:
7f:76:19:c1:1c:c5:ca:23:58:0c:c3:c4:28:90:a1:
96:3c:0e:e3:cd:56:cb:7e:fe:ef:cb:02:00:e0:cf:
54:b1:6a:10:6d:43:26:bc:da:f6:db:72:5f:8c:50:
db:4a:12:44:08:38:ef:8a:b9:1d:80:16:9c:78:18:
b0:52:09:db:ea:47:70:d8:a5:d7:8d:bf:21:b4:69:
81:1c:90:7c:0a:b5:a1:a3:d6:1a:62:a1:16:a7:3f:
a3:e0:e5:0a:fb:ff:99:ca:f5:89:de:40:9b:2e:4a:
fd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:81:EE:4A:68:5D:3A:98:ED:72:75:BC:ED:99:3D:02:22:1E:50:C4
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/BIHuSmhdOpjtcnW87Zk9AiIeUMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.217.0/24
188.212.99.0/24
Signature Algorithm: sha256WithRSAEncryption
55:6f:b1:8f:3d:2c:a9:c0:11:22:92:fc:26:0c:1d:6e:d9:85:
be:c7:10:a4:ea:96:b4:20:1c:ba:c8:6d:77:f0:52:8e:0d:26:
17:43:c2:13:d9:2e:2b:3b:93:79:67:cf:ca:3a:20:10:7d:7b:
3b:ea:1d:67:5f:28:ee:45:2d:f4:92:cf:a4:12:04:c5:c6:63:
56:26:c2:a6:05:0c:a1:8f:17:46:0c:0c:cd:5a:a5:47:31:57:
2d:43:3d:cd:43:5b:46:ac:4b:9c:fc:73:96:d8:b7:b3:3f:93:
a8:43:6d:56:c0:f6:1a:cd:17:f3:73:6d:39:7b:bb:35:60:ab:
d4:b5:1b:c3:86:6e:97:62:12:27:57:ec:70:46:ea:b0:5e:d8:
30:a2:d9:b3:8a:ea:c6:ab:65:b2:84:34:eb:77:b8:22:a6:b3:
47:71:24:2a:83:e1:e2:fd:05:4e:0c:f3:9b:a5:dc:d3:bb:82:
33:d7:eb:8f:a8:65:bc:ef:c9:ad:40:42:e3:67:fd:d3:c1:38:
89:32:c1:be:0f:b7:e5:84:ff:97:5d:28:2d:d0:89:51:5e:d3:
69:c2:e4:e6:72:25:e8:56:dd:79:34:81:f7:20:ad:09:65:09:
60:7b:10:2d:a2:0a:a1:88:5c:4f:84:95:4e:ea:e5:d4:46:74:
89:b7:36:79
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ0kpJRCKLDPEwbfpfvUQaxwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz
MjdlYmUwHhcNMjYwMzI1MTA1NzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDgxZWU0YTY4NWQzYTk4ZWQ3Mjc1YmNlZDk5M2QwMjIyMWU1MGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmq9GRH3A8zy6QAjSUbgp2Vyy+QTF
SRVwX7O0xOna6NFBfqL9G1ojMonmBBKZ1kk/8LrjLBWO7eCj3ARdeIKDoNicowrv
z1quiLCaKcVRPWr4F6vFsrafxapHPGHSX43l6FTHuQgjA9/TAUm1eKRcuxkOtmeh
YSk8In2O3Xd1QI7t4qYoXwMnVIqV31SkKkH2AnCM5qp/dhnBHMXKI1gMw8QokKGW
PA7jzVbLfv7vywIA4M9UsWoQbUMmvNr223JfjFDbShJECDjvirkdgBaceBiwUgnb
6kdw2KXXjb8htGmBHJB8CrWho9YaYqEWpz+j4OUK+/+ZyvWJ3kCbLkr9gQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFASB7kpoXTqY7XJ1vO2ZPQIiHlDEMB8GA1UdIwQY
MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt
M2RmYTUxMGQ2YjE2LzEvQklIdVNtaGRPcGp0Y25XODdaazlBaUllVU1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2
LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWS7ZAwQA
vNRjMA0GCSqGSIb3DQEBCwUAA4IBAQBVb7GPPSypwBEikvwmDB1u2YW+xxCk6pa0
IBy6yG138FKODSYXQ8IT2S4rO5N5Z8/KOiAQfXs76h1nXyjuRS30ks+kEgTFxmNW
JsKmBQyhjxdGDAzNWqVHMVctQz3NQ1tGrEuc/HOW2LezP5OoQ21WwPYazRfzc205
e7s1YKvUtRvDhm6XYhInV+xwRuqwXtgwotmziurGq2WyhDTrd7giprNHcSQqg+Hi
/QVODPObpdzTu4Iz1+uPqGW878mtQELjZ/3TwTiJMsG+D7flhP+XXSgt0IlRXtNp
wuTmciXoVt15NIH3IK0JZQlgexAtogqhiFxPhJVO6uXURnSJtzZ5
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:11:39 2026 by rpki-client