Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/Bza0u1KrAMDMGupZL29e32A3MCc.roa
File: Bza0u1KrAMDMGupZL29e32A3MCc.roa (raw, json)
Hash identifier: pZiFonQx+AjzAflURZDKbh/3OCh69YGkDga9U2khExM=
Subject key identifier: 07:36:B4:BB:52:AB:00:C0:CC:1A:EA:59:2F:6F:5E:DF:60:37:30:27
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 01A09FCC164BAF3616391D69BB34F518F595
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/Bza0u1KrAMDMGupZL29e32A3MCc.roa
Signing time: Mon 14 Sep 2026 12:02:27 +0000
ROA not before: Mon 14 Sep 2026 12:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25211
IP address blocks: 45.141.233.0/24 maxlen: 24
45.141.234.0/24 maxlen: 24
45.141.235.0/24 maxlen: 24
78.159.128.0/24 maxlen: 24
78.159.129.0/24 maxlen: 24
78.159.131.0/24 maxlen: 24
78.159.136.0/24 maxlen: 24
78.159.137.0/24 maxlen: 24
78.159.138.0/24 maxlen: 24
78.159.139.0/24 maxlen: 24
78.159.149.0/24 maxlen: 24
78.159.150.0/24 maxlen: 24
78.159.152.0/22 maxlen: 22
78.159.153.0/24 maxlen: 24
78.159.154.0/24 maxlen: 24
78.159.155.0/24 maxlen: 24
78.159.156.0/24 maxlen: 24
78.159.157.0/24 maxlen: 24
78.159.158.0/24 maxlen: 24
78.159.159.0/24 maxlen: 24
91.92.34.0/24 maxlen: 24
91.92.44.0/24 maxlen: 24
91.92.45.0/24 maxlen: 24
91.92.46.0/24 maxlen: 24
91.92.49.0/24 maxlen: 24
91.92.50.0/24 maxlen: 24
91.92.51.0/24 maxlen: 24
91.92.52.0/24 maxlen: 24
91.92.53.0/24 maxlen: 24
93.152.206.0/24 maxlen: 24
93.152.207.0/24 maxlen: 24
93.152.209.0/24 maxlen: 24
93.152.211.0/24 maxlen: 24
93.152.212.0/24 maxlen: 24
93.152.213.0/24 maxlen: 24
93.152.214.0/24 maxlen: 24
93.152.215.0/24 maxlen: 24
93.152.216.0/24 maxlen: 24
93.152.217.0/24 maxlen: 24
93.152.218.0/24 maxlen: 24
93.152.222.0/24 maxlen: 24
93.152.223.0/24 maxlen: 24
93.152.226.0/24 maxlen: 24
93.152.227.0/24 maxlen: 24
93.152.230.0/24 maxlen: 24
94.26.28.0/24 maxlen: 24
94.26.29.0/24 maxlen: 24
94.26.76.0/22 maxlen: 22
94.26.76.0/24 maxlen: 24
94.26.77.0/24 maxlen: 24
94.26.78.0/24 maxlen: 24
94.26.79.0/24 maxlen: 24
94.26.89.0/24 maxlen: 24
94.26.90.0/24 maxlen: 24
94.190.195.0/24 maxlen: 24
185.96.252.0/24 maxlen: 24
185.96.253.0/24 maxlen: 24
185.96.254.0/24 maxlen: 24
185.96.255.0/24 maxlen: 24
212.102.105.0/24 maxlen: 24
212.102.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:cc:16:4b:af:36:16:39:1d:69:bb:34:f5:18:f5:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Sep 14 12:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0736b4bb52ab00c0cc1aea592f6f5edf60373027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d9:af:27:26:d6:57:2f:1e:87:45:b8:56:4b:
