Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/63cbaf-8e00-4670-9d77-0dd7b6bc7b70/1/BDHXDDXoCsj30WuW_nb_s2twzHk.roa
File: BDHXDDXoCsj30WuW_nb_s2twzHk.roa (raw, json)
Hash identifier: JogoexYjjvEqZGnjzL9vV6cn3mL5CgVYSfWL0GVZIvM=
Subject key identifier: 04:31:D7:0C:35:E8:0A:C8:F7:D1:6B:96:FE:76:FF:B3:6B:70:CC:79
Certificate issuer: /CN=40b0d028a3170e3be50f8b1250d9383e942d227c
Certificate serial: 019C4D044B3B4E3A8FD0A0C2318512A0C0D4
Authority key identifier: 40:B0:D0:28:A3:17:0E:3B:E5:0F:8B:12:50:D9:38:3E:94:2D:22:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QLDQKKMXDjvlD4sSUNk4PpQtInw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/63cbaf-8e00-4670-9d77-0dd7b6bc7b70/1/BDHXDDXoCsj30WuW_nb_s2twzHk.roa
Signing time: Wed 11 Feb 2026 14:04:12 +0000
ROA not before: Wed 11 Feb 2026 14:04:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201852
IP address blocks: 185.62.32.0/22 maxlen: 22
185.62.32.0/24 maxlen: 24
185.62.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/63cbaf-8e00-4670-9d77-0dd7b6bc7b70/1/QLDQKKMXDjvlD4sSUNk4PpQtInw.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/63cbaf-8e00-4670-9d77-0dd7b6bc7b70/1/QLDQKKMXDjvlD4sSUNk4PpQtInw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QLDQKKMXDjvlD4sSUNk4PpQtInw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4d:04:4b:3b:4e:3a:8f:d0:a0:c2:31:85:12:a0:c0:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40b0d028a3170e3be50f8b1250d9383e942d227c
Validity
Not Before: Feb 11 14:04:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0431d70c35e80ac8f7d16b96fe76ffb36b70cc79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d7:c2:7b:31:0d:f6:91:ec:1b:8c:dd:ae:ec:
7c:d9:a0:9b:8a:10:ee:9c:9a:d6:85:05:c0:02:d0:
83:ec:cc:5d:63:ed:22:f0:3f:f0:0e:4a:09:60:2f:
60:66:56:21:3b:34:22:68:0d:5c:86:42:8c:79:58:
c0:24:05:ce:88:b1:dd:9b:51:ae:48:2b:6f:0a:13:
6a:74:2f:27:af:5a:32:11:53:2d:c3:c4:9d:9b:6c:
6e:a6:aa:c6:13:c3:6a:9a:63:f4:3a:37:28:24:02:
1e:70:37:b6:cd:04:ff:9b:49:d1:52:91:74:e3:64:
71:44:21:02:d9:54:51:56:1a:bf:3f:ed:18:f3:fd:
5d:a5:da:38:d4:0a:cc:4b:0c:49:65:0f:78:67:fa:
02:9c:e8:6a:66:d6:1e:d6:2a:6f:32:20:51:71:fc:
52:e3:74:bd:f1:51:10:7e:ce:e8:cc:6a:c5:4b:6e:
f3:b7:55:87:ca:1c:8e:ae:56:21:49:7c:69:8e:17:
62:e8:19:0e:36:4e:71:3a:48:67:63:f4:dd:1c:4a:
1d:16:9d:a0:c2:59:51:71:41:12:60:8f:99:5b:41:
c1:04:21:53:dd:e3:ad:dd:a5:5b:d8:af:21:2a:47:
9a:29:8e:c8:e2:d9:4d:dd:f6:7c:f8:18:f4:65:c4:
96:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:31:D7:0C:35:E8:0A:C8:F7:D1:6B:96:FE:76:FF:B3:6B:70:CC:79
X509v3 Authority Key Identifier:
keyid:40:B0:D0:28:A3:17:0E:3B:E5:0F:8B:12:50:D9:38:3E:94:2D:22:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QLDQKKMXDjvlD4sSUNk4PpQtInw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/63cbaf-8e00-4670-9d77-0dd7b6bc7b70/1/BDHXDDXoCsj30WuW_nb_s2twzHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/63cbaf-8e00-4670-9d77-0dd7b6bc7b70/1/QLDQKKMXDjvlD4sSUNk4PpQtInw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.32.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:92:37:f7:e2:11:19:24:2c:4f:1e:1a:b4:a8:1a:2e:b5:a0:
78:70:95:8d:b2:4b:8f:9d:e2:ad:0d:ee:c5:d5:a7:48:5c:d9:
3a:36:46:cd:1f:b7:a6:18:6a:12:60:87:ef:61:86:4d:6d:a3:
f3:52:35:b9:92:61:23:e4:2f:15:3b:c0:76:fb:98:fa:34:4e:
db:56:3e:e3:2b:c8:06:c3:fe:75:0f:65:e1:2c:0c:48:9a:6b:
9e:ff:0a:f8:20:fb:af:08:9d:a2:ee:38:18:0c:28:77:6a:ab:
1e:69:f6:8b:b9:c6:6f:32:25:28:de:10:5c:2d:2b:df:9c:c7:
60:57:e1:19:ab:41:f3:13:45:c6:33:a8:0c:95:43:23:87:69:
8a:e1:1e:20:0a:73:df:20:7a:86:8b:05:3b:34:2e:e5:fc:c4:
ba:4a:97:bb:e1:eb:38:d5:b3:6d:53:1c:2e:29:4d:9d:2f:57:
1e:6f:a3:fe:23:1e:d5:9c:0f:9b:d8:b8:85:15:34:96:66:9b:
37:7e:74:5f:2d:6d:16:ed:65:3b:d4:0c:04:e0:ea:3c:4c:4e:
e6:a0:7a:5d:5e:6d:48:1b:b0:fa:d1:f1:43:e9:e3:4e:77:b6:
e3:bb:bf:5d:82:b8:5c:8c:6c:65:aa:06:a8:7f:03:b1:3f:0b:
5b:42:90:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 17:35:49 2026 by rpki-client