Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/bcwCGFPwXf31bIq89rbEGIocUMc.roa
File: bcwCGFPwXf31bIq89rbEGIocUMc.roa (raw, json)
Hash identifier: dRSJ9+0cAEXgEzuy4AvZh7K+qXp8iF82tQ6G/NRn4MQ=
Subject key identifier: 6D:CC:02:18:53:F0:5D:FD:F5:6C:8A:BC:F6:B6:C4:18:8A:1C:50:C7
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A1A6DEBF7F5C4730C18E478B056096497D
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/bcwCGFPwXf31bIq89rbEGIocUMc.roa
Signing time: Wed 04 Nov 2026 14:02:58 +0000
ROA not before: Wed 04 Nov 2026 14:02:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 62.76.224.0/24 maxlen: 24
62.76.230.0/24 maxlen: 24
185.72.10.0/24 maxlen: 24
192.124.190.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
193.124.206.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.87.7.0/24 maxlen: 24
194.87.59.0/24 maxlen: 24
195.133.24.0/23 maxlen: 23
195.133.40.0/23 maxlen: 23
195.133.42.0/24 maxlen: 24
195.133.50.0/23 maxlen: 23
195.133.58.0/24 maxlen: 24
195.133.92.0/23 maxlen: 23
212.193.25.0/24 maxlen: 24
212.193.26.0/23 maxlen: 23
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:de:bf:7f:5c:47:30:c1:8e:47:8b:05:60:96:49:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Nov 4 14:02:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6dcc021853f05dfdf56c8abcf6b6c4188a1c50c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:56:a2:3c:7e:fb:7f:d9:32:0e:5f:d4:59:4f:
36:e3:93:82:ba:f9:69:3c:ec:3f:db:1d:3d:72:2b:
d2:f9:2d:27:f9:8a:44:6d:8f:88:a7:9e:09:35:44:
63:fa:2b:c7:bf:84:22:4f:8b:52:66:1a:58:17:d1:
cf:46:7c:21:e6:ab:32:3e:cc:71:23:1e:d3:d6:64:
ff:5d:d6:ec:de:70:1d:ce:cd:8d:f1:0f:a2:27:7f:
a7:46:ec:31:c1:24:a0:1c:1c:4e:59:15:a6:fa:c2:
1c:27:d2:59:f5:5d:34:34:0c:77:93:78:39:cf:36:
62:2e:80:a5:53:68:f7:9e:df:84:b4:71:97:4d:13:
ab:16:23:66:2d:01:b9:96:99:23:13:16:a8:99:d1:
80:9c:6a:96:cc:9c:52:58:86:aa:7b:6a:9c:8f:43:
eb:f9:d8:dd:77:b0:69:59:48:d1:d9:3f:da:0f:c6:
a7:91:90:78:99:98:54:98:8c:31:6e:ec:cb:52:c8:
1b:a7:9e:4c:b5:eb:8e:4a:bb:c8:4b:51:1d:b9:c6:
49:d1:02:de:1d:6e:34:bd:3e:fb:4d:3b:98:aa:0f:
02:1c:a8:db:ff:19:41:64:00:53:9c:00:c7:d0:74:
e0:68:53:7d:18:49:0b:3b:27:97:8b:66:fa:9c:54:
72:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:CC:02:18:53:F0:5D:FD:F5:6C:8A:BC:F6:B6:C4:18:8A:1C:50:C7
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/bcwCGFPwXf31bIq89rbEGIocUMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.224.0/24
62.76.230.0/24
185.72.10.0/24
192.124.190.0/24
193.124.200.0/24
193.124.206.0/24
194.58.155.0/24
194.87.7.0/24
194.87.59.0/24
195.133.24.0/23
195.133.40.0-195.133.42.255
195.133.50.0/23
195.133.58.0/24
195.133.92.0/23
212.193.25.0-212.193.27.255
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
93:3d:92:a5:f0:fc:21:85:7d:b3:1c:7d:9d:dc:42:d3:50:d7:
df:f5:af:1f:c4:fe:62:cb:89:dd:46:3a:02:36:9f:c5:ba:a5:
13:c6:0c:2b:0d:d0:57:70:e4:e4:2f:f8:86:8d:58:ad:25:37:
e8:df:a0:cd:c5:01:08:91:0e:cc:6e:de:0e:37:16:37:2d:23:
95:3e:5c:99:82:df:e4:8d:2b:98:3c:01:3d:e0:85:c2:cc:6e:
91:99:46:ba:2e:ec:17:2c:b1:d1:48:7f:43:b5:4c:59:88:32:
8f:95:00:a2:71:ac:5d:1f:b1:21:12:3c:12:1f:97:0d:b4:54:
27:f3:0c:71:d1:76:f6:28:93:d7:bf:ff:3a:65:c2:36:68:27:
cc:57:8e:e1:34:4c:dc:dc:8f:a9:ed:dd:27:e2:1e:a9:d0:56:
09:e1:32:a3:b1:c7:cb:29:0b:aa:bd:fe:bb:57:41:2a:04:38:
56:c9:ab:43:6b:38:61:51:8f:01:b0:78:e7:82:60:62:e2:39:
a4:b1:2c:76:4c:9a:9f:8f:04:a2:09:bf:c1:e5:84:b2:c0:e4:
53:d4:92:ba:88:9f:a8:af:d2:bc:cf:f2:1b:54:b1:2a:0a:0b:
70:31:3a:5f:ad:cc:93:62:e4:ab:c0:af:bd:5c:09:0c:db:02:
c9:c1:1a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:56:42 2026 by rpki-client