Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/BkwxXA7fP42om6HRgHGfrfIh2H8.roa
File: BkwxXA7fP42om6HRgHGfrfIh2H8.roa (raw, json)
Hash identifier: rAhJcTyihfR2XB9K2sMs93uqkPdzNnWihXN2DQ+14tM=
Subject key identifier: 06:4C:31:5C:0E:DF:3F:8D:A8:9B:A1:D1:80:71:9F:AD:F2:21:D8:7F
Certificate issuer: /CN=3d8a553e05f0319bf452fa206c14ccda87304654
Certificate serial: 01A0AFB320BE1434FA86A60C621997292791
Authority key identifier: 3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/BkwxXA7fP42om6HRgHGfrfIh2H8.roa
Signing time: Thu 17 Sep 2026 14:09:07 +0000
ROA not before: Thu 17 Sep 2026 14:09:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8368
IP address blocks: 46.243.24.0/21 maxlen: 24
62.213.192.0/19 maxlen: 24
62.213.238.0/24 maxlen: 24
78.41.64.0/21 maxlen: 24
78.110.192.0/20 maxlen: 24
82.146.96.0/19 maxlen: 24
85.158.208.0/21 maxlen: 24
87.237.8.0/21 maxlen: 24
88.82.32.0/19 maxlen: 24
89.35.16.0/21 maxlen: 24
89.250.176.0/20 maxlen: 24
91.197.108.0/22 maxlen: 24
94.140.160.0/19 maxlen: 24
94.158.248.0/24 maxlen: 24
94.158.250.0/24 maxlen: 24
95.171.160.0/19 maxlen: 24
178.132.8.0/21 maxlen: 24
185.39.124.0/22 maxlen: 24
185.47.0.0/22 maxlen: 24
185.48.100.0/22 maxlen: 24
185.72.168.0/22 maxlen: 24
185.78.180.0/22 maxlen: 24
185.81.224.0/22 maxlen: 24
185.90.184.0/22 maxlen: 24
185.174.64.0/22 maxlen: 24
185.214.4.0/22 maxlen: 24
185.224.236.0/22 maxlen: 24
188.64.72.0/21 maxlen: 24
188.118.0.0/18 maxlen: 24
195.110.54.0/23 maxlen: 24
195.144.64.0/19 maxlen: 24
195.225.100.0/22 maxlen: 24
213.193.200.0/21 maxlen: 24
213.193.224.0/21 maxlen: 24
213.193.248.0/23 maxlen: 24
2001:4158::/29 maxlen: 48
2001:4c40::/32 maxlen: 48
2a00:c78::/32 maxlen: 48
2a00:1fb8::/32 maxlen: 48
2a01:8c20::/32 maxlen: 48
2a0b:8b00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:b3:20:be:14:34:fa:86:a6:0c:62:19:97:29:27:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d8a553e05f0319bf452fa206c14ccda87304654
Validity
Not Before: Sep 17 14:09:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=064c315c0edf3f8da89ba1d180719fadf221d87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a9:fb:68:4c:c6:90:9f:f9:90:60:7e:d6:4f:
ec:f7:1f:95:32:8a:1d:e0:3b:9f:7b:8a:14:03:a4:
6e:1f:29:a2:11:40:6f:ab:fb:49:3e:a1:15:10:d1:
42:94:b6:10:1a:2a:b0:ac:43:f2:0e:1e:e4:86:f4:
0a:78:e9:23:8b:d7:a7:20:35:f7:91:88:c0:04:ee:
cc:b3:ab:0e:a3:f8:a5:9c:bc:d0:20:85:86:eb:44:
f2:2f:ed:72:56:b3:1b:cf:8e:fc:87:ba:fa:b8:2a:
5c:cd:ba:73:f6:73:30:b4:d7:b9:1d:3b:7c:b5:22:
