Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/BUzdPDAZqhU6uXKeL1HHcPcLXgY.roa
File: BUzdPDAZqhU6uXKeL1HHcPcLXgY.roa (raw, json)
Hash identifier: 9i6w/z3faPk9TIfTBymObmLIDaZymJeJZgFKnSEB4rY=
Subject key identifier: 05:4C:DD:3C:30:19:AA:15:3A:B9:72:9E:2F:51:C7:70:F7:0B:5E:06
Certificate issuer: /CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Certificate serial: 019C963A44C5BC162D7E830EC46412B184DB
Authority key identifier: CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/BUzdPDAZqhU6uXKeL1HHcPcLXgY.roa
Signing time: Wed 25 Feb 2026 19:15:26 +0000
ROA not before: Wed 25 Feb 2026 19:15:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13150
IP address blocks: 85.255.16.0/24 maxlen: 24
85.255.17.0/24 maxlen: 24
85.255.19.0/24 maxlen: 24
85.255.20.0/24 maxlen: 24
85.255.21.0/24 maxlen: 24
85.255.22.0/24 maxlen: 24
85.255.23.0/24 maxlen: 24
85.255.24.0/24 maxlen: 24
85.255.25.0/24 maxlen: 24
85.255.26.0/24 maxlen: 24
85.255.27.0/24 maxlen: 24
85.255.28.0/24 maxlen: 24
85.255.29.0/24 maxlen: 24
85.255.30.0/24 maxlen: 24
85.255.31.0/24 maxlen: 24
159.117.224.0/24 maxlen: 24
159.117.225.0/24 maxlen: 24
159.117.226.0/24 maxlen: 24
159.117.227.0/24 maxlen: 24
159.117.228.0/24 maxlen: 24
159.117.229.0/24 maxlen: 24
159.117.230.0/24 maxlen: 24
159.117.231.0/24 maxlen: 24
159.117.232.0/24 maxlen: 24
159.117.233.0/24 maxlen: 24
159.117.234.0/24 maxlen: 24
159.117.235.0/24 maxlen: 24
159.117.236.0/24 maxlen: 24
159.117.237.0/24 maxlen: 24
159.117.238.0/24 maxlen: 24
159.117.239.0/24 maxlen: 24
185.114.120.0/24 maxlen: 24
185.114.121.0/24 maxlen: 24
185.114.122.0/24 maxlen: 24
185.114.123.0/24 maxlen: 24
209.206.0.0/24 maxlen: 24
209.206.1.0/24 maxlen: 24
209.206.2.0/24 maxlen: 24
209.206.3.0/24 maxlen: 24
209.206.4.0/24 maxlen: 24
209.206.5.0/24 maxlen: 24
209.206.6.0/24 maxlen: 24
209.206.7.0/24 maxlen: 24
209.206.8.0/24 maxlen: 24
209.206.9.0/24 maxlen: 24
209.206.10.0/24 maxlen: 24
209.206.11.0/24 maxlen: 24
209.206.12.0/24 maxlen: 24
209.206.13.0/24 maxlen: 24
209.206.14.0/24 maxlen: 24
209.206.15.0/24 maxlen: 24
209.206.16.0/24 maxlen: 24
209.206.17.0/24 maxlen: 24
209.206.18.0/24 maxlen: 24
209.206.19.0/24 maxlen: 24
209.206.20.0/24 maxlen: 24
209.206.21.0/24 maxlen: 24
209.206.22.0/24 maxlen: 24
209.206.23.0/24 maxlen: 24
209.206.24.0/24 maxlen: 24
209.206.25.0/24 maxlen: 24
209.206.26.0/24 maxlen: 24
209.206.27.0/24 maxlen: 24
209.206.28.0/24 maxlen: 24
209.206.29.0/24 maxlen: 24
209.206.30.0/24 maxlen: 24
209.206.31.0/24 maxlen: 24
216.252.176.0/24 maxlen: 24
216.252.177.0/24 maxlen: 24
216.252.178.0/24 maxlen: 24
216.252.179.0/24 maxlen: 24
216.252.180.0/24 maxlen: 24
216.252.181.0/24 maxlen: 24
216.252.182.0/24 maxlen: 24
216.252.183.0/24 maxlen: 24
