Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/BheGXFkBifoYTh6TueqxOEyOs-s.roa
File: BheGXFkBifoYTh6TueqxOEyOs-s.roa (raw, json)
Hash identifier: LDgWozy8wmcMMsdbbi10Neqvku20kgLBvbOhauQzJ/E=
Subject key identifier: 06:17:86:5C:59:01:89:FA:18:4E:1E:93:B9:EA:B1:38:4C:8E:B3:EB
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 01A09E8453DF704F9D0248F27EA98F471CBA
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/BheGXFkBifoYTh6TueqxOEyOs-s.roa
Signing time: Mon 14 Sep 2026 06:04:27 +0000
ROA not before: Mon 14 Sep 2026 06:04:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34369
IP address blocks: 37.148.0.0/17 maxlen: 24
37.202.128.0/18 maxlen: 24
37.202.248.0/23 maxlen: 24
37.202.250.0/24 maxlen: 24
37.202.252.0/22 maxlen: 24
84.241.0.0/18 maxlen: 24
94.182.109.0/24 maxlen: 24
94.182.151.0/24 maxlen: 24
2a0e:38::/30 maxlen: 30
2a0e:3c:ffe0::/43 maxlen: 43
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 11:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:84:53:df:70:4f:9d:02:48:f2:7e:a9:8f:47:1c:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Sep 14 06:04:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0617865c590189fa184e1e93b9eab1384c8eb3eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:66:89:b1:a2:cb:b4:ab:46:54:66:8f:05:6a:
20:56:b4:d0:7e:af:40:05:aa:86:8e:1f:c8:73:f9:
9e:da:93:1b:19:fd:06:e2:d4:df:ff:97:10:17:1e:
27:ba:d5:fb:00:cb:0a:20:60:87:2e:57:2e:12:c0:
7e:61:59:81:5a:be:b5:24:14:d7:fa:f6:13:c9:9f:
9d:00:ff:bd:e7:4c:05:e1:68:18:be:fe:31:9a:24:
fc:7f:49:ec:e1:53:a6:b5:03:e2:50:f8:d7:ee:d3:
24:79:8f:96:93:98:a1:44:04:d8:63:29:2b:e1:16:
b6:30:af:6c:0e:0d:ef:a3:ee:b9:54:c3:ba:c1:e3:
b9:65:ad:33:d0:32:00:df:fb:99:8f:d1:50:80:a4:
fe:85:b7:7e:3a:87:49:a1:20:9c:45:72:0a:7f:43:
9a:3d:31:72:9c:79:a7:57:3e:9a:16:76:05:83:78:
84:08:c7:19:fd:e5:27:5c:1f:f9:1a:fb:32:ba:c4:
b9:cd:19:bd:35:1c:1e:ba:dc:14:48:a6:84:8f:a3:
cf:b6:ba:ea:d1:dc:45:96:73:a0:fd:bf:39:e3:61:
9d:66:bc:f5:14:74:a3:50:e6:4a:75:f8:76:73:dc:
ea:c7:85:d2:ee:27:0e:71:98:ce:07:97:5f:ee:85:
19:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:17:86:5C:59:01:89:FA:18:4E:1E:93:B9:EA:B1:38:4C:8E:B3:EB
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/BheGXFkBifoYTh6TueqxOEyOs-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.0.0/17
37.202.128.0/18
37.202.248.0-37.202.250.255
37.202.252.0/22
84.241.0.0/18
94.182.109.0/24
94.182.151.0/24
IPv6:
2a0e:38::/30
2a0e:3c:ffe0::/43
Signature Algorithm: sha256WithRSAEncryption
b5:07:59:ae:2f:e3:92:62:6b:5f:ef:ee:d2:52:22:d5:b3:d6:
a9:98:84:3a:fa:c4:9b:1e:1b:74:36:15:8b:44:e8:b5:20:f3:
92:64:63:6c:8e:68:d7:57:8a:38:22:37:cc:c5:73:fc:57:e6:
7f:2f:27:a7:97:8f:f1:6c:40:70:64:93:22:e0:f9:45:35:67:
ac:cd:f3:07:53:62:45:5e:21:5d:f4:cf:5d:15:ab:b3:f7:da:
14:97:70:32:81:82:f0:a5:d6:fb:f2:4b:9e:b0:ce:18:a0:ff:
21:10:54:5f:a7:19:30:6a:23:35:18:7f:c5:39:b4:9d:3e:06:
14:a1:a5:c7:70:1e:80:9e:80:76:67:86:01:e2:a7:67:1d:7d:
72:0f:77:b9:e9:97:71:5c:3a:56:28:ad:1e:67:05:62:d5:78:
12:f1:65:d1:48:ba:f5:06:d1:59:9f:87:43:c0:62:0a:40:c2:
b7:84:48:90:7e:1d:f4:fe:f4:cc:4d:20:78:ba:9e:51:5c:b9:
63:b7:f3:83:18:83:f6:dc:42:5c:23:a4:d7:e1:5e:cc:f3:6a:
40:cc:0d:73:53:f1:cf:b4:44:0f:43:12:16:76:c9:04:78:64:
95:b9:74:a1:aa:5a:9f:ab:4d:bf:53:83:31:40:67:68:61:f2:
c0:d5:19:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:32:47 2026 by rpki-client