Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/bw9eVtm9c40YW7trBt_TVdzJ5mI.roa
File: bw9eVtm9c40YW7trBt_TVdzJ5mI.roa (raw, json)
Hash identifier: /NTrObUo6IQzapQ0ypDyGs61lXuL+fvbPRbe8yw3Glk=
Subject key identifier: 6F:0F:5E:56:D9:BD:73:8D:18:5B:BB:6B:06:DF:D3:55:DC:C9:E6:62
Certificate issuer: /CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Certificate serial: 01A0A9597562733BF3B6473FE3794BCA75E0
Authority key identifier: DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/bw9eVtm9c40YW7trBt_TVdzJ5mI.roa
Signing time: Wed 16 Sep 2026 08:33:27 +0000
ROA not before: Wed 16 Sep 2026 08:33:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24875
IP address blocks: 2.58.21.0/24 maxlen: 24
45.129.176.0/22 maxlen: 22
46.182.108.0/24 maxlen: 24
80.89.224.0/20 maxlen: 24
80.89.236.0/23 maxlen: 23
89.105.192.0/19 maxlen: 19
89.105.192.0/20 maxlen: 20
89.105.208.0/20 maxlen: 20
185.80.232.0/22 maxlen: 22
185.80.232.0/23 maxlen: 23
185.80.234.0/23 maxlen: 23
185.147.12.0/22 maxlen: 24
2001:968::/29 maxlen: 29
2001:968::/32 maxlen: 32
2001:968:15::/48 maxlen: 48
2001:968:100::/48 maxlen: 48
2001:968:675::/48 maxlen: 48
2001:968:676::/48 maxlen: 48
2001:968:677::/48 maxlen: 48
2001:968:678::/48 maxlen: 48
2001:968:679::/48 maxlen: 48
2001:968:780::/48 maxlen: 48
2001:968:1007::/48 maxlen: 48
2001:968:1400::/48 maxlen: 48
2001:968:2001::/48 maxlen: 48
2001:968:2003::/48 maxlen: 48
2001:968:2004::/48 maxlen: 48
2001:968:2005::/48 maxlen: 48
2001:968:2006::/48 maxlen: 48
2001:968:2007::/48 maxlen: 48
2001:968:2008::/48 maxlen: 48
2001:968:2010::/48 maxlen: 48
2001:968:2013::/48 maxlen: 48
2001:968:2015::/48 maxlen: 48
2001:968:2016::/48 maxlen: 48
2001:968:2017::/48 maxlen: 48
2001:968:2019::/48 maxlen: 48
2001:968:2020::/48 maxlen: 48
2001:968:2021::/48 maxlen: 48
2001:968:2022::/48 maxlen: 48
2001:968:2023::/48 maxlen: 48
2001:968:2024::/48 maxlen: 48
2001:968:2025::/48 maxlen: 48
2001:968:2026::/48 maxlen: 48
2001:968:2027::/48 maxlen: 48
2001:968:2032::/48 maxlen: 48
2001:968:2035::/48 maxlen: 48
2001:968:2036::/48 maxlen: 48
2001:968:2037::/48 maxlen: 48
2001:968:2062::/48 maxlen: 48
2001:968:2101::/48 maxlen: 48
2001:968:2102::/48 maxlen: 48
2001:968:2103::/48 maxlen: 48
2001:968:2104::/48 maxlen: 48
2001:968:2106::/48 maxlen: 48
2001:968:2107::/48 maxlen: 48
2001:968:2108::/48 maxlen: 48
2001:968:2109::/48 maxlen: 48
2001:968:2110::/48 maxlen: 48
2001:968:2111::/48 maxlen: 48
2001:968:2112::/48 maxlen: 48
2001:968:2117::/48 maxlen: 48
2001:968:2118::/48 maxlen: 48
2001:968:2119::/48 maxlen: 48
2001:968:2127::/48 maxlen: 48
2001:968:2128::/48 maxlen: 48
2001:968:2129::/48 maxlen: 48
2001:968:2130::/48 maxlen: 48
2001:968:2131::/48 maxlen: 48
2001:968:2132::/48 maxlen: 48
2001:968:2133::/48 maxlen: 48
2001:968:2134::/48 maxlen: 48
2001:968:2135::/48 maxlen: 48
2001:968:2137::/48 maxlen: 48
2001:968:2138::/48 maxlen: 48
2001:968:2139::/48 maxlen: 48
2001:968:2140::/48 maxlen: 48
2001:968:2143::/48 maxlen: 48
2001:968:2144::/48 maxlen: 48
2001:968:2145::/48 maxlen: 48
2001:968:2146::/48 maxlen: 48
2001:968:2147::/48 maxlen: 48
2001:968:2148::/48 maxlen: 48
2001:968:2150::/48 maxlen: 48
2001:968:2151::/48 maxlen: 48
2001:968:2152::/48 maxlen: 48
2001:968:2153::/48 maxlen: 48
2001:968:2155::/48 maxlen: 48
2001:968:2158::/48 maxlen: 48
2001:968:2160::/48 maxlen: 48
2001:968:2162::/48 maxlen: 48
2001:968:2164::/48 maxlen: 48
2001:968:2171::/48 maxlen: 48
2001:968:2172::/48 maxlen: 48
2001:968:2173::/48 maxlen: 48
2001:968:2174::/48 maxlen: 48
