Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/BiHqAr2JVqZ4DLWVROgWT2k6DC0.roa
File: BiHqAr2JVqZ4DLWVROgWT2k6DC0.roa (raw, json)
Hash identifier: 9TjkNZxHudlW0FibohA4yDjRd2fM9jLHrr1f+omdVZQ=
Subject key identifier: 06:21:EA:02:BD:89:56:A6:78:0C:B5:95:44:E8:16:4F:69:3A:0C:2D
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 019D069E96B9440BDCFF9CD1247188A62233
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/BiHqAr2JVqZ4DLWVROgWT2k6DC0.roa
Signing time: Thu 19 Mar 2026 15:02:29 +0000
ROA not before: Thu 19 Mar 2026 15:02:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197703
IP address blocks: 135.136.182.0/23 maxlen: 23
135.136.182.0/24 maxlen: 24
135.136.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:9e:96:b9:44:0b:dc:ff:9c:d1:24:71:88:a6:22:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Mar 19 15:02:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0621ea02bd8956a6780cb59544e8164f693a0c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:65:39:ec:6e:47:56:0c:92:3d:5d:3b:41:0c:
23:04:65:a3:68:5f:d3:98:70:1c:e7:1e:45:aa:c1:
0f:26:a8:8d:a5:33:b4:37:6a:68:e0:d9:73:c7:ab:
04:bf:f0:49:92:9d:81:39:34:5e:e6:54:29:b0:a7:
86:75:d1:81:84:80:d2:7a:ce:34:43:4e:c0:95:57:
21:4a:a4:b5:85:2e:43:45:a5:25:82:45:22:99:2c:
89:37:1b:ee:f2:53:26:41:c5:0c:47:73:b3:2c:f0:
14:0d:48:1a:fe:3a:2d:1e:bd:60:66:ca:15:31:47:
f6:27:9b:d3:01:89:a7:92:7e:19:a0:2b:59:52:47:
7c:0c:49:db:59:56:b0:da:56:4d:1b:8b:b9:9d:db:
ff:2b:65:6e:6b:59:40:90:41:18:cf:f7:b9:eb:ac:
5a:77:c5:d2:19:92:15:66:45:3a:79:99:ea:3e:e4:
15:08:a6:49:f8:dd:97:6c:51:d6:ea:39:64:01:c0:
eb:23:a7:e9:48:69:21:eb:c2:ba:e1:52:e0:1b:ff:
82:2e:e1:50:f0:5d:ea:63:3d:84:ac:e8:f1:c2:52:
99:c9:f7:bd:7e:f9:49:08:ed:0a:ab:52:26:45:1d:
03:5a:a6:31:81:b4:cc:f4:9b:44:77:70:c1:53:a2:
53:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:21:EA:02:BD:89:56:A6:78:0C:B5:95:44:E8:16:4F:69:3A:0C:2D
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/BiHqAr2JVqZ4DLWVROgWT2k6DC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
135.136.182.0/23
Signature Algorithm: sha256WithRSAEncryption
38:06:dc:32:ea:8f:5b:11:e1:26:1e:4e:9a:a3:87:9e:18:2a:
ab:61:7d:d2:21:b9:37:c1:91:62:1f:33:0a:6f:b1:cb:24:99:
4f:7b:16:c4:cd:39:cf:44:2f:be:74:13:97:6c:e9:13:6e:39:
08:1b:1c:ab:05:3a:97:21:c1:34:ba:e8:f6:8f:67:df:33:32:
59:8d:6c:3d:94:f3:14:1a:cc:8a:5b:9e:27:8d:3d:4e:af:6a:
25:b4:47:9d:37:b9:af:57:8e:9a:09:88:38:31:27:2b:58:9c:
0e:25:91:ec:c2:ac:a3:06:6d:3a:c4:8b:03:e9:b4:56:fc:13:
cd:3e:55:54:47:c5:81:a8:c2:d2:0d:53:29:89:26:38:5a:b6:
2e:ff:96:eb:e1:41:41:3a:60:ef:82:be:ba:c8:fd:93:e9:b8:
ae:d1:ad:73:58:ae:c4:e9:f0:7c:b6:4b:fb:ba:d8:f1:13:5d:
bc:db:6f:68:35:38:f5:fc:93:1e:ec:0d:11:65:17:ff:be:82:
57:f4:ea:c0:4c:08:af:f3:e1:96:52:39:da:b9:9a:e2:be:20:
19:6b:dd:6d:41:d0:ab:4b:b3:9d:c2:ac:35:66:9b:0d:5d:a8:
de:23:15:8d:99:7f:e3:30:7b:7a:7c:f2:ab:50:24:88:c4:b0:
02:8c:62:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:39:34 2026 by rpki-client