Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Bvsrhk7j2ALBm0gyMo2rHsAtYKw.roa
File: Bvsrhk7j2ALBm0gyMo2rHsAtYKw.roa (raw, json)
Hash identifier: 3W4f2uRv0/KYmBV5WfPaxXwe9MvtL1giHt2L6iuCIys=
Subject key identifier: 06:FB:2B:86:4E:E3:D8:02:C1:9B:48:32:32:8D:AB:1E:C0:2D:60:AC
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F223B1263E8D9F386203BD6A5488BFDCA
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Bvsrhk7j2ALBm0gyMo2rHsAtYKw.roa
Signing time: Thu 02 Jul 2026 09:48:44 +0000
ROA not before: Thu 02 Jul 2026 09:48:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 5.83.149.0/24 maxlen: 24
89.106.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:34:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:3b:12:63:e8:d9:f3:86:20:3b:d6:a5:48:8b:fd:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 2 09:48:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06fb2b864ee3d802c19b4832328dab1ec02d60ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a3:d8:99:2e:22:42:d5:79:2c:b6:4a:54:ec:
70:e8:9a:1f:53:62:bc:83:18:c5:cd:e6:c0:ff:a7:
e7:cd:8e:4a:f6:16:ba:8c:83:45:be:d4:99:c5:a4:
a8:6a:5a:c5:b1:8c:0d:aa:69:88:12:4a:cb:4d:11:
f5:7c:75:47:c3:ae:12:c2:c2:a4:6e:a8:69:01:ee:
78:45:d5:74:e7:43:ba:af:1c:12:d4:85:5c:d5:7d:
5b:7a:31:bf:21:b8:4a:ee:32:19:38:3f:e0:85:c0:
87:81:17:cb:82:6a:ab:0e:21:ff:63:f2:07:65:90:
33:05:79:fa:ce:29:90:1b:87:e7:45:73:9d:62:3e:
15:d6:39:21:a2:26:12:0b:6d:38:69:b1:74:35:80:
49:d1:59:60:a0:c9:f8:92:a8:e5:f0:57:fe:5b:c4:
45:31:ab:2b:8a:4f:5a:3e:fb:b7:aa:2f:e3:42:4d:
c4:c4:2b:09:6d:66:b1:0f:77:fd:28:a2:9c:b8:c3:
f4:00:06:9f:c0:56:2b:9d:21:ce:16:ca:89:63:28:
63:c6:d3:82:f6:33:ac:2d:d6:55:56:ea:59:01:bb:
16:01:69:9e:92:31:17:2e:3f:f0:b2:a7:a5:4d:0d:
d2:35:9f:92:78:29:e9:42:c5:bc:73:86:db:12:59:
8b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FB:2B:86:4E:E3:D8:02:C1:9B:48:32:32:8D:AB:1E:C0:2D:60:AC
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Bvsrhk7j2ALBm0gyMo2rHsAtYKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.149.0/24
89.106.90.0/24
Signature Algorithm: sha256WithRSAEncryption
62:3c:10:f2:80:12:27:87:af:f1:c6:fe:7d:96:d5:13:19:99:
60:0c:8b:68:03:e0:e4:25:da:69:46:77:0d:df:d4:f5:05:ba:
16:4c:ae:54:1a:e0:2f:88:35:de:77:a7:89:72:30:69:a7:8f:
f4:40:d2:21:e3:cf:fe:e8:18:04:72:1e:a1:51:cd:3b:58:3c:
a9:72:53:8e:25:48:0a:43:df:f3:cf:2e:ff:8c:d1:ed:d6:a3:
ae:43:ef:bc:4a:f9:c0:6e:cd:71:33:e9:08:8b:20:fd:7d:0e:
25:49:f9:ee:b3:9c:33:bf:97:c3:5d:e2:46:6c:d8:00:1a:12:
23:6e:22:bd:11:b1:7a:40:a5:7f:ad:3f:ae:d6:b3:05:6e:ae:
27:8a:3a:9a:7b:3e:49:3b:5c:60:f5:49:1d:bb:7f:76:c8:db:
2a:32:30:ce:1c:e5:df:21:cd:0a:05:f1:71:8f:d2:e8:cd:9c:
16:dc:3b:ba:ba:35:14:0c:00:e4:77:9d:ba:cb:71:37:f6:c8:
1f:9d:a8:8e:bf:9f:98:2e:59:03:2c:cd:c7:f0:a6:01:1e:4f:
00:a0:a3:58:6a:88:75:12:aa:1b:8e:96:f6:6c:d7:17:75:44:
2f:04:d1:c8:cb:f0:e8:1a:62:ee:0d:00:e2:79:68:c4:29:e1:
72:97:9e:84
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ8iOxJj6NnzhiA71qVIi/3KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjYwNzAyMDk0ODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNmZiMmI4NjRlZTNkODAyYzE5YjQ4MzIzMjhkYWIxZWMwMmQ2MGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaPYmS4iQtV5LLZKVOxw6JofU2K8
gxjFzebA/6fnzY5K9ha6jINFvtSZxaSoalrFsYwNqmmIEkrLTRH1fHVHw64SwsKk
bqhpAe54RdV050O6rxwS1IVc1X1bejG/IbhK7jIZOD/ghcCHgRfLgmqrDiH/Y/IH
ZZAzBXn6zimQG4fnRXOdYj4V1jkhoiYSC204abF0NYBJ0VlgoMn4kqjl8Ff+W8RF
Masrik9aPvu3qi/jQk3ExCsJbWaxD3f9KKKcuMP0AAafwFYrnSHOFsqJYyhjxtOC
9jOsLdZVVupZAbsWAWmekjEXLj/wsqelTQ3SNZ+SeCnpQsW8c4bbElmLRwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAb7K4ZO49gCwZtIMjKNqx7ALWCsMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvQnZzcmhrN2oyQUxCbTBneU1vMnJIc0F0WUt3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABVOVAwQA
WWpaMA0GCSqGSIb3DQEBCwUAA4IBAQBiPBDygBInh6/xxv59ltUTGZlgDItoA+Dk
JdppRncN39T1BboWTK5UGuAviDXed6eJcjBpp4/0QNIh48/+6BgEch6hUc07WDyp
clOOJUgKQ9/zzy7/jNHt1qOuQ++8SvnAbs1xM+kIiyD9fQ4lSfnus5wzv5fDXeJG
bNgAGhIjbiK9EbF6QKV/rT+u1rMFbq4nijqaez5JO1xg9Ukdu392yNsqMjDOHOXf
Ic0KBfFxj9LozZwW3Du6ujUUDADkd526y3E39sgfnaiOv5+YLlkDLM3H8KYBHk8A
oKNYaoh1Eqobjpb2bNcXdUQvBNHIy/DoGmLuDQDieWjEKeFyl56E
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:53 2026 by rpki-client