Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/BmSU0HiQbXFsL_ePsdpL3O2Yk14.roa
File: BmSU0HiQbXFsL_ePsdpL3O2Yk14.roa (raw, json)
Hash identifier: PzTc3Zgs5SLAAoZKrUkVYWccpB7RvnFGjlGbIhuxvgU=
Subject key identifier: 06:64:94:D0:78:90:6D:71:6C:2F:F7:8F:B1:DA:4B:DC:ED:98:93:5E
Certificate issuer: /CN=88a62cf8100e8c1b475443fd94cd58d8ef2a33ae
Certificate serial: 01A0B3C6D3C501BC802797CE9E6CD5A1BB60
Authority key identifier: 88:A6:2C:F8:10:0E:8C:1B:47:54:43:FD:94:CD:58:D8:EF:2A:33:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iKYs-BAOjBtHVEP9lM1Y2O8qM64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/BmSU0HiQbXFsL_ePsdpL3O2Yk14.roa
Signing time: Fri 18 Sep 2026 09:09:07 +0000
ROA not before: Fri 18 Sep 2026 09:09:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201127
IP address blocks: 77.39.220.0/22 maxlen: 24
185.84.88.0/22 maxlen: 24
185.189.60.0/22 maxlen: 24
2a05:a3c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft
rsync://rpki.ripe.net/repository/DEFAULT/iKYs-BAOjBtHVEP9lM1Y2O8qM64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b3:c6:d3:c5:01:bc:80:27:97:ce:9e:6c:d5:a1:bb:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88a62cf8100e8c1b475443fd94cd58d8ef2a33ae
Validity
Not Before: Sep 18 09:09:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=066494d078906d716c2ff78fb1da4bdced98935e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f3:e5:09:9c:56:ad:65:aa:2c:04:c9:27:e9:
66:d4:c9:30:8a:67:04:a3:29:b7:57:8c:35:8f:cd:
73:68:32:2a:b9:12:87:f5:ec:48:6a:f5:01:c2:ca:
a8:71:a8:3b:40:ac:6e:f2:71:82:0f:d2:37:73:ad:
e4:31:93:09:10:fc:f1:58:d7:ec:74:f5:6b:80:9d:
28:6c:81:f5:02:bc:2c:06:ef:75:5d:4d:f7:6b:0b:
4f:9f:08:76:4e:06:fe:8e:9d:8a:1c:94:11:16:dd:
d3:19:e3:f6:b5:1b:d2:3c:21:48:54:82:04:d2:eb:
b4:19:e9:71:14:79:b1:9c:f6:2f:75:08:78:d9:5b:
e6:bf:cc:47:4f:d6:8a:05:f0:62:72:54:a6:49:bb:
f6:e5:4f:d9:66:c4:7f:38:66:6b:de:a9:29:92:f4:
1b:b2:a3:7c:78:0b:ec:93:ec:86:da:ae:89:c2:65:
80:3a:84:6c:23:9d:6d:2f:5f:b5:e4:3c:9a:13:50:
5a:3f:84:2d:cc:19:5e:64:b0:bd:a0:ff:45:aa:c0:
e4:44:4b:1f:09:c6:e0:d5:df:ab:20:45:da:3e:aa:
8b:5f:61:a3:35:9c:c7:56:ce:9d:0e:09:dc:3c:5d:
2a:13:b6:e2:7c:21:ef:71:24:0c:4c:1b:d2:f6:58:
4d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:64:94:D0:78:90:6D:71:6C:2F:F7:8F:B1:DA:4B:DC:ED:98:93:5E
X509v3 Authority Key Identifier:
keyid:88:A6:2C:F8:10:0E:8C:1B:47:54:43:FD:94:CD:58:D8:EF:2A:33:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKYs-BAOjBtHVEP9lM1Y2O8qM64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/BmSU0HiQbXFsL_ePsdpL3O2Yk14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.39.220.0/22
185.84.88.0/22
185.189.60.0/22
IPv6:
2a05:a3c0::/29
Signature Algorithm: sha256WithRSAEncryption
6b:23:95:11:58:5d:c5:13:cc:f9:fe:6b:3b:49:e9:75:94:7b:
d0:68:e4:4c:64:0d:2f:08:52:df:14:77:fe:bc:66:d2:d2:62:
e9:72:f6:df:4a:55:63:be:92:af:f3:06:48:a5:f2:b3:ee:80:
6e:94:79:47:16:54:1b:18:d4:9f:d5:d2:25:eb:4b:dd:58:f1:
09:a4:14:5c:c6:4c:c2:17:9f:7b:9b:02:88:67:2b:af:3e:3e:
2a:f5:3b:97:10:76:0c:50:c4:6b:4b:b6:2d:37:71:76:46:c0:
67:bc:ad:56:e1:d0:70:93:db:66:a5:c4:f3:e0:89:a2:b4:ab:
46:12:fe:ba:5d:6e:59:11:9e:3e:0a:ba:47:29:b8:3c:a7:4b:
f1:fd:f2:63:d2:10:38:5e:81:6d:0a:fe:3d:72:bf:f9:72:70:
4b:f3:57:59:9f:12:7f:58:c9:2a:b3:4d:59:c5:66:80:f5:d3:
99:fc:ff:f3:8d:59:c2:b6:da:c3:09:47:31:ac:62:98:86:97:
70:53:60:79:91:35:7c:51:37:97:2a:e5:6a:6a:10:f4:44:1e:
5d:1d:26:77:da:d1:38:c8:a9:d0:02:fc:de:97:29:37:d6:99:
ee:c3:c7:77:8a:ce:3b:6e:2f:1a:b3:39:97:45:77:a5:a5:0b:
27:7b:27:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:23:32 2026 by rpki-client