Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/bZgu6Fyv3l0zv-R49H6jQ5B17q8.roa
File: bZgu6Fyv3l0zv-R49H6jQ5B17q8.roa (raw, json)
Hash identifier: FklJIU7mNTFx9qBwGZAUPmyYrEJ7GSsfi4Y6Lth2NfA=
Subject key identifier: 6D:98:2E:E8:5C:AF:DE:5D:33:BF:E4:78:F4:7E:A3:43:90:75:EE:AF
Certificate issuer: /CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
Certificate serial: 01A184B46EB230BAC27DBC8AC4EC9F5CACAB
Authority key identifier: B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/bZgu6Fyv3l0zv-R49H6jQ5B17q8.roa
Signing time: Wed 28 Oct 2026 22:49:39 +0000
ROA not before: Wed 28 Oct 2026 22:49:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216394
IP address blocks: 45.74.158.0/24 maxlen: 24
158.94.216.0/24 maxlen: 24
2a01:f905::/32 maxlen: 32
2a01:f905:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:b4:6e:b2:30:ba:c2:7d:bc:8a:c4:ec:9f:5c:ac:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b56d10ccad9d69c01856be0afaa17ec682acbf
Validity
Not Before: Oct 28 22:49:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d982ee85cafde5d33bfe478f47ea3439075eeaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9b:e1:08:4d:a8:14:28:d7:89:8b:2e:da:c0:
47:c6:fc:2f:39:79:b9:f7:f9:19:0e:56:98:88:98:
7f:b5:2b:b3:a2:d0:e0:c6:49:18:a7:fa:e7:f2:ee:
0d:07:2c:b3:f1:50:61:bf:58:40:81:c4:cb:8d:c1:
11:0a:d2:c7:b9:fe:33:9e:36:4c:b6:b7:26:e6:e0:
c1:dc:0e:3b:d6:7b:de:9e:f4:91:ba:d9:a6:f1:c7:
8b:56:59:7f:4b:60:a1:ef:f9:3a:89:11:08:7b:b4:
95:f5:e0:87:b2:4a:c8:8b:a2:7f:a2:96:49:82:af:
a0:8c:71:a7:83:a0:a4:1d:d7:0e:67:c4:d6:0a:c9:
36:4b:2d:ee:10:57:16:2a:c5:65:08:ea:40:39:13:
af:59:15:e6:a6:d4:35:a9:ca:2d:49:0c:9e:db:07:
d6:cf:dd:ac:5a:72:7a:d5:1e:bd:ef:61:06:1d:95:
46:f0:7f:17:e6:c0:64:d3:e1:4a:7d:90:8a:de:57:
c6:0d:7b:3f:f5:4e:d3:12:86:29:87:a7:3b:43:6f:
62:6c:b6:82:46:01:1e:e2:78:51:cb:87:4a:b5:c9:
60:41:a8:12:d4:25:3f:d2:01:53:ef:0d:f5:ce:fb:
80:c7:0c:44:6a:45:03:7f:3e:58:5f:b5:7d:37:dd:
03:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:98:2E:E8:5C:AF:DE:5D:33:BF:E4:78:F4:7E:A3:43:90:75:EE:AF
X509v3 Authority Key Identifier:
keyid:B0:B5:6D:10:CC:AD:9D:69:C0:18:56:BE:0A:FA:A1:7E:C6:82:AC:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLVtEMytnWnAGFa-CvqhfsaCrL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/bZgu6Fyv3l0zv-R49H6jQ5B17q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/69409e-1ec4-489d-b61f-a19cc8a76d04/1/sLVtEMytnWnAGFa-CvqhfsaCrL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.74.158.0/24
158.94.216.0/24
IPv6:
2a01:f905::/32
Signature Algorithm: sha256WithRSAEncryption
2c:76:40:8d:c3:31:4f:c1:c0:f7:8d:e6:24:01:3c:45:50:90:
29:e6:28:b4:6b:4f:91:50:06:1a:be:3b:3f:68:b1:8a:36:c4:
40:ca:0d:b3:d4:35:71:21:bb:6e:dd:b4:50:88:54:5f:7b:f7:
7d:ac:1e:7f:6b:59:ae:09:fc:e4:da:48:37:b5:0c:6e:44:dc:
71:bc:0b:c1:87:ca:6d:d4:a1:21:11:78:54:2c:32:03:ec:a5:
a7:64:8b:50:46:b2:d6:88:af:0e:d3:29:64:74:53:fa:3e:fe:
81:9b:83:06:16:f4:b1:72:26:d3:b0:0b:e2:73:25:49:5e:8e:
4e:fd:2e:f2:4b:95:96:8f:0c:97:8a:c8:da:e5:d8:1f:e6:aa:
65:f0:d9:53:06:89:0d:52:14:ab:60:35:b9:ac:33:c2:b4:4a:
88:be:b7:20:d1:5e:fe:e3:af:84:70:5c:a6:87:82:92:f2:c5:
7d:1b:3e:ad:9d:1d:f9:f9:ee:68:61:cf:2d:f8:5b:ea:8f:c3:
de:f5:68:ff:32:c1:56:a5:e7:0a:51:93:4c:41:53:b5:52:56:
25:25:d5:92:ce:f4:7f:f9:f5:11:c7:b8:ee:af:e5:42:5e:7b:
a3:6c:1f:67:7b:7d:4b:0b:31:78:0e:fd:ac:46:25:20:d9:72:
5b:0a:ce:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:51:18 2026 by rpki-client