Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/bGPh0umyhHbLGpte1Ssz98pRXVA.roa
File: bGPh0umyhHbLGpte1Ssz98pRXVA.roa (raw, json)
Hash identifier: 4CgD1yFEYUPRgLKwwxhH4mQK3PdPKT1JiYhBWRbB2Ys=
Subject key identifier: 6C:63:E1:D2:E9:B2:84:76:CB:1A:9B:5E:D5:2B:33:F7:CA:51:5D:50
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 01A1157CDE7804E9F7CAA405BCBF97D286DA
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/bGPh0umyhHbLGpte1Ssz98pRXVA.roa
Signing time: Wed 07 Oct 2026 08:31:07 +0000
ROA not before: Wed 07 Oct 2026 08:31:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6762
IP address blocks: 2.16.19.0/24 maxlen: 24
2.16.70.0/23 maxlen: 23
2.16.146.0/23 maxlen: 23
2.16.220.0/22 maxlen: 22
2.18.0.0/22 maxlen: 22
2.20.109.0/24 maxlen: 24
2.20.110.0/24 maxlen: 24
2.20.112.0/22 maxlen: 22
2.20.242.0/24 maxlen: 24
2.20.252.0/24 maxlen: 24
2.21.2.0/24 maxlen: 24
2.21.14.0/24 maxlen: 24
2.21.100.0/22 maxlen: 22
2.22.216.0/22 maxlen: 22
88.221.28.0/22 maxlen: 22
88.221.100.0/22 maxlen: 22
92.122.68.0/22 maxlen: 22
92.122.225.0/24 maxlen: 24
92.122.248.0/22 maxlen: 22
92.123.48.0/24 maxlen: 24
92.123.106.0/24 maxlen: 24
92.123.208.0/22 maxlen: 22
95.100.136.0/22 maxlen: 22
95.101.35.0/24 maxlen: 24
95.101.68.0/22 maxlen: 22
95.101.78.0/24 maxlen: 24
95.101.114.0/24 maxlen: 24
95.101.156.0/22 maxlen: 22
2a02:26f0:b00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 17:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:7c:de:78:04:e9:f7:ca:a4:05:bc:bf:97:d2:86:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Oct 7 08:31:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c63e1d2e9b28476cb1a9b5ed52b33f7ca515d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:46:da:3b:b6:1b:4b:7d:3a:bc:75:9d:12:04:
4e:49:34:6b:7d:9f:81:c4:4c:96:b8:ca:9e:0f:4e:
39:cf:33:fe:12:62:82:49:16:e2:7d:03:5c:c3:07:
dd:6c:cf:18:c0:83:f9:c6:16:3f:5b:f5:0f:20:36:
62:fc:63:cf:15:09:99:42:61:17:44:d5:36:20:df:
f2:09:00:8b:1c:6c:26:4a:f2:f7:02:35:d9:a1:e6:
01:b7:8b:7f:e9:d6:65:7e:4f:10:62:d0:2c:e6:25:
c4:be:cc:fc:ff:b4:8d:c4:3c:4d:6e:78:62:92:50:
7f:2a:97:a3:7b:7a:3c:3e:fa:99:f5:c0:20:66:55:
2c:ff:ca:7d:bf:96:ab:4a:0a:80:50:02:0d:ae:49:
d7:65:1f:e6:57:ff:24:dd:60:29:9e:f6:1e:66:e1:
d0:40:e9:3b:f9:94:22:52:00:9f:85:6b:9c:ed:25:
56:d6:f2:ec:00:a9:e1:f3:91:90:49:c4:7e:2c:4f:
1b:4f:5a:8a:46:f3:66:2b:a9:f9:70:6a:91:be:7f:
46:c1:5e:6b:7d:bb:d5:07:a4:98:de:9f:b7:e7:11:
fb:d6:2f:d3:f4:c6:0c:51:24:2a:b5:80:7f:23:49:
30:e1:8e:c1:40:66:97:a2:3d:f7:a1:dd:3b:55:51:
13:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:63:E1:D2:E9:B2:84:76:CB:1A:9B:5E:D5:2B:33:F7:CA:51:5D:50
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/bGPh0umyhHbLGpte1Ssz98pRXVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.16.19.0/24
2.16.70.0/23
2.16.146.0/23
2.16.220.0/22
2.18.0.0/22
2.20.109.0-2.20.110.255
2.20.112.0/22
2.20.242.0/24
2.20.252.0/24
2.21.2.0/24
2.21.14.0/24
2.21.100.0/22
2.22.216.0/22
88.221.28.0/22
88.221.100.0/22
92.122.68.0/22
92.122.225.0/24
92.122.248.0/22
92.123.48.0/24
92.123.106.0/24
92.123.208.0/22
95.100.136.0/22
95.101.35.0/24
95.101.68.0/22
95.101.78.0/24
95.101.114.0/24
95.101.156.0/22
IPv6:
2a02:26f0:b00::/48
Signature Algorithm: sha256WithRSAEncryption
34:fe:28:dc:4a:cf:45:59:a8:71:98:2e:97:ca:ed:90:39:bf:
fc:a8:98:93:bf:68:e7:58:7a:5f:0b:a5:83:de:0a:77:79:54:
9c:af:dd:12:da:c6:bd:d8:d2:f9:58:a7:fa:78:14:7f:5e:a6:
7c:b9:98:3f:3e:1c:5e:41:56:ca:da:95:07:51:32:15:ee:e8:
d1:7a:c3:19:11:56:61:cf:e3:09:09:ed:3e:1d:1d:a8:e9:0f:
e9:10:33:d1:18:b2:61:31:14:b9:a4:d2:f2:2d:64:14:20:35:
c7:ad:a2:45:c6:33:72:5a:bd:a3:dd:8c:a7:0a:17:65:4a:1a:
ad:83:83:2d:6e:04:7d:d6:65:49:9b:8a:a7:a9:43:77:1e:90:
60:73:a1:bc:f8:bf:53:2f:ab:e8:5a:0b:97:5a:1e:96:1f:f4:
6b:b4:39:17:40:24:16:30:63:38:48:cf:34:fa:36:40:72:3d:
2a:ad:18:5d:cc:26:28:23:1c:3c:a4:2b:73:60:0e:d8:42:58:
f5:a9:7b:47:8a:80:5f:7d:2a:b7:6f:1f:98:ce:04:64:6c:3d:
2d:4e:b2:f7:ef:f3:33:41:a7:6a:39:8b:38:3a:fd:f3:55:31:
db:ad:85:ab:d4:2f:e5:fc:99:0b:e1:a9:97:af:db:22:c0:3f:
6a:65:de:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:14:09 2026 by rpki-client