Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/bbcALS1K5TEmKYiB1a6e1mZZWEs.roa
File: bbcALS1K5TEmKYiB1a6e1mZZWEs.roa (raw, json)
Hash identifier: byEO33BLjOD9so540gGEwTdyvs1ahwhfnYTzDETisqs=
Subject key identifier: 6D:B7:00:2D:2D:4A:E5:31:26:29:88:81:D5:AE:9E:D6:66:59:58:4B
Certificate issuer: /CN=3d2eb4147ee7bfc6ba72fc0349453498f000e581
Certificate serial: 019E3F555230BDDEA1C08593693DC2BC638D
Authority key identifier: 3D:2E:B4:14:7E:E7:BF:C6:BA:72:FC:03:49:45:34:98:F0:00:E5:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/bbcALS1K5TEmKYiB1a6e1mZZWEs.roa
Signing time: Tue 19 May 2026 08:23:36 +0000
ROA not before: Tue 19 May 2026 08:23:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5619
IP address blocks: 139.105.0.0/16 maxlen: 16
139.106.0.0/15 maxlen: 15
139.108.0.0/14 maxlen: 14
139.112.0.0/13 maxlen: 13
139.120.0.0/16 maxlen: 16
146.192.0.0/17 maxlen: 17
146.213.0.0/16 maxlen: 16
153.110.0.0/16 maxlen: 16
192.68.76.0/22 maxlen: 22
192.68.80.0/20 maxlen: 20
192.146.163.0/24 maxlen: 24
192.146.164.0/24 maxlen: 24
192.146.165.0/24 maxlen: 24
192.146.167.0/24 maxlen: 24
192.146.169.0/24 maxlen: 24
192.146.170.0/24 maxlen: 24
212.18.128.0/19 maxlen: 19
217.17.0.0/20 maxlen: 20
2a00:1be8::/29 maxlen: 29
2a02:9c8::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.mft
rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3f:55:52:30:bd:de:a1:c0:85:93:69:3d:c2:bc:63:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d2eb4147ee7bfc6ba72fc0349453498f000e581
Validity
Not Before: May 19 08:23:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6db7002d2d4ae53126298881d5ae9ed66659584b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c3:3b:84:e8:17:65:61:4e:a9:9b:85:4a:86:
89:b9:9b:43:8e:52:01:2c:38:1d:08:1a:56:b8:65:
f8:ad:f6:50:70:f9:55:b3:4d:bc:f7:5f:3f:73:1e:
63:7e:dc:15:21:71:00:fe:40:1b:c5:72:14:c6:08:
1e:1e:cd:9d:f5:5c:8a:aa:60:de:82:ad:c9:01:19:
73:c3:16:59:31:39:31:e4:d4:95:83:b6:f4:e7:ae:
fc:08:37:3e:b9:e1:d6:c0:8c:d0:86:2a:23:ea:21:
16:24:29:04:b1:aa:a0:8c:0d:2d:29:1d:40:ad:4e:
83:db:7b:f2:19:6a:5a:13:bb:5a:64:fa:be:0b:61:
61:6f:2c:24:34:16:6f:0c:aa:d3:bc:b3:c6:c5:fb:
5c:f4:d2:60:12:02:89:01:1b:d3:7e:99:1e:a5:b4:
20:31:17:c0:14:00:45:e9:d1:4a:0c:e9:72:3b:bd:
ff:6c:45:d7:27:b6:fc:d9:47:74:2f:1f:e3:db:c4:
4c:e6:cc:0e:a6:73:96:cd:e0:3a:27:d9:b1:96:e2:
94:76:fb:55:69:d3:c5:5a:7b:26:80:f1:c9:6c:fd:
09:d2:9d:41:d0:7c:46:8e:c1:3c:87:f0:14:d4:ee:
45:e0:a5:78:f6:e1:06:6a:05:5b:cc:0f:6b:f7:01:
69:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B7:00:2D:2D:4A:E5:31:26:29:88:81:D5:AE:9E:D6:66:59:58:4B
X509v3 Authority Key Identifier:
keyid:3D:2E:B4:14:7E:E7:BF:C6:BA:72:FC:03:49:45:34:98:F0:00:E5:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PS60FH7nv8a6cvwDSUU0mPAA5YE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/bbcALS1K5TEmKYiB1a6e1mZZWEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b8f53f-467f-45cf-8306-42951c2ca738/1/PS60FH7nv8a6cvwDSUU0mPAA5YE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.105.0.0-139.120.255.255
146.192.0.0/17
146.213.0.0/16
153.110.0.0/16
192.68.76.0-192.68.95.255
192.146.163.0-192.146.165.255
192.146.167.0/24
192.146.169.0-192.146.170.255
212.18.128.0/19
217.17.0.0/20
IPv6:
2a00:1be8::/29
2a02:9c8::/29
Signature Algorithm: sha256WithRSAEncryption
93:63:e5:ba:f2:ce:75:ae:e7:d2:4d:96:43:97:11:4e:ce:44:
fe:08:8a:20:ce:81:53:2e:dd:d7:46:5c:95:e9:b5:6a:68:b9:
c3:39:27:0e:d2:74:79:64:46:9a:5e:6c:8b:72:d0:34:bd:42:
3a:59:b5:89:da:1f:ee:a9:d2:b0:33:44:27:44:de:4c:f5:be:
d2:c4:0e:c4:35:e0:ce:30:c9:7a:79:05:6f:d5:50:8c:00:2b:
80:2a:c6:92:7b:95:d4:39:79:85:e7:5d:3d:d7:be:90:d5:2c:
d3:a0:f0:67:bb:86:76:4e:ca:2d:62:82:49:65:61:ea:c3:ed:
e7:38:52:42:69:ed:00:73:30:fc:46:8a:c6:10:b5:18:69:17:
a0:f5:c2:92:e7:58:0d:ff:30:99:59:8f:69:f3:cf:3a:3c:74:
dc:90:2e:be:46:06:51:ba:11:ba:64:73:23:88:f3:91:26:a0:
0a:53:8b:19:90:71:81:eb:21:92:91:2b:b5:65:da:e6:92:78:
df:60:86:5f:99:66:5e:dc:29:92:cd:9e:7f:76:a9:c1:06:96:
b6:99:40:d4:2e:48:c0:6e:c5:58:76:41:46:c5:35:a8:47:fe:
0a:7f:fa:96:d4:9c:9c:4d:4f:5d:e9:94:60:44:0a:81:90:4d:
53:ba:28:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:40:38 2026 by rpki-client