Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/vOegqKH11j2ljvuv3PcKJ5eKLGQ.roa
File: vOegqKH11j2ljvuv3PcKJ5eKLGQ.roa (raw, json)
Hash identifier: Xifos647golhy2/qMNU8LvVXxPFJdsELgOMybMZy3CM=
Subject key identifier: BC:E7:A0:A8:A1:F5:D6:3D:A5:8E:FB:AF:DC:F7:0A:27:97:8A:2C:64
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 019EABB254F16C4EF3DE5016A7297BA6A36A
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/vOegqKH11j2ljvuv3PcKJ5eKLGQ.roa
Signing time: Tue 09 Jun 2026 09:24:11 +0000
ROA not before: Tue 09 Jun 2026 09:24:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207713
IP address blocks: 37.220.86.0/24 maxlen: 24
45.95.232.0/24 maxlen: 24
45.95.233.0/24 maxlen: 24
77.83.116.0/24 maxlen: 24
89.191.232.0/24 maxlen: 24
92.118.112.0/24 maxlen: 24
141.98.233.0/24 maxlen: 24
141.98.234.0/24 maxlen: 24
185.247.184.0/24 maxlen: 24
194.28.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 03:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ab:b2:54:f1:6c:4e:f3:de:50:16:a7:29:7b:a6:a3:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jun 9 09:24:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bce7a0a8a1f5d63da58efbafdcf70a27978a2c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:03:82:8a:9c:92:bb:12:ab:a4:4b:a7:a2:3f:
6f:5d:7f:c8:63:ca:81:9c:cd:b8:4b:00:b4:2d:b7:
81:dd:1a:9d:a0:c7:b1:a5:38:5c:16:2b:9f:10:a7:
0a:fd:48:7a:bc:db:77:cf:1e:bb:79:d1:97:5b:a9:
16:d2:cf:72:e7:3a:2f:5a:df:2e:56:f6:77:8a:19:
82:23:d5:57:13:0a:4a:23:6a:fc:d4:b1:7c:eb:8b:
30:d5:e1:23:0d:31:27:91:03:da:14:a3:17:8d:6a:
bc:22:fb:f6:31:25:9d:ea:e5:d2:ae:75:80:5f:ba:
1f:c3:fa:c3:28:1c:18:a0:c2:dc:5d:d8:79:26:73:
9b:3c:fa:2e:ad:a0:31:22:d2:d0:06:49:e8:6a:b3:
a0:e5:61:c2:42:1e:9f:77:1b:0e:ed:21:26:28:82:
f5:8d:4c:65:19:49:a7:e8:65:37:7d:f5:b8:66:91:
02:62:a1:13:30:29:57:b6:7b:30:bd:14:d0:ea:60:
37:3a:63:01:93:c8:fa:ae:67:bd:37:7a:c5:3a:c0:
6d:10:a3:db:e4:8c:ed:92:15:a5:02:e8:c3:6b:4d:
be:bd:0a:34:44:98:16:49:4b:77:14:39:de:2f:1d:
9d:b9:1e:a1:48:d6:94:4b:b0:6d:35:39:71:26:d5:
ce:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E7:A0:A8:A1:F5:D6:3D:A5:8E:FB:AF:DC:F7:0A:27:97:8A:2C:64
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/vOegqKH11j2ljvuv3PcKJ5eKLGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.220.86.0/24
45.95.232.0/23
77.83.116.0/24
89.191.232.0/24
92.118.112.0/24
141.98.233.0-141.98.234.255
185.247.184.0/24
194.28.192.0/24
Signature Algorithm: sha256WithRSAEncryption
12:f0:00:3b:77:c2:67:67:b5:cb:f1:c2:67:2d:b4:e8:fa:42:
c8:c2:1a:8d:22:90:4f:41:24:55:4e:df:cf:65:52:39:a4:36:
55:69:3f:11:6e:03:1c:b8:4f:11:9a:d8:d0:f1:c5:37:c1:de:
33:0e:47:98:c3:4d:85:ad:bd:43:71:35:13:7c:d7:e2:d8:ce:
97:f3:43:76:38:f4:f9:5e:b9:1a:9d:c6:4b:38:7e:81:61:95:
41:44:b3:08:90:be:a1:df:f6:69:87:db:a1:d1:17:ac:dd:e7:
b6:62:70:ee:1b:fa:1b:92:5d:39:b5:c3:73:ae:08:84:d2:bf:
9d:45:6d:18:61:59:c7:f4:66:fd:0b:b2:3b:c7:83:94:c4:b4:
4f:50:fc:1a:27:a1:80:a4:89:fd:83:cf:63:50:79:47:e3:ee:
10:43:1a:e5:51:77:d8:b4:dc:3c:b0:b5:af:b7:cd:58:da:e5:
6e:c5:62:21:50:e4:34:82:58:d9:37:97:b8:e5:8e:6e:a1:09:
34:0d:72:ce:a4:ea:3f:c5:53:e9:fd:a2:c6:3a:4a:bc:6e:1a:
cf:57:dc:29:4f:f1:0b:01:d2:dc:6f:5f:65:f0:16:51:b3:34:
6a:22:50:57:21:40:ca:e8:bd:83:8c:1f:8b:f0:71:72:e1:28:
29:96:9f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:54:18 2026 by rpki-client