Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/BHZgLw94teiGLK7JAQ5jFLZXddI.roa
File: BHZgLw94teiGLK7JAQ5jFLZXddI.roa (raw, json)
Hash identifier: rJZ+8HW6SrcllJz7BMr8mKkcsE5wJfVB5OD3+D0naIw=
Subject key identifier: 04:76:60:2F:0F:78:B5:E8:86:2C:AE:C9:01:0E:63:14:B6:57:75:D2
Certificate issuer: /CN=a65f1f991f4eecd37dc6bba4e3f5b35c548f9283
Certificate serial: 019F23688E72B68E3DB5D07095759C591AA0
Authority key identifier: A6:5F:1F:99:1F:4E:EC:D3:7D:C6:BB:A4:E3:F5:B3:5C:54:8F:92:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pl8fmR9O7NN9xruk4_WzXFSPkoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/BHZgLw94teiGLK7JAQ5jFLZXddI.roa
Signing time: Thu 02 Jul 2026 15:18:02 +0000
ROA not before: Thu 02 Jul 2026 15:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49941
IP address blocks: 185.98.248.0/24 maxlen: 24
185.98.249.0/24 maxlen: 24
185.98.250.0/24 maxlen: 24
185.98.251.0/24 maxlen: 24
193.104.52.0/24 maxlen: 24
194.107.127.0/24 maxlen: 24
2a06:cdc0:2006::/48 maxlen: 48
2a06:cdc0:2007::/48 maxlen: 48
2a06:cdc0:2008::/48 maxlen: 48
2a06:cdc0:2009::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/pl8fmR9O7NN9xruk4_WzXFSPkoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/pl8fmR9O7NN9xruk4_WzXFSPkoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pl8fmR9O7NN9xruk4_WzXFSPkoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:8e:72:b6:8e:3d:b5:d0:70:95:75:9c:59:1a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a65f1f991f4eecd37dc6bba4e3f5b35c548f9283
Validity
Not Before: Jul 2 15:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0476602f0f78b5e8862caec9010e6314b65775d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:38:6d:39:0a:63:0e:9c:6f:c7:26:94:ae:3f:
96:f6:b6:49:c7:90:43:92:13:20:27:34:74:5a:f0:
eb:c9:82:a5:f3:74:b9:69:01:34:d7:08:36:ef:b0:
05:48:91:5e:8a:f7:31:2e:00:2e:5d:91:eb:bb:e8:
30:81:72:60:22:4e:a8:02:02:9c:8d:23:49:73:f4:
f6:69:82:da:6d:ba:54:39:9c:54:dc:fb:8b:74:f9:
a9:64:a9:4c:5d:85:fc:ad:43:57:42:7d:1a:fb:c8:
9c:b6:6a:58:14:01:bb:f0:ad:94:87:70:d0:87:18:
01:3e:74:ef:8f:99:7a:b6:35:a3:98:44:b6:d4:f4:
57:08:70:53:53:3c:4b:7b:2c:96:31:3f:17:c6:04:
2d:f0:79:50:de:f8:0a:c0:74:35:b7:80:bb:44:bc:
59:18:55:fe:dc:47:03:c8:cc:d0:49:12:1b:47:8b:
04:95:c0:e9:5a:e7:72:9a:24:c6:58:46:9b:11:90:
bb:ad:cc:da:2d:be:5c:a7:e7:ad:eb:f9:8b:60:a6:
ab:9c:4a:4e:5a:6a:62:4f:ba:6f:f0:55:4c:3f:22:
4c:dd:b2:fb:e1:3e:53:4b:27:fb:95:65:28:00:3c:
6b:b2:bf:c5:23:b6:35:6b:03:b9:4c:d1:1b:e8:2f:
07:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:76:60:2F:0F:78:B5:E8:86:2C:AE:C9:01:0E:63:14:B6:57:75:D2
X509v3 Authority Key Identifier:
keyid:A6:5F:1F:99:1F:4E:EC:D3:7D:C6:BB:A4:E3:F5:B3:5C:54:8F:92:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pl8fmR9O7NN9xruk4_WzXFSPkoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/BHZgLw94teiGLK7JAQ5jFLZXddI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fc2044-61cf-44ba-abae-c2b0df7f43bd/1/pl8fmR9O7NN9xruk4_WzXFSPkoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.248.0/22
193.104.52.0/24
194.107.127.0/24
IPv6:
2a06:cdc0:2006::-2a06:cdc0:2009:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
ae:11:db:40:c7:36:b1:9e:e9:08:d7:71:5a:98:5e:fa:d4:59:
82:31:19:1e:bd:ed:75:ba:c5:28:aa:1a:33:2b:5b:ea:14:5e:
92:10:f6:e1:fb:6c:cd:eb:cf:e6:59:9a:93:67:38:a2:b0:b5:
6b:b2:c4:7e:69:e3:5d:2a:65:9a:fd:2e:29:0c:56:18:bc:2e:
38:a8:1e:74:70:7c:1e:ae:4a:f4:7f:07:fd:2d:0e:03:96:0c:
91:93:91:54:0e:dc:81:eb:37:0b:76:55:c7:f3:21:e7:f0:16:
da:ae:b2:47:ea:ab:68:36:d3:f4:fc:cc:05:36:2b:8d:dc:08:
8c:2a:f1:06:39:78:a6:d5:9b:c3:df:67:a2:94:c7:1d:21:31:
a4:94:7c:e4:d4:8f:c7:4b:65:70:1c:87:f1:6d:7c:9c:e1:bf:
12:bf:13:e2:47:ac:41:6b:7f:f4:e3:b3:3d:e4:39:90:f2:50:
e6:f6:a1:83:e0:8c:4f:34:58:98:0c:2f:6d:1f:e8:bb:82:cd:
23:49:aa:54:3c:39:0e:f5:bd:d0:ca:9d:cb:4c:3f:59:8b:c0:
12:5d:c6:8b:ac:a2:b3:75:13:29:47:95:95:f4:be:6f:59:89:
13:ec:86:d2:99:f4:5e:86:14:f4:f1:46:69:c9:10:20:4a:a2:
b0:db:08:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:50:12 2026 by rpki-client