Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/bgsMEUV6MAr35gJkRXRjo4sYUt0.roa
File: bgsMEUV6MAr35gJkRXRjo4sYUt0.roa (raw, json)
Hash identifier: s7eQNSQHxGDZrLQLpZKQnt0koj3VFfSYVHeMDakKc5E=
Subject key identifier: 6E:0B:0C:11:45:7A:30:0A:F7:E6:02:64:45:74:63:A3:8B:18:52:DD
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 01A09F6324E04EA706EB13B49185E935371E
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/bgsMEUV6MAr35gJkRXRjo4sYUt0.roa
Signing time: Mon 14 Sep 2026 10:07:49 +0000
ROA not before: Mon 14 Sep 2026 10:07:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209087
IP address blocks: 5.154.50.0/23 maxlen: 24
5.154.54.0/23 maxlen: 24
5.154.84.0/23 maxlen: 24
5.154.96.0/23 maxlen: 24
84.236.248.0/23 maxlen: 24
88.148.76.0/23 maxlen: 24
88.148.98.0/23 maxlen: 24
94.24.32.0/23 maxlen: 24
94.24.46.0/23 maxlen: 24
109.167.120.0/22 maxlen: 24
217.61.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:63:24:e0:4e:a7:06:eb:13:b4:91:85:e9:35:37:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Sep 14 10:07:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e0b0c11457a300af7e60264457463a38b1852dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1a:07:e3:9a:d1:d8:a3:f9:a4:84:d5:0d:8a:
c3:d2:b1:c0:66:6f:7b:22:0f:f2:d3:c8:bc:83:64:
0a:47:c1:48:2b:99:60:db:6d:67:73:6c:9b:79:54:
3d:03:73:eb:1f:ae:55:56:9a:0a:91:53:0f:d8:70:
9a:a5:78:f8:10:0e:84:f8:b1:de:48:0b:86:44:46:
f6:65:3d:69:62:84:03:dd:c3:fd:b6:b7:2f:e3:93:
17:32:94:f7:cf:03:c6:c7:e5:f5:ef:62:23:17:72:
68:dd:40:94:56:81:bf:22:ad:38:39:75:db:23:d6:
e8:9f:fc:76:6a:77:6c:7b:13:51:40:57:11:2c:b0:
44:8a:07:0f:37:84:de:71:c6:4c:2b:86:de:5b:73:
a9:31:74:f6:38:b4:5d:c1:11:00:a9:72:76:db:e5:
e5:0f:85:cb:7e:f3:e6:11:67:3f:6d:55:c2:ad:0e:
dc:cd:33:27:bd:c9:20:a0:90:7f:47:ac:9b:23:48:
7d:60:d8:3b:cc:d4:c4:25:5e:40:b1:5b:1a:cd:10:
7d:3b:bd:f8:04:85:72:41:c3:14:43:35:42:e0:90:
32:76:07:27:02:d2:66:06:dd:cc:40:9f:c9:eb:db:
c8:69:87:b7:a1:48:4e:1d:72:5d:48:57:26:c5:51:
93:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0B:0C:11:45:7A:30:0A:F7:E6:02:64:45:74:63:A3:8B:18:52:DD
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/bgsMEUV6MAr35gJkRXRjo4sYUt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.50.0/23
5.154.54.0/23
5.154.84.0/23
5.154.96.0/23
84.236.248.0/23
88.148.76.0/23
88.148.98.0/23
94.24.32.0/23
94.24.46.0/23
109.167.120.0/22
217.61.80.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:18:5c:4b:58:73:7e:4d:40:32:70:42:68:16:85:35:14:e9:
92:42:ad:df:42:96:02:68:6e:58:cd:0f:29:23:5c:99:05:9e:
92:12:11:3a:be:c3:a7:a1:81:d6:7c:2f:c2:1b:ee:96:89:15:
ef:93:5c:ff:ad:38:50:60:cd:f7:c7:7a:47:ec:3f:e2:86:cf:
8f:3b:b4:2f:5d:d2:56:9d:7e:7a:a2:21:d1:4d:8f:4e:fc:0a:
d3:b1:c9:c7:e0:43:5d:42:53:c7:0f:a1:9b:b2:8d:eb:75:13:
e9:21:f7:ed:30:3b:5c:6a:74:db:30:a6:0b:c0:58:12:2a:e5:
1a:29:61:89:75:cf:e9:4f:cf:9d:69:42:36:bb:15:71:ea:4c:
73:0b:14:47:e7:a4:42:35:39:d3:cc:e0:b8:99:78:69:7a:1b:
3d:fe:18:a9:70:c7:96:be:e2:f4:ea:62:98:1c:14:d9:25:70:
74:c7:84:1f:9f:e2:e9:fd:0f:1c:19:ca:dd:3a:35:54:ad:5d:
23:89:48:92:9d:0c:36:06:b6:7a:83:35:20:2e:eb:8a:aa:be:
e9:d5:d8:4a:46:67:6a:5d:cd:6a:d3:ab:4a:c6:8c:68:0e:06:
f8:30:72:de:53:f5:96:18:68:08:6d:77:3d:8c:bf:57:a3:36:
d6:36:e4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:25:58 2026 by rpki-client