Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/BApSbsESE-proQA3IjR2Fc5FrQg.roa
File: BApSbsESE-proQA3IjR2Fc5FrQg.roa (raw, json)
Hash identifier: tsQTTQkFusyAqW/gQnJmPH0odJMuP2a12omZQ3HbkX0=
Subject key identifier: 04:0A:52:6E:C1:12:13:EA:6B:A1:00:37:22:34:76:15:CE:45:AD:08
Certificate issuer: /CN=dc71d0f63f561cecb3a28b0cbc2459102f6f03fa
Certificate serial: 019F2369032F16AD8AC00C21436C46D211F8
Authority key identifier: DC:71:D0:F6:3F:56:1C:EC:B3:A2:8B:0C:BC:24:59:10:2F:6F:03:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HHQ9j9WHOyzoosMvCRZEC9vA_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/BApSbsESE-proQA3IjR2Fc5FrQg.roa
Signing time: Thu 02 Jul 2026 15:18:32 +0000
ROA not before: Thu 02 Jul 2026 15:18:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211067
IP address blocks: 185.213.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/3HHQ9j9WHOyzoosMvCRZEC9vA_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/3HHQ9j9WHOyzoosMvCRZEC9vA_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/3HHQ9j9WHOyzoosMvCRZEC9vA_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:03:2f:16:ad:8a:c0:0c:21:43:6c:46:d2:11:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc71d0f63f561cecb3a28b0cbc2459102f6f03fa
Validity
Not Before: Jul 2 15:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=040a526ec11213ea6ba1003722347615ce45ad08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5e:69:cd:e5:f2:08:fe:68:88:b5:ef:00:b9:
9b:07:af:f0:3a:1e:cc:df:8e:2e:36:8d:50:1a:6e:
d9:84:65:db:10:52:00:2b:4e:23:d0:d6:0d:18:e6:
53:f9:11:7f:9e:d1:1b:6d:5c:ac:29:83:eb:9b:5f:
7d:da:83:53:75:22:4b:cb:de:20:dd:92:f0:43:42:
23:15:70:f9:7b:06:73:8c:35:ec:60:41:bc:79:95:
5d:bd:32:7b:14:ea:0d:07:af:3d:e8:20:cf:fe:6f:
6b:85:d4:49:12:b4:3e:7e:75:5b:45:83:e0:8f:df:
fa:67:e5:c1:38:66:9e:6e:4e:b0:c6:da:dc:b2:d2:
9a:4b:80:43:a2:7c:75:e6:4b:04:ec:aa:31:23:4d:
39:f4:e9:66:a6:ab:50:2d:c7:bb:21:6f:16:90:8b:
52:6d:8c:28:ff:a2:ec:78:26:c4:68:a4:d4:70:0a:
10:75:68:91:e6:d2:6e:e1:ac:41:20:7b:37:d5:b6:
77:e9:00:07:0c:84:25:b3:3f:18:c3:7f:d3:4e:04:
92:83:fe:a0:81:f0:56:38:ed:6a:55:da:14:66:85:
f2:94:0f:85:73:b5:1e:48:89:76:85:a9:da:da:22:
a1:68:a0:2a:7f:14:87:fe:57:57:80:c4:f1:77:fc:
e2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0A:52:6E:C1:12:13:EA:6B:A1:00:37:22:34:76:15:CE:45:AD:08
X509v3 Authority Key Identifier:
keyid:DC:71:D0:F6:3F:56:1C:EC:B3:A2:8B:0C:BC:24:59:10:2F:6F:03:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HHQ9j9WHOyzoosMvCRZEC9vA_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/BApSbsESE-proQA3IjR2Fc5FrQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/3HHQ9j9WHOyzoosMvCRZEC9vA_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.192.0/24
Signature Algorithm: sha256WithRSAEncryption
18:d6:f5:89:9b:67:f5:63:3b:c0:76:f8:1d:77:8c:de:8c:96:
96:83:be:32:16:cc:9a:bd:e1:3f:de:d3:ee:98:0e:13:4d:24:
00:b8:21:fe:08:16:db:89:00:11:2f:cb:30:b8:00:68:23:b0:
45:8b:e3:a9:0c:16:69:fe:a0:08:b8:0c:48:6c:7a:37:78:7a:
66:8c:a2:ef:07:7d:cc:53:de:83:9f:c2:a5:ae:e5:65:ca:50:
f8:9a:bf:da:52:92:c6:e6:54:c5:53:26:0c:fe:57:99:88:18:
42:d8:ab:11:fe:11:eb:e3:6a:ba:4f:b9:0f:94:dc:80:d6:3f:
0d:9c:18:e5:06:ae:2e:98:b6:e3:21:b7:1d:c9:39:c4:e9:d7:
df:bb:77:ac:f3:2e:8e:b8:fb:c3:30:6e:13:bd:02:05:37:b4:
6e:57:41:6b:6d:c2:9d:c3:e1:c7:ed:fb:d3:13:a0:a9:9f:e3:
5d:c4:21:d8:4c:93:c8:f2:69:f1:5d:b2:78:d4:86:1c:93:98:
6f:d0:fb:bd:09:d8:fc:70:de:60:97:1a:f5:41:e7:fb:b9:1f:
11:2f:fa:4e:a3:55:b6:ef:0c:74:40:7d:b4:d9:66:56:a3:b8:
10:99:1b:c3:fc:b7:8b:9b:2c:1f:61:7d:71:5c:fb:18:30:a0:
58:07:c0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:45:31 2026 by rpki-client