Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bolGN3-qEnrx_YHKUpEeaCrGGWQ.roa
File: bolGN3-qEnrx_YHKUpEeaCrGGWQ.roa (raw, json)
Hash identifier: UlyK1Ko/qu2bmjtNW8olqaO5JAPtWPBh14En8jM3jKM=
Subject key identifier: 6E:89:46:37:7F:AA:12:7A:F1:FD:81:CA:52:91:1E:68:2A:C6:19:64
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A026CEE5D04E2A3E9CE71790D0B6734931
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bolGN3-qEnrx_YHKUpEeaCrGGWQ.roa
Signing time: Sat 22 Aug 2026 00:11:28 +0000
ROA not before: Sat 22 Aug 2026 00:11:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215607
IP address blocks: 5.175.186.0/24 maxlen: 24
5.175.248.0/24 maxlen: 24
77.90.33.0/24 maxlen: 24
85.118.163.0/24 maxlen: 24
89.106.89.0/24 maxlen: 24
89.144.3.0/24 maxlen: 24
94.249.190.0/24 maxlen: 24
94.249.203.0/24 maxlen: 24
94.249.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:26:ce:e5:d0:4e:2a:3e:9c:e7:17:90:d0:b6:73:49:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 22 00:11:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e8946377faa127af1fd81ca52911e682ac61964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:81:bc:36:40:77:c0:d9:40:ad:4a:d7:6a:25:
32:26:8f:6b:5e:4d:dc:10:d5:88:f6:cd:ae:af:b7:
a7:f1:94:c0:05:83:a3:77:91:b1:6c:96:35:31:3b:
51:66:8b:db:ec:5c:52:dd:29:33:f6:3d:12:d9:6a:
83:32:3e:4c:79:cc:e1:36:00:e4:31:cf:cd:b8:75:
05:73:83:a9:75:a3:1b:3a:3b:f7:43:41:65:c7:85:
09:c3:c7:f4:45:06:49:aa:bd:81:88:39:9e:9e:c7:
6a:c5:d2:f1:51:02:26:7f:6d:99:11:7c:e3:38:e7:
07:b1:86:bf:3e:bd:f2:68:c8:8b:06:7f:25:0b:90:
a0:1f:ec:9d:16:ad:7e:de:92:56:00:01:b6:ba:b8:
25:d4:78:27:57:1e:65:4b:ca:af:36:0a:57:6b:4e:
15:39:ad:6b:c4:41:25:cc:fc:9b:59:5b:c2:e0:0a:
40:7b:7e:99:f9:c1:f2:24:20:29:ea:7d:bd:65:a4:
94:ec:5c:a0:f4:02:d1:6d:39:fa:a7:3b:5b:32:ba:
c1:c9:80:08:26:da:a1:55:a6:09:c5:f9:62:ad:c1:
42:60:cc:7d:f9:5d:df:cb:32:d1:08:b4:cf:8c:e0:
24:fb:d5:e5:27:c6:48:63:ca:b3:72:ce:09:c9:9a:
6a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:89:46:37:7F:AA:12:7A:F1:FD:81:CA:52:91:1E:68:2A:C6:19:64
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/bolGN3-qEnrx_YHKUpEeaCrGGWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.186.0/24
5.175.248.0/24
77.90.33.0/24
85.118.163.0/24
89.106.89.0/24
89.144.3.0/24
94.249.190.0/24
94.249.203.0/24
94.249.239.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:ae:4e:88:0e:1e:70:88:61:86:a1:48:21:38:17:8d:1a:11:
1c:9d:21:88:c5:ca:a3:4e:8d:eb:93:d3:62:e2:a3:d4:ac:3a:
27:1f:9f:6d:70:23:83:6c:4a:9c:e2:12:f6:d9:88:8c:5f:0e:
19:11:90:23:7b:66:58:da:a1:d8:43:fc:bc:df:51:92:e0:5b:
6a:44:d5:87:33:62:e3:ed:75:34:93:fd:88:6c:68:d1:ec:f9:
ed:a3:13:3e:14:43:f9:82:af:25:b8:0c:c5:7a:11:21:77:49:
13:3e:f5:ed:85:be:50:52:c0:26:4f:ef:71:a0:1e:7a:fc:42:
d2:29:1b:2d:a1:7e:a6:cc:59:b1:bd:de:bc:0f:15:bb:4c:18:
d2:11:7a:58:f3:68:88:eb:59:7a:30:b9:71:d2:9e:b3:01:bb:
3f:36:d4:9d:b8:7e:7d:0d:77:55:5b:2c:14:7b:b6:c8:fb:34:
c0:83:fa:6a:68:78:6c:65:f9:c7:af:e7:47:75:bc:71:87:6d:
6b:d3:87:09:c8:f8:6d:36:a2:2a:1f:f8:09:a9:8c:d6:45:c9:
2b:a1:73:2a:27:ef:11:25:fe:01:d1:ab:c4:2b:bc:ef:06:6b:
97:50:f0:3d:83:ae:a9:a3:e8:b0:05:73:93:3f:44:0d:7a:e3:
f0:74:f0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:23:51 2026 by rpki-client