ac:0e:62:e2:5b:48:a0:38:36:66:dc:18:82:b4:9e:
54:11:7f:ae:84:4e:02:2e:16:79:9e:a7:04:d8:f9:
1e:27:61:df:7f:22:c1:5d:62:a1:23:4e:25:45:be:
eb:c5:ff:dc:5c:4e:18:30:c7:ab:26:29:d0:72:ff:
b5:2e:81:ca:71:46:5c:52:08:51:0d:2d:9f:14:74:
b5:b6:81:51:88:ec:ad:38:f1:1f:8a:9a:93:75:a9:
05:a5:aa:da:43:9e:8f:d3:8a:fb:9d:a8:a3:31:81:
fd:48:d6:b5:f0:e9:ac:6c:1f:9e:5f:59:2d:6f:cb:
8e:a4:cd:6b:7a:f2:01:5e:a1:c5:3f:b4:f4:19:e5:
e2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4C:31:5C:0E:DF:3F:8D:A8:9B:A1:D1:80:71:9F:AD:F2:21:D8:7F
X509v3 Authority Key Identifier:
keyid:3D:8A:55:3E:05:F0:31:9B:F4:52:FA:20:6C:14:CC:DA:87:30:46:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PYpVPgXwMZv0UvogbBTM2ocwRlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/BkwxXA7fP42om6HRgHGfrfIh2H8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52ce54-e49c-411c-8527-0fb4823f5b87/1/PYpVPgXwMZv0UvogbBTM2ocwRlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.24.0/21
62.213.192.0/19
62.213.238.0/24
78.41.64.0/21
78.110.192.0/20
82.146.96.0/19
85.158.208.0/21
87.237.8.0/21
88.82.32.0/19
89.35.16.0/21
89.250.176.0/20
91.197.108.0/22
94.140.160.0/19
94.158.248.0/24
94.158.250.0/24
95.171.160.0/19
178.132.8.0/21
185.39.124.0/22
185.47.0.0/22
185.48.100.0/22
185.72.168.0/22
185.78.180.0/22
185.81.224.0/22
185.90.184.0/22
185.174.64.0/22
185.214.4.0/22
185.224.236.0/22
188.64.72.0/21
188.118.0.0/18
195.110.54.0/23
195.144.64.0/19
195.225.100.0/22
213.193.200.0/21
213.193.224.0/21
213.193.248.0/23
IPv6:
2001:4158::/29
2001:4c40::/32
2a00:c78::/32
2a00:1fb8::/32
2a01:8c20::/32
2a0b:8b00::/29
Signature Algorithm: sha256WithRSAEncryption
0d:7f:12:f4:3e:f6:cc:4d:e6:78:69:cc:86:4d:e2:15:f4:8a:
77:5d:47:dd:bf:a3:2c:bc:f3:65:11:20:03:ff:bc:bc:2a:d9:
78:5a:4e:e7:b7:b3:56:70:ea:73:b0:8f:43:a7:78:32:31:95:
d2:bf:8b:df:07:d3:b4:4b:27:af:0c:00:09:6c:9e:84:0e:01:
02:71:a4:b6:2b:84:cb:ce:23:97:a8:4d:2f:70:b8:b2:7c:46:
94:fb:de:02:6c:c5:00:24:bc:0a:ad:51:01:60:d8:cf:6f:d5:
50:87:3f:7c:e3:6f:a7:b8:91:09:09:31:6b:14:97:66:3a:c9:
00:0a:31:c3:6c:9d:f5:d7:fd:79:fc:18:a1:42:2c:01:4c:23:
d5:b6:11:38:10:20:cb:68:71:51:01:40:16:21:36:6c:8a:3c:
ae:54:29:41:7a:60:29:8b:b8:18:b6:5f:a3:57:77:d4:fe:ef:
b3:05:00:46:90:09:e5:82:06:63:c4:8c:bd:c1:19:5f:ff:ea:
51:de:ab:85:ea:33:77:e3:16:03:c5:ef:09:8f:1c:bc:5a:2a:
6f:f6:79:17:af:a6:bf:d2:6e:71:38:d0:5c:8b:75:a1:82:de:
8e:f4:38:74:ef:6f:50:88:05:87:3a:9f:ef:0e:ed:79:aa:1d:
6d:11:2f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:59:15 2026 by rpki-client