216.252.184.0/24 maxlen: 24
216.252.185.0/24 maxlen: 24
216.252.186.0/24 maxlen: 24
216.252.187.0/24 maxlen: 24
216.252.189.0/24 maxlen: 24
216.252.190.0/24 maxlen: 24
216.252.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft
rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:96:3a:44:c5:bc:16:2d:7e:83:0e:c4:64:12:b1:84:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfb75191978866f1fc97f523c7dda40a88f7e777
Validity
Not Before: Feb 25 19:15:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=054cdd3c3019aa153ab9729e2f51c770f70b5e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a6:dd:5b:ad:dd:90:b7:5e:e7:5f:06:98:c3:
e8:2e:2f:fd:25:0f:ee:58:ba:71:48:1c:ae:a7:34:
68:62:42:a2:b9:ba:8d:44:13:40:f3:1f:54:4e:e6:
5b:d6:f7:43:36:14:4b:76:36:a1:ca:28:32:6b:e7:
70:f5:6b:9a:b2:c9:4b:27:2d:82:39:84:73:18:88:
62:a6:4a:fd:ed:e6:88:18:f3:d7:46:1e:dd:40:df:
8a:bc:ac:2f:21:41:fa:35:f1:11:cb:28:0a:eb:02:
37:ba:95:68:ca:40:86:a2:99:5d:94:a5:9c:d9:b9:
29:49:42:28:94:8c:cb:6c:f7:bf:9b:f2:c1:85:19:
c3:72:26:b4:50:4b:85:ed:c0:8d:18:44:e5:37:62:
b5:db:1c:31:15:a1:bd:fe:86:26:2b:cb:ce:7e:3e:
c2:78:ec:d6:48:7b:48:29:a7:85:ac:fb:34:fc:93:
39:ff:13:30:eb:1d:f1:42:76:1b:2b:4b:7c:04:29:
3d:80:e0:87:d0:e2:6b:1d:82:66:f0:17:57:e6:99:
b7:c5:5b:d6:78:44:ac:79:04:31:7c:6b:09:c8:24:
b3:54:fc:d1:d4:3e:58:f6:0f:60:6c:c2:7e:07:80:
77:a3:44:69:a2:f0:4a:08:05:83:2d:2c:7f:03:24:
50:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4C:DD:3C:30:19:AA:15:3A:B9:72:9E:2F:51:C7:70:F7:0B:5E:06
X509v3 Authority Key Identifier:
keyid:CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/BUzdPDAZqhU6uXKeL1HHcPcLXgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.255.16.0/23
85.255.19.0-85.255.31.255
159.117.224.0/20
185.114.120.0/22
209.206.0.0/19
216.252.176.0-216.252.187.255
216.252.189.0-216.252.191.255
Signature Algorithm: sha256WithRSAEncryption
7e:b4:33:d2:8a:dd:1b:3b:f7:e5:d7:82:72:2a:c0:ad:3a:6f:
12:45:93:a2:77:13:e3:5b:55:3d:db:fd:48:dc:9a:ee:53:19:
d7:bb:55:32:a9:72:f0:92:61:22:d0:06:f1:a6:0b:e0:82:02:
40:4c:22:31:ed:8f:4d:c1:2e:98:44:ef:3f:79:bf:15:92:a5:
95:c5:dc:b6:4f:a8:94:bb:56:87:86:f1:27:7a:bd:79:dc:6f:
4e:eb:46:37:0d:27:c5:cc:1c:a9:68:e5:e6:33:f8:4a:cb:48:
cc:b0:a0:6b:be:4c:c2:e6:76:5c:9a:f5:cf:5f:1b:85:77:25:
13:14:31:c9:21:0a:c6:51:04:36:a3:14:58:f6:b9:8b:4a:92:
28:78:be:c2:77:b3:0e:a1:60:e1:01:86:92:6b:3b:00:9f:aa:
70:bd:27:16:df:f0:e5:9d:d7:f4:48:f6:43:0c:6d:00:3c:bf:
44:c8:b4:a4:fb:4d:46:f7:85:fe:44:42:ec:6d:b4:f8:5d:60:
fb:b7:81:44:20:1b:89:7e:ae:29:81:4a:22:91:6d:ed:a4:a0:
f7:24:0c:80:4d:1b:89:09:67:ce:ff:2b:e4:96:43:ac:a8:da:
3f:d0:dd:54:7f:35:68:52:70:58:98:4b:c6:8d:aa:ac:87:3e:
1f:2e:24:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:34:56 2026 by rpki-client