Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/Bg8twJPEwYB0D5B_GtWNKpxTLS0.roa
File: Bg8twJPEwYB0D5B_GtWNKpxTLS0.roa (raw, json)
Hash identifier: ynqd0KCyFtJRjOR/0svNxwFZHTwpowqTTrTl+O/mp0E=
Subject key identifier: 06:0F:2D:C0:93:C4:C1:80:74:0F:90:7F:1A:D5:8D:2A:9C:53:2D:2D
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 01A0C8E32FE59CE608A6C5C2FD7ABA6364BA
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/Bg8twJPEwYB0D5B_GtWNKpxTLS0.roa
Signing time: Tue 22 Sep 2026 11:32:07 +0000
ROA not before: Tue 22 Sep 2026 11:32:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 77.246.221.0/24 maxlen: 24
88.80.142.0/24 maxlen: 24
88.80.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 20:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:e3:2f:e5:9c:e6:08:a6:c5:c2:fd:7a:ba:63:64:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Sep 22 11:32:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=060f2dc093c4c180740f907f1ad58d2a9c532d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4b:b4:91:13:db:3f:e8:72:fc:d8:7f:e8:33:
bd:d5:4b:30:5d:6b:d5:f8:0c:00:cc:00:24:0c:f3:
28:f7:9b:6e:89:83:34:a0:be:9e:f1:00:f0:5e:9c:
ad:12:9e:54:be:2a:fe:94:a0:3c:ee:78:41:68:9a:
68:16:9d:06:0c:d5:a0:09:31:56:55:59:4b:fa:c1:
82:a5:dc:24:e1:9c:80:19:78:05:4e:65:d5:11:dc:
0e:71:49:15:f2:3c:4c:2c:06:a0:bd:28:de:04:e4:
39:f3:4b:8d:10:de:eb:30:2f:2a:c2:67:4d:6b:40:
6c:f2:a3:d7:57:61:c2:e0:c9:fc:f5:0a:d0:28:b7:
d1:8b:0f:80:0f:3b:67:0b:40:af:61:70:d9:49:a3:
e1:0d:21:f2:41:28:0b:d4:1f:5c:88:ff:ce:de:ce:
50:25:c2:ac:27:20:72:58:46:e3:5d:59:65:cf:e4:
4d:3b:b3:bc:5c:36:e0:c4:ee:42:89:4b:8e:11:d6:
09:74:c9:f6:e2:88:4f:7c:79:d9:e5:fd:a3:1a:c9:
d0:a6:7b:8a:0d:55:1b:dc:b0:4a:40:66:8a:77:a2:
59:66:97:44:75:d4:e1:65:80:1a:b6:81:2c:5d:cf:
14:7c:78:25:74:68:0d:9c:8f:d9:14:59:39:68:2b:
a6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:0F:2D:C0:93:C4:C1:80:74:0F:90:7F:1A:D5:8D:2A:9C:53:2D:2D
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/Bg8twJPEwYB0D5B_GtWNKpxTLS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.221.0/24
88.80.142.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:f5:3a:ac:a0:02:f1:0c:52:a2:da:5f:b2:ef:19:af:d6:d6:
fa:d8:e4:54:5f:89:7b:e0:04:38:7d:e8:9a:03:50:6b:12:9c:
7d:30:58:0c:bb:9c:22:8e:7e:e2:00:ec:63:cb:ad:98:4c:d4:
92:0b:7a:8f:bc:a4:2a:b4:53:99:01:89:33:c2:3b:67:d9:d9:
d9:f8:14:bb:1f:bb:0f:46:3f:6a:93:8c:8b:59:49:43:61:c3:
b3:af:9d:5c:20:9b:9f:76:05:ca:ee:34:1f:5e:c6:07:33:ec:
8e:55:ee:d0:24:3f:67:a2:a4:f0:70:1b:d2:4a:1c:54:dc:13:
3a:56:63:a8:57:e0:bb:96:e1:fa:7d:a4:01:32:10:eb:38:c8:
32:50:2a:03:62:3c:3f:ae:f7:ed:c7:2c:0f:b2:aa:b5:04:30:
d2:99:09:d3:e7:05:e3:6d:15:95:ec:b2:00:ac:c6:06:e8:f3:
00:ed:2a:d1:89:25:21:32:33:52:24:28:6b:be:9f:36:61:fd:
d6:cb:38:77:ca:af:b3:b4:4b:cc:88:e8:37:3b:c8:c6:ca:fc:
e4:5e:d9:d0:e8:76:b7:0c:35:65:ec:67:40:64:f2:66:46:c6:
fb:3a:14:ec:e6:6d:4b:7a:41:c6:7b:b9:e5:4a:ae:f9:fc:7f:
cd:51:88:1a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaDI4y/lnOYIpsXC/Xq6Y2S6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2
MzFiZmIwHhcNMjYwOTIyMTEzMjA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjBmMmRjMDkzYzRjMTgwNzQwZjkwN2YxYWQ1OGQyYTljNTMyZDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUu0kRPbP+hy/Nh/6DO91UswXWvV
+AwAzAAkDPMo95tuiYM0oL6e8QDwXpytEp5Uvir+lKA87nhBaJpoFp0GDNWgCTFW
VVlL+sGCpdwk4ZyAGXgFTmXVEdwOcUkV8jxMLAagvSjeBOQ580uNEN7rMC8qwmdN
a0Bs8qPXV2HC4Mn89QrQKLfRiw+ADztnC0CvYXDZSaPhDSHyQSgL1B9ciP/O3s5Q
JcKsJyByWEbjXVllz+RNO7O8XDbgxO5CiUuOEdYJdMn24ohPfHnZ5f2jGsnQpnuK
DVUb3LBKQGaKd6JZZpdEddThZYAatoEsXc8UfHgldGgNnI/ZFFk5aCumAwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAYPLcCTxMGAdA+QfxrVjSqcUy0tMB8GA1UdIwQY
MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt
YWI4ZjFmMzM4N2VlLzEvQmc4dHdKUEV3WUIwRDVCX0d0V05LcHhUTFMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl
LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATfbdAwQB
WFCOMA0GCSqGSIb3DQEBCwUAA4IBAQAt9TqsoALxDFKi2l+y7xmv1tb62ORUX4l7
4AQ4feiaA1BrEpx9MFgMu5wijn7iAOxjy62YTNSSC3qPvKQqtFOZAYkzwjtn2dnZ
+BS7H7sPRj9qk4yLWUlDYcOzr51cIJufdgXK7jQfXsYHM+yOVe7QJD9noqTwcBvS
ShxU3BM6VmOoV+C7luH6faQBMhDrOMgyUCoDYjw/rvftxywPsqq1BDDSmQnT5wXj
bRWV7LIArMYG6PMA7SrRiSUhMjNSJChrvp82Yf3Wyzh3yq+ztEvMiOg3O8jGyvzk
XtnQ6Ha3DDVl7GdAZPJmRsb7OhTs5m1LekHGe7nlSq75/H/NUYga
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:11:04 2026 by rpki-client