Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/BEVlDcor43VAa1g0ysAQVW11jnI.roa
File: BEVlDcor43VAa1g0ysAQVW11jnI.roa (raw, json)
Hash identifier: rH2U4tFo6BG7+FF49K5fvFq8MR/6cLhyKObynLMrdMg=
Subject key identifier: 04:45:65:0D:CA:2B:E3:75:40:6B:58:34:CA:C0:10:55:6D:75:8E:72
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 019E8C06A89C181AA39997DF75AA06AA2020
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/BEVlDcor43VAa1g0ysAQVW11jnI.roa
Signing time: Wed 03 Jun 2026 05:48:27 +0000
ROA not before: Wed 03 Jun 2026 05:48:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31500
IP address blocks: 83.243.69.0/24 maxlen: 24
91.108.40.0/24 maxlen: 24
91.108.50.0/24 maxlen: 24
94.124.180.0/23 maxlen: 23
94.124.182.0/24 maxlen: 24
94.124.183.0/24 maxlen: 24
95.140.80.0/20 maxlen: 20
95.140.80.0/24 maxlen: 32
95.140.81.0/24 maxlen: 24
95.140.82.0/24 maxlen: 24
95.140.83.0/24 maxlen: 24
95.140.88.0/24 maxlen: 24
95.140.89.0/24 maxlen: 24
95.140.90.0/24 maxlen: 24
95.140.91.0/24 maxlen: 24
95.140.93.0/24 maxlen: 24
95.140.95.0/24 maxlen: 24
95.161.128.0/24 maxlen: 24
95.161.240.0/20 maxlen: 24
109.239.128.0/24 maxlen: 24
109.239.129.0/24 maxlen: 24
109.239.130.0/24 maxlen: 24
109.239.130.128/25 maxlen: 25
109.239.131.0/24 maxlen: 24
109.239.132.0/24 maxlen: 24
109.239.133.0/24 maxlen: 24
109.239.134.0/24 maxlen: 24
109.239.135.0/24 maxlen: 24
109.239.136.0/23 maxlen: 23
109.239.138.0/24 maxlen: 24
109.239.139.0/24 maxlen: 24
109.239.140.0/24 maxlen: 24
109.239.141.0/24 maxlen: 24
109.239.142.0/24 maxlen: 24
109.239.143.0/24 maxlen: 24
178.18.228.0/24 maxlen: 24
178.18.229.0/24 maxlen: 24
178.18.231.0/24 maxlen: 24
178.18.232.0/24 maxlen: 24
185.26.75.0/24 maxlen: 24
2001:b28::/32 maxlen: 32
2001:b28:4::/48 maxlen: 48
2001:b28:7b0c::/48 maxlen: 48
2001:b28:9999::/48 maxlen: 48
2001:b28:9a9c::/48 maxlen: 48
2001:b28:a451::/48 maxlen: 48
2001:b28:ffff::/48 maxlen: 48
2a03:5f80::/46 maxlen: 46
2a03:5f80:2:10::/64 maxlen: 64
2a03:5f80:8::/46 maxlen: 46
2a03:5f80:a::/48 maxlen: 48
2a03:5f80:245::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8c:06:a8:9c:18:1a:a3:99:97:df:75:aa:06:aa:20:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Jun 3 05:48:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0445650dca2be375406b5834cac010556d758e72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:cb:9d:c0:7e:c6:0c:a8:32:5d:70:88:e4:f8:
9d:10:70:ca:20:91:5d:28:a8:9b:96:8a:90:d1:8e:
19:69:6d:73:22:8f:a6:90:0a:7a:fb:0f:d8:7b:29:
60:df:c7:da:28:e5:91:a3:7b:be:0d:71:81:a7:23:
9a:23:37:7e:ce:8b:5d:f7:d4:d5:4d:d5:69:31:c1:
3a:b4:a6:66:d0:b6:df:de:4c:f4:67:fa:b5:ab:37:
4b:df:bc:c7:9e:71:4b:e6:33:99:31:50:8d:df:ff:
ed:18:bc:33:56:0d:57:d5:5d:7d:3f:bc:85:6a:59:
83:0c:fb:9f:c5:b5:43:47:87:00:13:e5:18:3e:c3:
38:b4:62:60:53:a5:02:7a:72:83:d2:6d:14:d3:e6:
8d:90:df:9b:42:c9:43:ac:6f:d4:84:00:50:58:54:
92:99:e1:f6:9c:87:e4:05:16:b3:44:03:cd:3b:e0:
c7:f4:3a:e7:3f:ce:c7:d2:fc:2f:9a:2c:6d:67:e6:
c1:23:4f:7e:16:0e:a5:99:ca:17:e2:9a:e6:2c:e2:
fc:41:69:fa:62:f4:62:71:27:8b:e7:92:17:01:d5:
10:cd:6e:4e:03:ff:72:2d:5c:d6:b0:29:d5:58:9f:
7d:24:35:8f:27:93:2c:8a:e4:d9:f7:43:25:45:ee:
3f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:45:65:0D:CA:2B:E3:75:40:6B:58:34:CA:C0:10:55:6D:75:8E:72
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/BEVlDcor43VAa1g0ysAQVW11jnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.243.69.0/24
91.108.40.0/24
91.108.50.0/24
94.124.180.0/22
95.140.80.0/20
95.161.128.0/24
95.161.240.0/20
109.239.128.0/20
178.18.228.0/23
178.18.231.0-178.18.232.255
185.26.75.0/24
IPv6:
2001:b28::/32
2a03:5f80::/46
2a03:5f80:8::/46
2a03:5f80:245::/48
Signature Algorithm: sha256WithRSAEncryption
27:71:58:36:01:5c:e5:64:90:eb:02:0d:ec:32:52:ea:3d:87:
09:ef:bc:2a:34:06:13:68:f7:6c:53:6b:9e:94:f1:fd:a0:7c:
40:d4:15:ed:e1:3b:ed:92:4b:a2:5b:0a:09:af:02:d0:bf:82:
c0:76:28:78:a5:ef:f3:8d:14:ee:d0:bd:d1:88:3a:64:cd:7e:
eb:14:11:59:6b:93:a1:d3:50:20:40:24:d1:4e:06:de:89:56:
54:3f:d2:72:3e:a2:81:93:2c:c0:1a:9f:24:a3:f7:8a:4d:33:
9d:07:1d:72:48:a2:99:48:ce:1c:6b:be:bb:b4:59:8e:78:2c:
6b:55:08:7f:fd:98:3a:16:6f:78:cb:6f:ba:6e:e4:7b:4e:99:
71:9b:6d:ba:8d:55:61:ba:d1:5f:31:09:c2:65:04:d2:56:d3:
ec:62:da:d5:18:88:ef:39:83:25:27:f4:da:67:9b:72:36:d2:
76:90:f2:1c:8f:5d:ee:94:55:6f:53:0e:4d:fe:47:23:64:f3:
9f:c2:7b:13:fc:fa:6b:c9:d7:2f:28:00:aa:d3:da:fa:07:ce:
f9:bc:96:97:f5:c3:f5:21:3e:f5:5f:9f:7f:83:b9:1c:13:78:
7f:50:04:74:bc:e5:39:7f:97:5b:6e:aa:ba:67:ec:31:34:b9:
2d:eb:56:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:03:25 2026 by rpki-client