Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/BHrhKKFyGuAXmGXi2uSOTH4JyEM.roa
File: BHrhKKFyGuAXmGXi2uSOTH4JyEM.roa (raw, json)
Hash identifier: Etgsi90oMnqKxDk2sxnBlfxaINgYrLG9ZZzEIRCrPps=
Subject key identifier: 04:7A:E1:28:A1:72:1A:E0:17:98:65:E2:DA:E4:8E:4C:7E:09:C8:43
Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Certificate serial: 019D4E425F4FDF252C4119B8D338840589F3
Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/BHrhKKFyGuAXmGXi2uSOTH4JyEM.roa
Signing time: Thu 02 Apr 2026 12:54:25 +0000
ROA not before: Thu 02 Apr 2026 12:54:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60192
IP address blocks: 46.191.152.0/22 maxlen: 22
46.191.152.0/23 maxlen: 23
46.191.152.0/24 maxlen: 24
46.191.153.0/24 maxlen: 24
46.191.154.0/23 maxlen: 23
46.191.154.0/24 maxlen: 24
46.191.155.0/24 maxlen: 24
95.105.24.0/22 maxlen: 22
95.105.24.0/23 maxlen: 23
95.105.24.0/24 maxlen: 24
95.105.25.0/24 maxlen: 24
95.105.26.0/23 maxlen: 23
95.105.26.0/24 maxlen: 24
95.105.27.0/24 maxlen: 24
95.105.80.0/22 maxlen: 22
95.105.80.0/23 maxlen: 23
95.105.80.0/24 maxlen: 24
95.105.81.0/24 maxlen: 24
95.105.82.0/23 maxlen: 23
95.105.82.0/24 maxlen: 24
95.105.83.0/24 maxlen: 24
185.162.32.0/22 maxlen: 22
185.162.32.0/23 maxlen: 23
185.162.32.0/24 maxlen: 24
185.162.33.0/24 maxlen: 24
185.162.34.0/23 maxlen: 23
185.162.34.0/24 maxlen: 24
185.162.35.0/24 maxlen: 24
193.104.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4e:42:5f:4f:df:25:2c:41:19:b8:d3:38:84:05:89:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Validity
Not Before: Apr 2 12:54:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=047ae128a1721ae0179865e2dae48e4c7e09c843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bc:1b:b4:18:de:e1:89:dd:03:c5:d2:a7:77:
72:77:1c:29:f8:d5:55:5f:8b:01:fb:c1:eb:48:12:
29:65:ef:0a:12:74:0c:79:c1:12:d0:84:67:1b:eb:
ee:f7:2d:36:89:fd:73:fc:93:58:35:a9:8c:15:57:
02:0b:cd:7f:de:da:90:ae:6d:23:d6:e3:f9:92:74:
ec:bb:4e:cf:ad:d9:43:98:92:b4:4e:76:5a:55:87:
ee:74:0e:1e:6e:1d:37:ac:ed:6c:65:93:06:08:07:
a6:6d:d3:db:da:e8:88:2e:e2:bf:6a:2c:dc:fa:c9:
61:8b:a7:c6:ae:40:86:4f:34:72:2b:30:0c:29:39:
37:c1:f5:ea:e7:0d:b5:19:6d:73:28:06:07:d2:bd:
2b:4c:91:08:30:11:6b:42:61:72:2e:51:d9:7f:33:
8f:83:12:1b:2f:f1:d1:12:a9:f5:77:b9:5b:b5:2b:
dd:d7:1f:17:98:9f:da:62:d3:b5:fb:02:8e:f0:d1:
7d:38:bc:3a:bb:c4:c4:b3:85:59:7a:b8:59:24:74:
a5:ef:73:a8:00:14:50:52:c4:d6:41:95:a2:35:c8:
94:30:ef:d2:24:a2:74:31:b0:08:30:bb:46:18:49:
83:51:7f:83:af:cc:4f:1e:8c:2b:b1:0b:cb:11:7f:
dd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:7A:E1:28:A1:72:1A:E0:17:98:65:E2:DA:E4:8E:4C:7E:09:C8:43
X509v3 Authority Key Identifier:
keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/BHrhKKFyGuAXmGXi2uSOTH4JyEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.191.152.0/22
95.105.24.0/22
95.105.80.0/22
185.162.32.0/22
193.104.64.0/24
Signature Algorithm: sha256WithRSAEncryption
58:44:b3:6a:7d:fe:a6:d5:d8:08:66:2b:26:18:87:8d:aa:d2:
97:3a:0f:a1:c5:d2:59:bf:2e:b9:c1:91:f8:ec:1d:9a:10:67:
b4:20:a3:42:5f:50:de:16:b0:98:2b:2d:89:24:74:52:a0:cd:
f6:e4:59:31:53:81:06:e6:1b:00:68:62:65:4e:92:08:f5:8c:
af:6c:a6:b5:f4:2f:19:9e:db:7d:b0:0e:5d:ba:56:e0:bc:c2:
4f:2f:7d:7a:4c:72:23:6f:31:f4:79:72:35:c6:e9:a4:72:dc:
ea:93:78:0c:5e:e0:3c:c7:99:48:a9:9e:e2:dc:70:d5:4a:bc:
9a:c6:fb:61:71:c5:41:2d:ee:96:d5:06:e2:d1:ec:0d:11:88:
c7:6d:e5:f8:93:1d:d7:28:e3:b4:d8:e8:65:3b:fc:10:13:ac:
8e:07:40:16:0b:bc:72:55:6b:ef:ac:9d:85:ed:b0:cf:d9:d4:
c4:46:32:a5:4d:49:49:ed:63:26:de:b6:c4:e4:d7:ba:13:1c:
27:e6:3b:a4:cd:1e:21:ef:43:5a:d2:24:69:a1:4c:5f:43:75:
65:ca:3e:e6:ce:4e:35:84:3b:c2:4c:30:ca:4d:9a:26:17:18:
c9:5d:40:76:79:f3:f4:be:c4:68:75:20:c3:65:77:83:6e:c1:
80:bb:4d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:51:27 2026 by rpki-client