Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/bpghwUTmmKl7QliDST1W5dViYJc.roa
File: bpghwUTmmKl7QliDST1W5dViYJc.roa (raw, json)
Hash identifier: 4spP8UJYeO4cFPA8qwPfd8/MAEzw0jEK2c/OI9/edUY=
Subject key identifier: 6E:98:21:C1:44:E6:98:A9:7B:42:58:83:49:3D:56:E5:D5:62:60:97
Certificate issuer: /CN=a18164d9961a16d2eff773f5027821e9d2bd3740
Certificate serial: 019D9AF1080064869C055323C6CB3FB0AC38
Authority key identifier: A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/bpghwUTmmKl7QliDST1W5dViYJc.roa
Signing time: Fri 17 Apr 2026 10:16:20 +0000
ROA not before: Fri 17 Apr 2026 10:16:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8899
IP address blocks: 5.45.0.0/21 maxlen: 21
5.100.128.0/20 maxlen: 20
37.157.40.0/21 maxlen: 21
46.165.128.0/18 maxlen: 18
77.244.96.0/20 maxlen: 20
80.74.48.0/20 maxlen: 22
89.21.96.0/19 maxlen: 19
109.75.208.0/20 maxlen: 20
128.0.96.0/21 maxlen: 21
128.0.100.0/22 maxlen: 22
131.117.144.0/20 maxlen: 20
156.67.128.0/20 maxlen: 20
156.67.132.0/22 maxlen: 22
156.67.140.0/22 maxlen: 22
178.76.128.0/18 maxlen: 18
185.7.208.0/22 maxlen: 22
185.18.128.0/22 maxlen: 22
185.74.180.0/22 maxlen: 22
188.210.0.0/18 maxlen: 18
188.210.60.0/22 maxlen: 22
212.43.64.0/19 maxlen: 19
212.43.80.0/21 maxlen: 21
2a01:5c0::/32 maxlen: 32
2a02:6d40::/32 maxlen: 32
2a03:4920::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:26:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:f1:08:00:64:86:9c:05:53:23:c6:cb:3f:b0:ac:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a18164d9961a16d2eff773f5027821e9d2bd3740
Validity
Not Before: Apr 17 10:16:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e9821c144e698a97b425883493d56e5d5626097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:56:c1:8e:19:2b:c6:d5:c8:63:9b:72:41:98:
95:32:97:4f:ce:c2:65:cf:4a:1a:91:4d:f7:a7:2b:
c0:90:7b:35:a1:4b:e2:4d:5d:4c:43:5a:de:2a:75:
ff:42:af:46:f1:da:97:7d:13:86:aa:12:a4:94:07:
49:b2:a7:2a:e9:7b:b6:6c:4c:24:3e:c9:8e:ce:08:
a0:ba:00:77:4b:06:69:35:42:5f:7d:76:a4:33:b9:
6d:8d:1c:53:1c:cb:e2:5f:12:95:39:33:fd:53:64:
d1:45:75:4a:ae:25:16:07:c0:dd:a8:f7:c8:55:c5:
8d:4e:86:72:0d:eb:77:8a:e9:54:76:e1:4e:1a:e3:
95:55:08:9b:fa:2d:32:53:32:26:ab:9f:61:1d:2e:
1e:be:ed:0e:a8:26:7e:c1:82:c5:40:7f:38:cf:c2:
9c:00:0a:0e:63:8e:2d:4a:09:80:b7:50:66:2a:cf:
6f:f4:f0:88:26:66:89:e5:82:64:d4:bd:73:06:a7:
37:f7:cc:4c:34:d5:58:09:cb:42:85:70:24:c0:ca:
7f:05:03:ee:47:aa:02:83:5e:2e:94:d8:27:51:da:
8b:52:20:81:86:bb:49:19:3b:ac:ca:7e:5b:23:98:
aa:4e:19:cd:e5:b7:5b:d9:57:d8:b3:8f:7f:ae:70:
12:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:98:21:C1:44:E6:98:A9:7B:42:58:83:49:3D:56:E5:D5:62:60:97
X509v3 Authority Key Identifier:
keyid:A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/bpghwUTmmKl7QliDST1W5dViYJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.0.0/21
5.100.128.0/20
37.157.40.0/21
46.165.128.0/18
77.244.96.0/20
80.74.48.0/20
89.21.96.0/19
109.75.208.0/20
128.0.96.0/21
131.117.144.0/20
156.67.128.0/20
178.76.128.0/18
185.7.208.0/22
185.18.128.0/22
185.74.180.0/22
188.210.0.0/18
212.43.64.0/19
IPv6:
2a01:5c0::/32
2a02:6d40::/32
2a03:4920::/32
Signature Algorithm: sha256WithRSAEncryption
1c:9a:f7:92:84:af:e9:6d:f2:a3:8f:f5:a4:ff:ce:d9:9d:2e:
4b:8f:3e:fd:d2:d9:63:aa:22:ba:52:f6:2f:fe:0a:e3:a9:ba:
c6:78:a6:ba:43:af:eb:bb:82:80:bc:13:1d:a5:86:ca:35:e5:
b2:00:5a:21:fe:20:01:24:ce:84:c5:66:5a:d9:7c:a8:08:71:
bf:df:d6:c6:b2:19:98:7d:00:bf:75:15:d6:fa:22:69:e9:aa:
be:03:bb:38:ab:54:9c:ad:5f:90:9c:3f:8f:84:e5:74:2d:86:
56:f3:04:c8:b6:06:6b:94:56:29:c8:b0:4a:cb:a2:43:12:d7:
f4:3a:b0:d0:b1:a5:17:57:55:1e:95:1e:84:f9:eb:00:4a:1b:
45:07:9d:77:a1:bc:e5:6b:35:64:36:5e:c9:a2:ff:2b:37:70:
4e:bb:74:a4:f8:86:72:64:f0:7c:0e:9e:5b:a6:64:1e:0c:e7:
fa:35:77:1f:b7:8e:88:22:51:f4:98:d4:88:3d:b7:51:a4:37:
c2:cb:74:f7:88:12:55:58:eb:af:16:67:31:db:31:ba:66:ab:
25:a1:4c:ca:61:c7:96:29:1e:e3:c5:bd:b7:4b:5e:21:2e:2f:
9d:e0:cd:2d:74:3b:c6:05:70:8b:61:e2:42:22:e2:79:2f:8f:
8c:15:95:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:29:23 2026 by rpki-client