Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/BShN_Su6KeKwbhlTkQBsz2EU2ag.roa
File: BShN_Su6KeKwbhlTkQBsz2EU2ag.roa (raw, json)
Hash identifier: XwDRhqSVGgdp2r56sCqKjsBrreDrVD6B7DqyCO6zoH8=
Subject key identifier: 05:28:4D:FD:2B:BA:29:E2:B0:6E:19:53:91:00:6C:CF:61:14:D9:A8
Certificate issuer: /CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Certificate serial: 01A08BAB7EF209CCECA0217918A6716CCEDF
Authority key identifier: CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/BShN_Su6KeKwbhlTkQBsz2EU2ag.roa
Signing time: Thu 10 Sep 2026 14:14:27 +0000
ROA not before: Thu 10 Sep 2026 14:14:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13150
IP address blocks: 85.255.16.0/24 maxlen: 24
85.255.17.0/24 maxlen: 24
85.255.18.0/24 maxlen: 24
85.255.19.0/24 maxlen: 24
85.255.20.0/24 maxlen: 24
85.255.21.0/24 maxlen: 24
85.255.22.0/24 maxlen: 24
85.255.23.0/24 maxlen: 24
85.255.24.0/24 maxlen: 24
85.255.25.0/24 maxlen: 24
85.255.26.0/24 maxlen: 24
85.255.27.0/24 maxlen: 24
85.255.28.0/24 maxlen: 24
85.255.29.0/24 maxlen: 24
85.255.30.0/24 maxlen: 24
85.255.31.0/24 maxlen: 24
159.117.224.0/24 maxlen: 24
159.117.225.0/24 maxlen: 24
159.117.226.0/24 maxlen: 24
159.117.227.0/24 maxlen: 24
159.117.228.0/24 maxlen: 24
159.117.229.0/24 maxlen: 24
159.117.230.0/24 maxlen: 24
159.117.231.0/24 maxlen: 24
159.117.232.0/24 maxlen: 24
159.117.233.0/24 maxlen: 24
159.117.234.0/24 maxlen: 24
159.117.235.0/24 maxlen: 24
159.117.236.0/24 maxlen: 24
159.117.237.0/24 maxlen: 24
159.117.238.0/24 maxlen: 24
159.117.239.0/24 maxlen: 24
159.117.240.0/24 maxlen: 24
159.117.241.0/24 maxlen: 24
159.117.242.0/24 maxlen: 24
159.117.243.0/24 maxlen: 24
159.117.244.0/24 maxlen: 24
159.117.245.0/24 maxlen: 24
159.117.246.0/24 maxlen: 24
159.117.247.0/24 maxlen: 24
159.117.248.0/24 maxlen: 24
159.117.249.0/24 maxlen: 24
159.117.250.0/24 maxlen: 24
159.117.251.0/24 maxlen: 24
185.114.120.0/24 maxlen: 24
185.114.121.0/24 maxlen: 24
185.114.122.0/24 maxlen: 24
185.114.123.0/24 maxlen: 24
209.206.0.0/24 maxlen: 24
209.206.1.0/24 maxlen: 24
209.206.2.0/24 maxlen: 24
209.206.3.0/24 maxlen: 24
209.206.4.0/24 maxlen: 24
209.206.5.0/24 maxlen: 24
209.206.6.0/24 maxlen: 24
209.206.7.0/24 maxlen: 24
209.206.8.0/24 maxlen: 24
209.206.9.0/24 maxlen: 24
209.206.10.0/24 maxlen: 24
209.206.11.0/24 maxlen: 24
209.206.12.0/24 maxlen: 24
209.206.13.0/24 maxlen: 24
209.206.14.0/24 maxlen: 24
209.206.15.0/24 maxlen: 24
209.206.16.0/24 maxlen: 24
209.206.17.0/24 maxlen: 24
209.206.18.0/24 maxlen: 24
209.206.19.0/24 maxlen: 24
209.206.20.0/24 maxlen: 24
209.206.21.0/24 maxlen: 24
209.206.22.0/24 maxlen: 24
209.206.23.0/24 maxlen: 24
209.206.24.0/24 maxlen: 24
209.206.25.0/24 maxlen: 24
209.206.26.0/24 maxlen: 24
209.206.27.0/24 maxlen: 24
209.206.28.0/24 maxlen: 24
209.206.29.0/24 maxlen: 24
209.206.30.0/24 maxlen: 24
