Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/BfsyjUB3iFV5UPd74xOasAhK1lo.roa
File: BfsyjUB3iFV5UPd74xOasAhK1lo.roa (raw, json)
Hash identifier: Gxn6ZHk5iC8ynJdh1LPZ5NIVxJq4xBa2A2KnqXK9vaQ=
Subject key identifier: 05:FB:32:8D:40:77:88:55:79:50:F7:7B:E3:13:9A:B0:08:4A:D6:5A
Certificate issuer: /CN=dc05970e650c2aaf1ab6a3a33a83732466a1512e
Certificate serial: 019F7F92C9F916CFB71D1EFC6A4732AB3A10
Authority key identifier: DC:05:97:0E:65:0C:2A:AF:1A:B6:A3:A3:3A:83:73:24:66:A1:51:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AWXDmUMKq8atqOjOoNzJGahUS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/BfsyjUB3iFV5UPd74xOasAhK1lo.roa
Signing time: Mon 20 Jul 2026 12:49:14 +0000
ROA not before: Mon 20 Jul 2026 12:49:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31317
IP address blocks: 5.154.171.0/24 maxlen: 24
31.220.112.0/21 maxlen: 32
37.251.224.0/21 maxlen: 32
37.251.232.0/21 maxlen: 32
45.119.124.0/22 maxlen: 32
185.95.112.0/22 maxlen: 32
185.114.140.0/22 maxlen: 32
185.156.28.0/22 maxlen: 32
185.178.56.0/22 maxlen: 32
195.192.192.0/21 maxlen: 32
195.192.200.0/21 maxlen: 32
2a05:fb80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AWXDmUMKq8atqOjOoNzJGahUS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7f:92:c9:f9:16:cf:b7:1d:1e:fc:6a:47:32:ab:3a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc05970e650c2aaf1ab6a3a33a83732466a1512e
Validity
Not Before: Jul 20 12:49:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05fb328d407788557950f77be3139ab0084ad65a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a9:ca:7f:f0:6d:b9:da:7a:21:c5:32:b2:73:
43:96:e7:8c:ca:9e:66:cb:e3:76:d6:2a:3f:b9:a3:
e1:b8:f3:5d:88:7e:da:44:1d:e5:a2:14:1d:f1:26:
33:ad:bb:87:7c:d1:2a:9c:ac:ba:81:e1:f2:17:5b:
7b:02:c6:98:39:1c:5d:26:fd:be:3f:ce:d6:7c:66:
40:4f:09:87:bc:19:5f:6d:63:bc:0a:45:49:49:a6:
35:2c:34:e2:2c:35:41:1f:4b:b5:a7:b1:8a:aa:14:
68:34:52:45:7e:54:fc:a6:8d:09:ce:09:93:fb:20:
e8:8d:85:3c:6a:bf:24:4e:79:f8:16:99:26:c3:df:
60:77:88:85:ea:1f:3f:9f:16:98:7f:4d:2a:2e:4d:
40:b8:b9:c4:08:c2:e5:2a:0c:42:7a:94:c8:8f:5f:
04:95:0f:a4:af:9e:81:b2:dd:50:a3:40:f2:8d:9e:
9f:a9:2f:a1:db:a8:81:29:77:2d:ed:ce:ce:55:2f:
d0:9e:3e:db:cf:fa:bf:d1:59:bf:e9:d7:45:5c:29:
c7:c0:72:0d:2a:8b:63:03:eb:13:79:be:96:9b:1b:
f0:a0:93:61:3e:ae:ca:e8:09:fb:e7:fd:14:c8:76:
f1:c2:07:66:f5:e5:fd:49:e8:04:05:1d:bb:84:0e:
1a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FB:32:8D:40:77:88:55:79:50:F7:7B:E3:13:9A:B0:08:4A:D6:5A
X509v3 Authority Key Identifier:
keyid:DC:05:97:0E:65:0C:2A:AF:1A:B6:A3:A3:3A:83:73:24:66:A1:51:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AWXDmUMKq8atqOjOoNzJGahUS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/BfsyjUB3iFV5UPd74xOasAhK1lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3b9a48-8b63-4d3b-a3a9-67a540e297f0/1/3AWXDmUMKq8atqOjOoNzJGahUS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.171.0/24
31.220.112.0/21
37.251.224.0/20
45.119.124.0/22
185.95.112.0/22
185.114.140.0/22
185.156.28.0/22
185.178.56.0/22
195.192.192.0/20
IPv6:
2a05:fb80::/29
Signature Algorithm: sha256WithRSAEncryption
93:96:b7:d9:de:82:6a:15:3c:a2:70:60:cb:9a:fc:51:ce:7a:
56:4c:82:6e:6a:ae:05:50:8b:a6:d7:b7:1f:72:e9:f4:05:dd:
06:fd:f4:36:e0:97:82:6f:dc:3e:69:39:86:6c:8d:20:9d:6c:
ef:c1:aa:35:06:93:c8:91:2f:31:91:d0:dd:77:08:7f:28:d5:
97:e0:94:a5:c8:cf:7b:a1:86:5a:47:7f:00:e1:87:24:cb:33:
4f:33:4b:25:79:9f:5c:1d:2a:32:84:da:12:cd:b0:bc:c3:9c:
09:b2:b9:e1:53:37:77:9c:09:15:f7:a1:a9:4f:bc:7f:bf:4b:
a2:a9:54:ab:71:d1:5b:d9:a0:cb:cc:ef:4f:c1:54:88:da:17:
4b:f5:37:88:77:91:e1:29:b7:35:3a:f0:10:f0:5a:c6:8b:1f:
49:fe:08:a9:5c:70:73:88:8b:38:0d:db:17:57:a6:d3:0c:7c:
c5:e7:fd:e6:fb:9f:4c:e7:68:04:f1:89:59:73:d2:10:be:60:
bf:58:10:1c:30:1b:43:e4:6e:e9:28:d5:06:63:73:f2:fe:ba:
7c:fd:01:99:73:89:01:81:20:f9:7c:9b:be:98:57:74:d1:5c:
8c:3b:5e:1b:59:b0:3b:14:90:7b:98:1f:10:ec:57:83:72:34:
78:5a:e8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:07:26 2026 by rpki-client