2001:968:2177::/48 maxlen: 48
2001:968:2178::/48 maxlen: 48
2001:968:2179::/48 maxlen: 48
2001:968:2180::/48 maxlen: 48
2001:968:2181::/48 maxlen: 48
2001:968:2182::/48 maxlen: 48
2001:968:2184::/48 maxlen: 48
2001:968:2185::/48 maxlen: 48
2001:968:2186::/48 maxlen: 48
2001:968:2188::/48 maxlen: 48
2001:968:2189::/48 maxlen: 48
2001:968:2190::/48 maxlen: 48
2001:968:2191::/48 maxlen: 48
2001:968:2192::/48 maxlen: 48
2001:968:2193::/48 maxlen: 48
2001:968:2194::/48 maxlen: 48
2001:968:2195::/48 maxlen: 48
2001:968:2197::/48 maxlen: 48
2001:968:2198::/48 maxlen: 48
2001:968:2226::/48 maxlen: 48
2001:968:2227::/48 maxlen: 48
2001:968:2412::/48 maxlen: 48
2001:968:3295::/48 maxlen: 48
2a00:11f8::/29 maxlen: 29
2a00:11f8::/32 maxlen: 32
2a07:5440::/29 maxlen: 29
2a07:5440::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:59:75:62:73:3b:f3:b6:47:3f:e3:79:4b:ca:75:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc90e0aee1ecc31066cb744f8a7feedefb3f7930
Validity
Not Before: Sep 16 08:33:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f0f5e56d9bd738d185bbb6b06dfd355dcc9e662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:33:cc:00:20:b8:d8:4b:2c:78:bf:10:50:ad:
9f:81:a6:39:c0:b4:a0:ac:e1:30:f5:16:38:97:0a:
5b:09:84:ff:a8:82:1d:4f:a9:47:ac:df:a5:45:3a:
23:fb:8b:f0:22:bc:d9:e1:ec:49:9b:d0:cf:5a:39:
d2:6e:18:d8:6a:e7:62:20:02:23:34:8d:76:3e:9d:
52:b4:17:25:2c:39:9c:9a:d7:88:a8:7b:31:41:a9:
a5:b6:7a:80:2d:de:0c:d3:4e:fc:d2:4f:62:6a:4e:
d8:25:11:a1:f6:5f:7c:ed:bd:e1:9a:a6:d8:36:25:
9a:b4:5f:8b:a4:97:79:f3:61:ac:30:90:4f:01:c1:
b4:92:cd:d8:7b:2e:71:59:3a:6f:f6:19:f8:b6:cb:
09:db:26:0f:5b:0f:e5:95:5b:28:20:7b:d9:7c:5f:
39:96:f1:02:9c:ad:b2:5b:d0:4a:1a:99:f1:4b:fc:
f2:6b:59:12:1b:4e:72:98:03:ae:97:1e:ce:3c:76:
12:71:0d:b0:86:f0:b7:b8:4d:19:df:fc:87:9d:f5:
6d:f3:1a:a7:df:58:45:5d:ae:a9:3c:c5:80:a2:b4:
fc:b9:75:51:c8:30:00:1d:69:92:64:6b:45:8d:48:
88:19:6a:7e:27:d1:11:8d:45:d2:0f:dd:1d:58:7f:
0f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0F:5E:56:D9:BD:73:8D:18:5B:BB:6B:06:DF:D3:55:DC:C9:E6:62
X509v3 Authority Key Identifier:
keyid:DC:90:E0:AE:E1:EC:C3:10:66:CB:74:4F:8A:7F:EE:DE:FB:3F:79:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JDgruHswxBmy3RPin_u3vs_eTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/bw9eVtm9c40YW7trBt_TVdzJ5mI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/87b267-49c2-4269-9f66-00bcd9b91c1b/1/3JDgruHswxBmy3RPin_u3vs_eTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.21.0/24
45.129.176.0/22
46.182.108.0/24
80.89.224.0/20
89.105.192.0/19
185.80.232.0/22
185.147.12.0/22
IPv6:
2001:968::/29
2a00:11f8::/29
2a07:5440::/29
Signature Algorithm: sha256WithRSAEncryption
a9:bb:05:32:46:f3:16:8e:95:48:61:6d:ba:99:eb:4c:bd:38:
d7:b4:d8:52:3f:a9:56:91:f9:fb:71:de:39:82:66:d4:80:a6:
c8:ef:09:ab:89:c0:ef:f5:e0:3e:2e:9d:e2:88:36:94:4d:20:
37:ac:09:21:65:18:73:8b:13:47:d1:10:5b:e0:18:ad:a5:2d:
2b:ef:fc:dc:35:b5:e5:70:9a:87:90:00:b5:f8:40:98:c5:4b:
98:25:8e:5d:22:a0:3e:ec:c2:20:d6:24:a7:ac:04:04:11:04:
31:d7:5b:0a:84:dc:4d:78:99:bc:47:77:67:84:d8:51:88:78:
04:8b:c3:99:e0:c5:d8:24:6b:75:88:af:4f:b1:8e:7d:b2:5f:
1a:31:e6:ca:34:20:3d:f2:cf:b6:65:19:4b:3b:7e:8a:2e:1c:
f4:aa:76:99:2f:69:6d:9c:9f:7a:df:49:02:de:78:6a:2f:78:
4b:ba:a9:84:ed:1c:22:43:6d:6f:86:62:29:3e:60:81:a0:8a:
20:d5:55:07:82:bc:df:98:c9:78:08:26:53:a1:10:a7:b8:a2:
c2:46:44:58:ac:32:a0:4c:01:47:ef:b1:1f:cc:94:0b:13:34:
01:db:17:b5:83:91:64:a1:bf:24:28:a0:ce:a4:de:42:21:cc:
3c:95:85:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:15:13 2026 by rpki-client