Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BELbG0buDnrwX8yyqjIkJQangBI.roa
File: BELbG0buDnrwX8yyqjIkJQangBI.roa (raw, json)
Hash identifier: OcW/vOwvgnaoQXL5YJmocEiTqiU1BtVOd/1xkgvaD3E=
Subject key identifier: 04:42:DB:1B:46:EE:0E:7A:F0:5F:CC:B2:AA:32:24:25:06:A7:80:12
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A0777FC9CB776D4BF4FFB4222A659C83FD
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BELbG0buDnrwX8yyqjIkJQangBI.roa
Signing time: Sun 06 Sep 2026 16:14:18 +0000
ROA not before: Sun 06 Sep 2026 16:14:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 31.13.230.0/24 maxlen: 24
37.139.128.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
45.66.231.0/24 maxlen: 24
45.89.247.0/24 maxlen: 24
45.91.194.0/24 maxlen: 24
45.129.85.0/24 maxlen: 24
45.141.158.0/24 maxlen: 24
79.110.50.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
85.209.133.0/24 maxlen: 24
85.217.130.0/23 maxlen: 24
87.120.87.0/24 maxlen: 24
87.120.126.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
87.120.192.0/24 maxlen: 24
87.121.79.0/24 maxlen: 24
87.121.114.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
91.200.192.0/22 maxlen: 24
92.249.48.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.109.0/24 maxlen: 24
94.154.163.0/24 maxlen: 24
94.156.14.0/24 maxlen: 24
94.156.188.0/24 maxlen: 32
147.78.101.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
185.246.221.0/24 maxlen: 24
185.252.177.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Sep 2026 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:77:7f:c9:cb:77:6d:4b:f4:ff:b4:22:2a:65:9c:83:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 6 16:14:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0442db1b46ee0e7af05fccb2aa32242506a78012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:62:dc:e7:03:03:e2:55:cb:39:21:19:21:55:
80:6b:07:4a:2b:20:98:a9:8d:1b:0c:e9:46:17:a3:
c5:8a:c6:cc:9c:05:38:fa:7d:8c:0b:85:3e:08:d7:
85:2d:24:13:8b:67:d1:8a:b2:49:b5:c0:1c:91:be:
69:44:fb:7e:c1:1f:7d:53:46:15:5b:3f:c1:bf:72:
e9:fd:8d:8b:4b:f6:15:77:48:2a:09:c7:14:3a:b3:
e3:66:e0:24:f8:d3:06:99:c5:1b:7a:9f:77:af:cb:
a2:5c:7d:59:a2:af:e6:c2:6f:34:59:22:19:84:74:
cd:4a:90:63:46:d9:68:66:45:17:99:08:08:22:93:
27:10:f0:33:f5:6d:f5:2d:cf:33:52:fc:73:38:36:
76:cd:f3:29:0b:cd:0c:85:94:94:39:38:b5:a5:83:
a3:29:19:5a:05:0d:b0:e6:76:f0:d1:4d:83:5f:87:
08:5f:26:c8:dc:eb:b3:51:d1:30:00:94:d3:5d:18:
a6:3d:86:87:fb:b1:61:03:17:c3:6f:bc:5e:61:29:
ef:a7:f1:e4:60:60:ca:bd:4c:10:a6:a8:4b:b4:af:
e5:1e:eb:a9:66:fc:d4:5d:b2:1c:1f:00:61:65:9a:
51:d5:fa:3b:e0:14:b0:70:c7:27:85:5b:9f:24:15:
d0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:42:DB:1B:46:EE:0E:7A:F0:5F:CC:B2:AA:32:24:25:06:A7:80:12
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BELbG0buDnrwX8yyqjIkJQangBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.230.0/24
37.139.128.0/24
45.66.228.0/24
45.66.231.0/24
45.89.247.0/24
45.91.194.0/24
45.129.85.0/24
45.141.158.0/24
79.110.50.0/24
85.31.47.0/24
85.209.133.0/24
85.217.130.0/23
87.120.87.0/24
87.120.126.0/24
87.120.166.0/24
87.120.192.0/24
87.121.79.0/24
87.121.114.0/24
87.121.221.0/24
91.200.192.0/22
92.249.48.0/24
92.249.50.0/24
93.123.109.0/24
94.154.163.0/24
94.156.14.0/24
94.156.188.0/24
147.78.101.0/24
185.222.160.0/24
185.246.221.0/24
185.252.177.0/24
194.48.251.0/24
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:64:bd:02:df:6b:d3:93:1a:ad:9c:c4:41:c8:57:80:08:15:
5d:12:f5:0e:c6:32:0a:6f:86:cb:76:02:c4:7b:cd:1a:23:6d:
b5:3b:59:e2:bc:0b:ff:db:4f:de:86:d4:d9:f1:19:ff:34:01:
d1:41:c0:64:82:0e:fe:d2:84:2d:ee:b3:93:aa:e4:81:d8:68:
ac:6c:bf:b7:97:15:c3:66:06:84:ef:a2:bf:15:77:55:6f:72:
02:e3:cb:3d:aa:5e:91:1d:ba:9a:08:71:4c:ef:9f:7c:5b:bc:
d5:f5:90:61:98:91:00:eb:65:2d:1b:3f:44:38:69:d7:a0:37:
f9:a9:59:80:94:f6:63:1f:b8:13:0a:a1:3b:d1:3b:be:75:ce:
21:e3:db:30:bb:2d:0a:cc:6d:e4:b9:c2:ea:11:00:4c:30:7b:
b1:01:12:ef:d8:d2:9b:6a:d3:19:e4:b2:5b:a5:c7:5a:e8:d7:
30:cf:d5:53:ea:b6:20:dd:91:bc:36:8c:6e:49:97:84:16:63:
30:8f:01:79:c6:8d:40:45:6a:76:d1:76:e6:a7:03:bd:e3:96:
10:ff:43:b7:b2:8e:e1:ee:c4:23:93:0a:07:6a:c6:61:89:53:
56:2f:46:99:70:ca:80:50:39:72:ce:98:da:48:a1:85:93:f5:
52:03:c3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 6 23:04:11 2026 by rpki-client