Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/BxIAgGugg3mdvw83vZjF2_Ww0jI.roa
File: BxIAgGugg3mdvw83vZjF2_Ww0jI.roa (raw, json)
Hash identifier: Omln+goGD9roS6a+IqM9CDEjdWrKRmuSfidI8ZCm4v0=
Subject key identifier: 07:12:00:80:6B:A0:83:79:9D:BF:0F:37:BD:98:C5:DB:F5:B0:D2:32
Certificate issuer: /CN=3210620d9889ffa1dd2e8911c416eebcc9711d2f
Certificate serial: 019F23687B9C3B2C94877DE74DC60333C64E
Authority key identifier: 32:10:62:0D:98:89:FF:A1:DD:2E:89:11:C4:16:EE:BC:C9:71:1D:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MhBiDZiJ_6HdLokRxBbuvMlxHS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/BxIAgGugg3mdvw83vZjF2_Ww0jI.roa
Signing time: Thu 02 Jul 2026 15:17:57 +0000
ROA not before: Thu 02 Jul 2026 15:17:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15751
IP address blocks: 109.125.0.0/18 maxlen: 18
185.51.72.0/23 maxlen: 23
212.129.64.0/24 maxlen: 24
212.129.66.0/23 maxlen: 23
212.129.68.0/22 maxlen: 22
212.129.72.0/21 maxlen: 21
212.129.80.0/20 maxlen: 20
2a01:b340::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/MhBiDZiJ_6HdLokRxBbuvMlxHS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/MhBiDZiJ_6HdLokRxBbuvMlxHS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/MhBiDZiJ_6HdLokRxBbuvMlxHS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:7b:9c:3b:2c:94:87:7d:e7:4d:c6:03:33:c6:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3210620d9889ffa1dd2e8911c416eebcc9711d2f
Validity
Not Before: Jul 2 15:17:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=071200806ba083799dbf0f37bd98c5dbf5b0d232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d5:a8:5e:81:3c:7d:bf:da:bd:5e:11:8e:02:
b6:b9:db:64:1f:43:a5:bf:4b:f2:25:0c:58:83:f4:
ab:5e:2f:58:6f:63:ea:85:14:63:dc:53:88:d9:8e:
e1:3d:5b:c6:ed:c3:a6:35:7c:7c:72:60:5d:13:2d:
46:c2:49:a7:a8:9b:15:2d:0d:72:cd:e5:3b:e9:65:
fb:fb:eb:c4:91:23:69:86:0d:57:16:de:17:38:1f:
ce:5f:93:63:86:3b:51:7e:d0:58:41:af:75:c9:87:
f2:1f:ec:05:a0:fb:a4:a2:6e:e8:43:05:b4:67:57:
c7:99:1f:d4:48:c0:bc:3c:24:d1:da:f3:1f:e6:96:
a6:0c:fa:b9:d6:4c:bd:ca:26:fe:c7:98:a8:a2:ee:
87:91:ec:af:86:4c:fb:30:36:4f:4b:9c:47:89:99:
65:6a:2a:f5:93:92:cf:dc:ae:e1:cc:5b:6a:b8:a7:
95:6f:cb:e1:1a:b4:80:c0:9c:85:6a:4a:71:ed:40:
86:8b:55:63:ca:ed:0d:81:cb:8e:e6:2f:2f:35:c9:
d3:36:b2:0b:4d:be:89:1d:c7:f7:ba:8f:fb:7f:03:
08:72:57:ba:3f:76:43:49:78:6c:56:28:20:33:f9:
15:82:f5:b5:ac:c0:d7:f0:08:68:c6:3e:8b:e7:3d:
ec:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:12:00:80:6B:A0:83:79:9D:BF:0F:37:BD:98:C5:DB:F5:B0:D2:32
X509v3 Authority Key Identifier:
keyid:32:10:62:0D:98:89:FF:A1:DD:2E:89:11:C4:16:EE:BC:C9:71:1D:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MhBiDZiJ_6HdLokRxBbuvMlxHS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/BxIAgGugg3mdvw83vZjF2_Ww0jI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/MhBiDZiJ_6HdLokRxBbuvMlxHS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.125.0.0/18
185.51.72.0/23
212.129.64.0/24
212.129.66.0-212.129.95.255
IPv6:
2a01:b340::/29
Signature Algorithm: sha256WithRSAEncryption
6d:25:20:77:11:bb:b9:0f:1c:11:7f:ee:f4:06:91:0e:3d:77:
89:0e:d4:af:27:b5:01:87:70:06:a3:81:5a:2c:23:7f:db:e2:
72:8d:48:a8:46:20:41:08:b4:4e:0a:f0:7b:49:bf:e8:bc:8f:
da:2a:02:0f:e8:14:6a:a5:48:c1:f4:df:01:05:98:c0:53:33:
fb:05:1b:cd:ef:83:cf:69:4a:70:c0:25:f3:09:7f:b5:54:f7:
51:88:88:59:7e:4b:f7:96:de:47:63:7a:96:b3:ce:de:bd:30:
d7:a0:79:22:39:6b:e1:97:b4:d4:74:8d:64:79:99:c3:88:68:
4d:5e:0f:c9:6a:03:5f:b5:b7:61:53:26:33:8b:88:2f:7c:56:
01:a6:e3:32:23:2e:11:b0:b8:c3:a4:f8:19:49:b6:d1:60:ab:
6f:e1:eb:8e:06:12:db:9a:db:2b:e6:54:29:58:13:8a:41:38:
e2:59:11:38:4c:d5:ae:a8:eb:59:b4:2b:77:2d:0d:a0:bf:36:
fe:14:82:8d:bd:91:e4:43:71:17:0d:0b:01:e0:2f:78:60:01:
b4:44:5b:60:c3:0c:76:39:95:01:20:83:de:ff:b0:55:9a:63:
18:e8:03:16:f6:6c:21:fd:ca:c2:b6:a0:0c:96:9b:4a:e9:f5:
d9:93:86:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:57:03 2026 by rpki-client