Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/BQHofkNDdwo8VDxETqm6eOYoHdg.roa
File: BQHofkNDdwo8VDxETqm6eOYoHdg.roa (raw, json)
Hash identifier: bNhzHl3IkpkYEjbrGYNAAlrHXhlpC4ZSBZr0iWx1THc=
Subject key identifier: 05:01:E8:7E:43:43:77:0A:3C:54:3C:44:4E:A9:BA:78:E6:28:1D:D8
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 01A0CD7E781AD99DA02014944A18205B5C46
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/BQHofkNDdwo8VDxETqm6eOYoHdg.roa
Signing time: Wed 23 Sep 2026 09:00:12 +0000
ROA not before: Wed 23 Sep 2026 09:00:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142113
IP address blocks: 109.120.153.0/24 maxlen: 24
176.98.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7e:78:1a:d9:9d:a0:20:14:94:4a:18:20:5b:5c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Sep 23 09:00:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0501e87e4343770a3c543c444ea9ba78e6281dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d7:d5:af:24:7f:37:7a:1c:3a:8b:64:40:28:
97:21:3a:2c:7e:45:48:37:2d:a3:72:c4:2d:70:e1:
28:28:be:d2:fd:d8:74:0b:e2:03:3e:bd:42:39:da:
9b:78:bd:87:cc:79:b8:a3:c2:28:c7:34:66:60:11:
f6:50:a1:72:69:85:52:6c:db:40:f2:b2:50:c8:d0:
a0:97:d9:96:da:47:5b:21:ad:d5:0f:53:04:ce:cb:
73:c9:af:f2:ab:88:36:82:b8:57:20:2d:72:97:69:
2d:f9:2b:ee:69:ec:e0:33:f6:db:79:b2:bc:a8:26:
5a:16:5f:ca:77:aa:32:83:57:75:1b:83:7a:2f:6c:
1b:16:a6:ff:1b:d0:ac:c7:6e:5f:53:08:35:77:9c:
56:cb:63:eb:4f:f7:35:f3:9e:19:3d:bd:c5:e0:50:
75:3e:a8:ba:fa:96:b5:30:35:12:e5:ed:48:a8:a1:
36:3c:c4:61:ab:c1:9a:cc:11:cc:5d:2c:eb:3d:a9:
80:8f:18:41:e9:08:6e:f6:6b:a6:ba:78:3e:b6:d3:
9d:63:8a:5d:c3:8c:62:2e:c6:82:63:78:db:31:0c:
30:37:e4:bd:0d:99:33:c3:d9:4a:fc:df:b3:2a:57:
e8:c3:67:2c:db:c8:2b:fc:4b:0d:f5:68:04:b0:69:
53:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:01:E8:7E:43:43:77:0A:3C:54:3C:44:4E:A9:BA:78:E6:28:1D:D8
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/BQHofkNDdwo8VDxETqm6eOYoHdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.120.153.0/24
176.98.181.0/24
Signature Algorithm: sha256WithRSAEncryption
00:be:48:0d:03:c0:51:38:1e:db:fb:63:d4:bb:2b:76:32:5f:
1d:17:65:1a:1f:f6:8d:6f:45:bb:4f:c0:4e:bc:2e:b8:39:7e:
c1:5c:98:86:89:56:02:b7:25:77:f4:ed:94:92:56:17:5b:72:
43:83:7d:96:a6:bb:5a:4d:4a:25:74:bc:ef:88:6f:d8:25:34:
e6:a3:04:f6:78:45:bf:1b:9c:42:35:66:89:6f:15:bc:25:6a:
bb:da:ed:65:eb:c3:50:d4:2a:4f:67:fa:3a:d0:1a:ba:67:20:
10:a1:3e:39:74:a5:27:ca:7c:54:e5:c0:40:01:e0:fd:91:c2:
15:8f:96:19:81:ed:5c:0a:aa:7d:40:98:09:2c:9a:9d:a7:74:
b5:2e:63:c7:ea:ea:dd:35:76:43:94:0c:ab:48:4a:d6:b0:99:
ec:c0:f7:83:31:7e:ec:42:41:9c:75:e7:f1:ef:7a:29:14:3e:
c7:42:81:a4:dd:c5:9d:6e:09:5f:4f:7d:20:9f:4e:d5:ab:c2:
cd:0e:34:a8:4f:f7:53:c7:8a:f6:91:8b:1b:6d:42:3a:d8:97:
20:86:5e:25:ea:67:50:f3:a7:95:cb:61:42:81:a8:9f:2c:aa:
05:10:6d:ae:cc:d1:49:ef:d1:35:95:94:d5:90:7a:bc:67:34:
d0:1a:93:30
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaDNfnga2Z2gIBSUShggW1xGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMmMyMTlmM2MyOTdiNzc1ODgwYzNiNjUxYTIwMDNmOWJl
NmRlNWUwHhcNMjYwOTIzMDkwMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTAxZTg3ZTQzNDM3NzBhM2M1NDNjNDQ0ZWE5YmE3OGU2MjgxZGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitfVryR/N3ocOotkQCiXITosfkVI
Ny2jcsQtcOEoKL7S/dh0C+IDPr1COdqbeL2HzHm4o8IoxzRmYBH2UKFyaYVSbNtA
8rJQyNCgl9mW2kdbIa3VD1MEzstzya/yq4g2grhXIC1yl2kt+SvuaezgM/bbebK8
qCZaFl/Kd6oyg1d1G4N6L2wbFqb/G9Csx25fUwg1d5xWy2PrT/c1854ZPb3F4FB1
Pqi6+pa1MDUS5e1IqKE2PMRhq8GazBHMXSzrPamAjxhB6Qhu9mumung+ttOdY4pd
w4xiLsaCY3jbMQwwN+S9DZkzw9lK/N+zKlfow2cs28gr/EsN9WgEsGlT+wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAUB6H5DQ3cKPFQ8RE6punjmKB3YMB8GA1UdIwQY
MBaAFBssIZ88KXt3WIDDtlGiAD+b5t5eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEt
OTJjODFmMjJlNzEyLzEvQlFIb2ZrTkRkd284VkR4RVRxbTZlT1lvSGRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9iMTFhNDAtNDhlOS00ZTA2LWJmMTEtOTJjODFmMjJlNzEy
LzEvR3l3aG56d3BlM2RZZ01PMlVhSUFQNXZtM2w0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAbXiZAwQA
sGK1MA0GCSqGSIb3DQEBCwUAA4IBAQAAvkgNA8BROB7b+2PUuyt2Ml8dF2UaH/aN
b0W7T8BOvC64OX7BXJiGiVYCtyV39O2UklYXW3JDg32WprtaTUoldLzviG/YJTTm
owT2eEW/G5xCNWaJbxW8JWq72u1l68NQ1CpPZ/o60Bq6ZyAQoT45dKUnynxU5cBA
AeD9kcIVj5YZge1cCqp9QJgJLJqdp3S1LmPH6urdNXZDlAyrSErWsJnswPeDMX7s
QkGcdefx73opFD7HQoGk3cWdbglfT30gn07Vq8LNDjSoT/dTx4r2kYsbbUI62Jcg
hl4l6mdQ86eVy2FCgaifLKoFEG2uzNFJ79E1lZTVkHq8ZzTQGpMw
-----END CERTIFICATE-----
Generated at Thu Sep 24 21:46:34 2026 by rpki-client