40:a5:de:f4:0b:68:c8:b4:61:d1:96:31:00:bd:32:
d0:e4:44:3e:44:fa:60:c7:a6:2a:d1:f7:24:0c:f8:
62:28:b9:18:4c:e0:d6:92:bb:ef:e1:7e:68:d9:a0:
30:84:b0:cf:77:53:92:b3:58:d9:ce:be:5a:ff:cd:
9e:1c:e3:7f:fc:0c:f8:00:2b:2b:8a:1f:76:15:1e:
e7:5e:8f:0e:b4:df:59:a4:f2:57:1e:f4:ae:01:78:
3a:e2:99:58:67:d3:0d:37:31:92:9c:96:eb:0f:1d:
d3:58:4e:d8:5a:a8:23:bf:4d:61:32:73:5b:16:6c:
7f:47:28:20:4b:2a:b2:0a:e5:3c:05:a8:09:bb:f7:
7e:1d:f9:4d:06:0f:6a:f0:3e:07:a6:57:26:11:85:
1b:fa:5e:f7:67:59:5b:49:73:6c:42:da:65:b8:cf:
5b:76:1d:a1:72:15:00:6e:4d:69:81:5e:0a:a9:bb:
bd:ea:95:43:f0:c3:da:38:c6:bc:6d:20:4a:e0:74:
d8:b6:7a:4b:9c:7f:76:f6:ff:38:63:e1:90:c5:3f:
4d:2c:e1:69:08:47:b2:ad:4f:a7:31:76:b5:9a:f8:
04:cd:ac:78:0a:a1:46:58:88:e8:44:0f:c6:53:a6:
ba:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:36:B4:BB:52:AB:00:C0:CC:1A:EA:59:2F:6F:5E:DF:60:37:30:27
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/Bza0u1KrAMDMGupZL29e32A3MCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.233.0-45.141.235.255
78.159.128.0/23
78.159.131.0/24
78.159.136.0/22
78.159.149.0-78.159.150.255
78.159.152.0/21
91.92.34.0/24
91.92.44.0-91.92.46.255
91.92.49.0-91.92.53.255
93.152.206.0/23
93.152.209.0/24
93.152.211.0-93.152.218.255
93.152.222.0/23
93.152.226.0/23
93.152.230.0/24
94.26.28.0/23
94.26.76.0/22
94.26.89.0-94.26.90.255
94.190.195.0/24
185.96.252.0/22
212.102.105.0/24
212.102.107.0/24
Signature Algorithm: sha256WithRSAEncryption
78:c7:43:3c:d0:ee:e0:5d:41:e7:b6:f6:c9:9b:a0:02:37:f3:
a1:6c:c8:c4:10:21:b6:ee:b5:31:f4:4a:a3:3b:25:ce:a4:d4:
47:d9:b8:d2:2f:9c:8e:0c:c4:ef:40:89:ba:e2:9e:7f:80:b6:
9a:85:cb:5f:eb:b2:d2:9f:77:47:e8:2c:6a:7f:5d:ea:fc:37:
0c:1b:88:4c:58:a1:0e:ad:d4:3b:af:db:fc:ba:7d:73:3f:69:
a6:f7:cd:59:42:79:16:89:24:cb:f8:72:68:0d:a9:63:fd:4d:
a5:cb:cb:ea:f5:50:05:c0:15:b3:5d:81:49:93:90:67:c7:b4:
60:49:ea:a0:b0:f9:3b:15:89:65:ec:5f:9b:21:a0:2b:cd:99:
aa:4e:4c:61:f7:92:6f:df:af:a2:7b:bf:0b:76:10:06:64:ac:
e2:00:13:04:98:9a:1e:fd:d0:5f:22:fd:71:2b:10:24:13:01:
87:a9:a5:09:35:ad:c0:a4:5b:14:11:ec:d1:2f:94:5a:f8:e8:
bc:f5:4b:06:89:8b:9f:85:ce:de:96:c6:e4:d6:3a:66:e3:a3:
39:23:e2:5c:3a:fa:2d:68:6d:c3:dc:54:09:56:92:6b:5c:89:
ed:f0:16:ee:ff:74:45:fe:c5:7b:ad:c0:dc:c3:14:ef:f6:ed:
85:37:cd:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:25:56 2026 by rpki-client