Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/BvhaM_nZH3fQst7z68_40-nvNk8.roa
File: BvhaM_nZH3fQst7z68_40-nvNk8.roa (raw, json)
Hash identifier: w3u/cjgSvlFlc9grPNy8PjEmfYPvw7yuNYwBbz1TN6Y=
Subject key identifier: 06:F8:5A:33:F9:D9:1F:77:D0:B2:DE:F3:EB:CF:F8:D3:E9:EF:36:4F
Certificate issuer: /CN=fd2d1527607d1188e9db80cf16498a4138200cdc
Certificate serial: 01A05D064A9C9034872E0DCF09A2E6F76B4D
Authority key identifier: FD:2D:15:27:60:7D:11:88:E9:DB:80:CF:16:49:8A:41:38:20:0C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_S0VJ2B9EYjp24DPFkmKQTggDNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/BvhaM_nZH3fQst7z68_40-nvNk8.roa
Signing time: Tue 01 Sep 2026 12:51:28 +0000
ROA not before: Tue 01 Sep 2026 12:51:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197790
IP address blocks: 91.240.238.0/24 maxlen: 24
91.240.239.0/24 maxlen: 24
171.22.80.0/22 maxlen: 24
185.32.144.0/24 maxlen: 24
185.32.145.0/24 maxlen: 24
185.32.146.0/24 maxlen: 24
185.32.147.0/24 maxlen: 24
185.80.160.0/22 maxlen: 24
185.119.184.0/22 maxlen: 24
194.5.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_S0VJ2B9EYjp24DPFkmKQTggDNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:06:4a:9c:90:34:87:2e:0d:cf:09:a2:e6:f7:6b:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2d1527607d1188e9db80cf16498a4138200cdc
Validity
Not Before: Sep 1 12:51:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06f85a33f9d91f77d0b2def3ebcff8d3e9ef364f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:03:51:65:41:7a:30:79:f8:80:29:f2:ed:70:
28:85:e9:4c:6c:54:16:65:f6:de:b9:23:94:13:d6:
00:47:08:35:03:9c:68:eb:1d:4c:31:43:6c:63:01:
b9:72:e9:83:30:5b:58:10:23:46:5f:0f:d6:4a:37:
d9:79:0b:47:02:0e:9e:2c:d6:cf:45:98:c2:c0:7e:
cb:c8:12:a2:58:fa:83:d7:97:7f:e6:85:df:ef:f0:
ae:32:f6:09:3c:d6:80:a5:b7:bd:af:aa:4c:e9:6b:
d8:52:5a:ee:98:1a:b7:7c:95:8d:3b:0e:33:07:0d:
4c:9c:b2:8a:36:5f:e7:10:91:14:b0:17:ca:46:3c:
c9:ca:02:0b:db:50:48:17:54:55:b8:ba:95:80:8e:
b0:c7:2e:da:cd:d5:63:5f:69:04:d3:24:42:30:84:
91:eb:e3:ad:d2:3b:63:d7:9d:94:91:75:0e:54:99:
3e:54:a2:23:55:08:4c:14:d0:46:c5:34:dc:be:96:
aa:3d:20:bf:16:c9:5e:43:e5:98:2f:8a:ba:27:1a:
e5:ce:be:76:91:9d:ca:b7:b8:35:10:a6:c2:9a:70:
49:4f:ab:a0:e4:0e:8d:1d:83:7c:4d:65:1d:06:19:
a9:09:19:5e:c8:23:0a:a1:3a:6a:78:fa:fb:fe:21:
50:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F8:5A:33:F9:D9:1F:77:D0:B2:DE:F3:EB:CF:F8:D3:E9:EF:36:4F
X509v3 Authority Key Identifier:
keyid:FD:2D:15:27:60:7D:11:88:E9:DB:80:CF:16:49:8A:41:38:20:0C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_S0VJ2B9EYjp24DPFkmKQTggDNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/BvhaM_nZH3fQst7z68_40-nvNk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9997a0-f2d5-40c2-8dc7-dc1abec1666c/1/_S0VJ2B9EYjp24DPFkmKQTggDNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.238.0/23
171.22.80.0/22
185.32.144.0/22
185.80.160.0/22
185.119.184.0/22
194.5.12.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:10:d8:ff:1e:a4:7e:29:74:99:c6:27:93:04:82:4f:93:d1:
9b:a7:bd:19:5e:76:ff:d2:75:0a:e0:3f:fe:14:98:3b:d9:13:
ef:cb:9c:99:12:f4:60:5c:d7:68:c5:a4:dd:24:f5:c5:b2:ee:
6a:35:d0:db:21:3b:ae:ce:21:ad:17:3b:28:cc:96:cd:a3:85:
ee:f3:87:7b:85:e7:63:1f:eb:d3:e2:a9:67:20:e7:e8:6a:34:
eb:7b:94:82:d8:e2:cf:c5:1e:ae:2f:fc:af:90:4f:10:0e:e0:
51:0c:76:f9:58:83:bf:1c:d9:87:70:fc:7f:d7:b7:2c:4b:8b:
7c:65:a4:1e:f5:3b:7a:2b:7f:5d:10:aa:85:d6:c6:64:db:0b:
1b:2c:40:0d:d4:db:37:18:a8:19:9a:31:34:ad:64:83:76:18:
91:58:4e:6c:e9:61:4e:18:b2:ff:c1:a0:20:f9:30:37:af:06:
fb:b8:e9:9f:ec:f2:e6:c3:2a:4d:de:29:f1:71:dc:5d:af:df:
08:bf:04:cb:67:f4:8a:99:cc:cc:e3:b2:cf:65:82:ad:ac:e2:
e4:cc:98:e3:c5:7b:84:16:df:f8:27:9c:ac:8c:66:6e:ef:1a:
ec:d4:ac:7f:bf:8b:54:73:ff:53:4a:8a:6d:06:fe:c3:1d:8b:
10:41:5d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:11:49 2026 by rpki-client