209.206.31.0/24 maxlen: 24
216.252.176.0/24 maxlen: 24
216.252.177.0/24 maxlen: 24
216.252.178.0/24 maxlen: 24
216.252.179.0/24 maxlen: 24
216.252.180.0/24 maxlen: 24
216.252.181.0/24 maxlen: 24
216.252.182.0/24 maxlen: 24
216.252.183.0/24 maxlen: 24
216.252.184.0/24 maxlen: 24
216.252.185.0/24 maxlen: 24
216.252.186.0/24 maxlen: 24
216.252.187.0/24 maxlen: 24
216.252.188.0/24 maxlen: 24
216.252.189.0/24 maxlen: 24
216.252.190.0/24 maxlen: 24
216.252.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:ab:7e:f2:09:cc:ec:a0:21:79:18:a6:71:6c:ce:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Validity
Not Before: Sep 10 14:14:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05284dfd2bba29e2b06e195391006ccf6114d9a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:40:69:72:45:65:46:4f:c6:9f:ee:89:dd:10:
f6:7f:7a:4c:95:a5:75:1c:70:55:19:c1:31:be:0f:
b8:5c:8c:be:e4:97:50:8b:03:64:a8:5c:2e:fa:44:
5c:82:a1:32:2e:a2:3c:01:bb:0b:94:45:e4:f7:0d:
d0:27:cf:40:15:9f:fc:9c:1c:51:2a:eb:d3:64:60:
ec:b2:00:5a:00:5a:0f:0a:dc:6e:fc:aa:0a:f6:e2:
84:03:19:55:cd:b1:22:98:d6:94:3b:f6:ac:39:8b:
5f:14:7d:e9:b0:9d:83:da:cf:2d:f2:2c:da:b0:69:
cd:47:a0:3b:73:f8:12:58:c0:6b:e8:dc:92:b5:10:
87:7a:c2:19:cb:6d:96:ce:88:62:49:b0:6e:42:db:
f8:bd:4b:34:22:01:a5:85:1d:6e:c7:48:f3:16:84:
45:2d:89:d2:7a:cf:86:7c:46:9b:da:90:c7:c3:83:
e1:60:18:49:b1:8d:a3:d1:93:79:9f:fe:36:35:3d:
1b:d7:09:5a:b2:4a:0b:0c:a7:46:c6:9c:30:05:06:
d2:c5:ad:d3:59:ed:75:d9:e0:7a:5b:32:6f:c5:60:
59:8b:18:e1:ac:91:43:c4:14:52:1c:99:9b:62:18:
4f:ea:b2:00:40:65:d5:d5:df:19:89:5e:b6:44:d8:
c9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:28:4D:FD:2B:BA:29:E2:B0:6E:19:53:91:00:6C:CF:61:14:D9:A8
X509v3 Authority Key Identifier:
keyid:CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/BShN_Su6KeKwbhlTkQBsz2EU2ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.255.16.0/20
159.117.224.0-159.117.251.255
185.114.120.0/22
209.206.0.0/19
216.252.176.0/20
Signature Algorithm: sha256WithRSAEncryption
7b:2c:b1:ab:24:76:8e:69:2c:81:c3:34:8a:1d:a5:89:37:f2:
7f:6e:ea:2f:8e:82:28:8e:1b:9c:c2:92:9f:7d:f8:f7:60:f3:
82:33:19:5f:24:9d:4b:d2:c9:66:82:c8:de:df:ab:c5:34:06:
a1:f1:f9:59:d8:24:15:f0:b7:20:b8:96:63:98:1c:97:07:af:
e7:e4:9a:0d:6f:46:38:87:38:78:b4:66:df:3c:4a:23:b5:65:
c8:b6:4c:90:b5:41:b4:ec:11:e6:d2:31:26:35:4f:94:ed:6f:
f3:4c:10:02:fa:42:6d:c7:2f:39:eb:85:c1:cd:ee:07:1d:a6:
92:9e:d3:da:9b:c8:a6:7f:4e:81:a9:94:6a:09:66:bd:7f:a9:
46:58:34:db:29:75:97:c9:9b:15:7e:94:ca:f9:b2:14:32:b6:
d7:28:8e:5c:66:5f:df:05:f9:44:11:69:4e:4d:f9:83:c4:20:
eb:1a:a8:d0:9b:23:0d:99:9e:6c:2d:71:58:67:78:47:61:26:
61:8b:28:01:e1:bb:4b:c7:a1:6f:6f:c1:2a:cc:81:19:d5:5c:
09:52:76:b0:5e:ee:b6:09:54:e1:c2:9f:1f:25:21:f0:6e:8b:
d8:a1:75:47:28:be:d2:2d:24:eb:85:a6:61:be:9a:a5:b2:2a:
c8:84:62:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:54:33 2026 by rpki-client