Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/bRWHDllRTimAHXJPr3BWFRYwiOw.roa
File: bRWHDllRTimAHXJPr3BWFRYwiOw.roa (raw, json)
Hash identifier: ZphkvVFcIN1SWcOxvsWlpZsra0DjvHdnZbC9jDAnOEg=
Subject key identifier: 6D:15:87:0E:59:51:4E:29:80:1D:72:4F:AF:70:56:15:16:30:88:EC
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01A0470D9D84EC3FC61AFED6DF7995C96FB5
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/bRWHDllRTimAHXJPr3BWFRYwiOw.roa
Signing time: Fri 28 Aug 2026 06:27:49 +0000
ROA not before: Fri 28 Aug 2026 06:27:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7489
IP address blocks: 2.56.164.0/22 maxlen: 24
5.182.48.0/24 maxlen: 24
45.81.20.0/22 maxlen: 24
45.90.147.0/24 maxlen: 24
45.140.220.0/22 maxlen: 24
77.83.240.0/22 maxlen: 24
77.83.243.0/24 maxlen: 24
78.108.217.0/24 maxlen: 24
83.143.116.0/24 maxlen: 24
85.202.162.0/24 maxlen: 24
89.190.156.0/22 maxlen: 24
178.218.144.0/22 maxlen: 24
185.186.64.0/22 maxlen: 24
185.186.66.0/24 maxlen: 24
185.227.71.0/24 maxlen: 24
185.234.72.0/22 maxlen: 24
185.242.224.0/22 maxlen: 24
185.242.225.0/24 maxlen: 24
193.31.29.0/24 maxlen: 24
193.31.30.0/24 maxlen: 24
193.34.76.0/22 maxlen: 24
193.34.77.0/24 maxlen: 24
193.221.192.0/22 maxlen: 24
194.50.16.0/22 maxlen: 24
194.56.224.0/22 maxlen: 24
194.56.224.0/24 maxlen: 24
194.56.227.0/24 maxlen: 24
212.107.12.0/22 maxlen: 24
212.107.14.0/24 maxlen: 24
2a0b:b82::/44 maxlen: 44
2a0b:b84::/32 maxlen: 32
2a0b:b85::/32 maxlen: 32
2a0b:b86::/40 maxlen: 48
2a0b:b86:100::/40 maxlen: 48
2a0b:b86:fff0::/44 maxlen: 44
2a0b:b87:ff12::/48 maxlen: 48
2a0b:b87:ffb4::/48 maxlen: 48
2a0b:b87:ffc0::/44 maxlen: 44
2a0b:b87:ffd2::/48 maxlen: 48
2a0b:b87:ffda::/48 maxlen: 48
2a0b:b87:ffec::/48 maxlen: 48
2a0b:b87:fff0::/44 maxlen: 44
2a0b:7080:10::/44 maxlen: 44
2a0b:7080:10::/45 maxlen: 45
2a0b:7080:10::/48 maxlen: 48
2a0b:7080:20::/44 maxlen: 48
2a0b:7080:20::/48 maxlen: 48
2a0b:7080:30::/44 maxlen: 48
2a0b:7086:fff0::/44 maxlen: 44
2a0b:7087:fff0::/44 maxlen: 44
2a0d:77c0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:0d:9d:84:ec:3f:c6:1a:fe:d6:df:79:95:c9:6f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Aug 28 06:27:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d15870e59514e29801d724faf705615163088ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:47:b4:91:9c:26:d5:78:f4:a5:7e:d6:d7:3a:
11:d4:eb:bf:40:09:7e:b1:8f:73:f9:37:cc:0a:79:
18:54:b1:76:20:4c:09:cb:4a:8d:1d:90:1b:ba:a2:
5d:dc:db:27:b5:28:80:78:e8:3f:6b:13:f1:d1:d1:
4a:24:da:ee:e2:46:92:6b:55:15:26:36:5e:ea:5e:
c8:fe:76:23:51:8b:58:b8:4e:ed:49:5a:59:63:25:
6c:dd:73:e9:ae:24:45:d7:f3:99:02:2d:02:9a:5b:
f0:70:80:89:d0:15:22:f5:6e:db:ca:9f:a0:cc:88:
09:ef:a6:36:bd:32:4d:1e:ca:da:8f:0e:20:b7:fc:
ac:6f:b0:ca:e4:7c:05:8d:3b:29:e0:de:cf:8b:43:
f0:c2:17:98:cd:e4:ff:56:25:66:bc:67:1c:23:8a:
48:8f:15:ed:bc:46:6d:c9:33:84:21:71:29:c1:0e:
05:73:5e:a8:b0:81:6d:8e:90:10:ff:df:4d:c7:65:
78:dd:da:fa:7c:5d:26:bb:aa:ed:43:32:61:c3:1d:
d3:3e:03:69:27:42:ba:75:0e:24:3b:b2:ef:00:b2:
2c:a5:1e:41:02:f1:a9:46:9b:88:24:ec:c5:b6:40:
50:e1:53:32:a7:65:33:ed:cc:16:0f:df:aa:c2:41:
a0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:15:87:0E:59:51:4E:29:80:1D:72:4F:AF:70:56:15:16:30:88:EC
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/bRWHDllRTimAHXJPr3BWFRYwiOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.164.0/22
5.182.48.0/24
45.81.20.0/22
45.90.147.0/24
45.140.220.0/22
77.83.240.0/22
78.108.217.0/24
83.143.116.0/24
85.202.162.0/24
89.190.156.0/22
178.218.144.0/22
185.186.64.0/22
185.227.71.0/24
185.234.72.0/22
185.242.224.0/22
193.31.29.0-193.31.30.255
193.34.76.0/22
193.221.192.0/22
194.50.16.0/22
194.56.224.0/22
212.107.12.0/22
IPv6:
2a0b:b82::/44
2a0b:b84::-2a0b:b86:1ff:ffff:ffff:ffff:ffff:ffff
2a0b:b86:fff0::/44
2a0b:b87:ff12::/48
2a0b:b87:ffb4::/48
2a0b:b87:ffc0::/44
2a0b:b87:ffd2::/48
2a0b:b87:ffda::/48
2a0b:b87:ffec::/48
2a0b:b87:fff0::/44
2a0b:7080:10::-2a0b:7080:3f:ffff:ffff:ffff:ffff:ffff
2a0b:7086:fff0::/44
2a0b:7087:fff0::/44
2a0d:77c0::/29
Signature Algorithm: sha256WithRSAEncryption
c5:a0:01:e1:f6:bb:89:2e:3b:b3:18:d7:b7:4c:20:67:cb:40:
7a:4b:77:e4:40:aa:67:63:03:2b:c7:a3:9f:66:86:7a:bc:d6:
d2:05:8b:63:76:e2:97:9f:22:26:2f:d2:02:b8:52:b3:d5:71:
eb:0d:a1:06:59:cd:a2:43:c8:65:c0:33:b2:fa:19:c7:d8:37:
f1:03:12:ee:ba:52:83:38:78:e2:65:16:5e:75:3b:f4:cb:47:
aa:85:54:f0:06:dd:91:c1:51:7c:7a:a7:61:88:b1:5c:f0:98:
eb:05:fb:fd:64:0a:2f:20:df:de:af:f9:90:48:a8:5c:19:f6:
92:f8:5e:0d:6c:2a:41:42:2e:05:46:ff:73:59:4b:83:b6:a8:
db:d2:53:24:45:80:68:cc:e7:77:0b:e8:73:3b:33:9f:fe:3f:
e2:5c:69:4d:ff:eb:75:0f:49:57:45:9f:fc:39:ac:af:a1:38:
bf:10:8d:25:b8:4f:22:ab:66:58:4b:d5:2f:03:74:cb:95:9b:
c2:63:43:07:22:28:0b:56:0e:ec:92:cb:70:ea:51:12:f7:08:
b1:1d:88:ec:94:2b:5d:bd:66:45:f0:b3:e1:f9:9c:ba:65:ea:
73:c4:b6:a3:1c:f3:b6:06:b0:35:0f:45:8a:a4:6e:bb:5b:01:
58:56:64:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:33:06 2026 by rpki-client