Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/BzsQkoVq_YLGO_mJG06Yv2zPzMg.roa
File: BzsQkoVq_YLGO_mJG06Yv2zPzMg.roa (raw, json)
Hash identifier: WO4P2/d1C0sRwlF4uudAsZ32Hvo1MLLEev26/O/00Ww=
Subject key identifier: 07:3B:10:92:85:6A:FD:82:C6:3B:F9:89:1B:4E:98:BF:6C:CF:CC:C8
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 01A00F6C412A365D23FB36D83385FBD90051
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/BzsQkoVq_YLGO_mJG06Yv2zPzMg.roa
Signing time: Mon 17 Aug 2026 11:12:27 +0000
ROA not before: Mon 17 Aug 2026 11:12:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 2.56.112.0/24 maxlen: 24
45.132.48.0/24 maxlen: 24
45.157.136.0/24 maxlen: 24
62.68.87.0/24 maxlen: 24
62.204.36.0/24 maxlen: 24
62.233.49.0/24 maxlen: 24
62.233.56.0/24 maxlen: 24
62.233.60.0/24 maxlen: 24
80.68.145.0/24 maxlen: 24
80.68.158.0/24 maxlen: 24
80.91.209.0/24 maxlen: 24
80.91.210.0/24 maxlen: 24
91.226.247.0/24 maxlen: 24
93.177.104.0/24 maxlen: 24
94.143.226.0/24 maxlen: 24
94.158.191.0/24 maxlen: 24
130.193.79.0/24 maxlen: 24
130.255.169.0/24 maxlen: 24
146.19.137.0/24 maxlen: 24
146.19.148.0/24 maxlen: 24
146.19.150.0/24 maxlen: 24
146.19.152.0/24 maxlen: 24
146.19.190.0/24 maxlen: 24
176.56.38.0/24 maxlen: 24
185.122.206.0/24 maxlen: 24
185.218.1.0/24 maxlen: 24
193.3.22.0/24 maxlen: 24
193.239.209.0/24 maxlen: 24
195.64.112.0/24 maxlen: 24
195.96.136.0/24 maxlen: 24
195.96.157.0/24 maxlen: 24
212.52.5.0/24 maxlen: 24
217.114.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 11:12:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0f:6c:41:2a:36:5d:23:fb:36:d8:33:85:fb:d9:00:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Aug 17 11:12:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=073b1092856afd82c63bf9891b4e98bf6ccfccc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d2:7c:76:23:1a:f5:ac:15:9c:22:60:64:3e:
b4:70:c6:02:7d:89:55:f3:e9:a3:bd:a5:ca:5d:c2:
93:e6:38:d4:29:cc:32:9d:98:ad:3b:04:6b:2a:1d:
8b:31:b6:a7:f5:a4:37:10:07:bc:fd:13:28:db:c5:
fd:94:c4:9e:84:90:c2:26:83:bf:2e:2d:56:b7:d5:
f9:39:fb:ed:9b:f0:fa:38:c4:2e:3e:1e:1c:3c:73:
31:8f:01:8b:0b:f1:a7:83:d6:6b:ab:b4:c8:ab:e2:
4f:3d:15:67:94:4f:19:e5:81:df:36:b1:d0:57:38:
bd:ce:63:02:dc:ab:36:85:d0:f1:6f:14:52:a7:de:
e3:4c:0f:19:c0:61:44:c5:53:88:4b:be:8a:fe:6b:
a7:7b:48:8e:ba:82:f9:a6:4a:25:93:3f:c4:2d:15:
34:96:04:93:94:39:1b:7d:28:10:6f:01:33:16:a4:
e2:57:6b:09:46:ae:58:8c:2e:a2:d5:3b:a7:94:c0:
6d:97:a2:fe:85:fe:23:47:6f:c2:c7:b6:35:81:0e:
a5:be:25:44:1a:e8:56:96:2d:e2:23:67:06:ff:6a:
5e:e2:23:aa:01:05:4c:2e:6f:b1:2a:78:d9:b1:7e:
e0:75:90:34:d5:17:3e:03:4b:ea:54:95:2b:f4:a0:
d8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3B:10:92:85:6A:FD:82:C6:3B:F9:89:1B:4E:98:BF:6C:CF:CC:C8
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/BzsQkoVq_YLGO_mJG06Yv2zPzMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.112.0/24
45.132.48.0/24
45.157.136.0/24
62.68.87.0/24
62.204.36.0/24
62.233.49.0/24
62.233.56.0/24
62.233.60.0/24
80.68.145.0/24
80.68.158.0/24
80.91.209.0-80.91.210.255
91.226.247.0/24
93.177.104.0/24
94.143.226.0/24
94.158.191.0/24
130.193.79.0/24
130.255.169.0/24
146.19.137.0/24
146.19.148.0/24
146.19.150.0/24
146.19.152.0/24
146.19.190.0/24
176.56.38.0/24
185.122.206.0/24
185.218.1.0/24
193.3.22.0/24
193.239.209.0/24
195.64.112.0/24
195.96.136.0/24
195.96.157.0/24
212.52.5.0/24
217.114.32.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:4b:38:66:5e:fa:bc:eb:05:3a:1b:83:36:af:5b:d5:5f:9d:
53:35:9a:e9:0b:5e:33:ce:af:aa:95:23:ee:f5:18:6f:11:36:
e8:60:46:d7:c4:cd:92:a4:59:06:fd:87:a6:93:22:8e:99:35:
6b:5f:49:94:d7:62:0d:dd:34:f4:4f:34:ee:d4:b9:a9:b9:bd:
90:a7:04:b3:82:c4:7d:44:fc:49:a8:82:a2:3e:5c:21:24:a7:
29:1e:59:1c:58:1b:c9:ed:b8:f9:f5:96:cd:e2:f0:56:c0:06:
48:a5:de:7d:d0:39:d8:82:e2:92:a5:e3:8e:37:a7:fd:2f:62:
6d:ad:b1:ba:47:3a:70:e7:b1:30:d1:e5:67:4d:fa:0f:25:3d:
e4:6e:4f:bf:66:5d:9d:2b:42:6c:0b:9c:b5:fd:4b:af:81:b4:
69:ac:bd:25:f1:46:5c:54:6d:a3:71:f1:bb:e6:f4:35:5a:a3:
45:b8:90:1f:c4:22:ff:17:75:06:64:ec:a0:f7:e9:c4:6e:14:
0f:96:29:24:e9:de:74:1f:f5:20:3c:c9:27:7e:49:d4:ac:27:
ef:9c:fb:16:53:4f:ba:4a:af:ad:d9:b0:74:88:d9:84:74:21:
36:03:12:fa:9d:49:c7:45:ca:05:a2:9c:1d:27:56:bd:da:6c:
e4:42:3c:a5
-----BEGIN CERTIFICATE-----
MIIFxDCCBKygAwIBAgISAaAPbEEqNl0j+zbYM4X72QBRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw
N2VlNTYwHhcNMjYwODE3MTExMjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzNiMTA5Mjg1NmFmZDgyYzYzYmY5ODkxYjRlOThiZjZjY2ZjY2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtJ8diMa9awVnCJgZD60cMYCfYlV
8+mjvaXKXcKT5jjUKcwynZitOwRrKh2LMban9aQ3EAe8/RMo28X9lMSehJDCJoO/
Li1Wt9X5Ofvtm/D6OMQuPh4cPHMxjwGLC/Gng9Zrq7TIq+JPPRVnlE8Z5YHfNrHQ
Vzi9zmMC3Ks2hdDxbxRSp97jTA8ZwGFExVOIS76K/mune0iOuoL5pkolkz/ELRU0
lgSTlDkbfSgQbwEzFqTiV2sJRq5YjC6i1TunlMBtl6L+hf4jR2/Cx7Y1gQ6lviVE
GuhWli3iI2cG/2pe4iOqAQVMLm+xKnjZsX7gdZA01Rc+A0vqVJUr9KDYHwIDAQAB
o4IC0DCCAswwHQYDVR0OBBYEFAc7EJKFav2Cxjv5iRtOmL9sz8zIMB8GA1UdIwQY
MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt
OGJmYmRkNDVjYjYyLzEvQnpzUWtvVnFfWUxHT19tSkcwNll2MnpQek1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy
LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHlBggrBgEFBQcBBwEB/wSB1TCB0jCBzwQCAAEwgcgDBAAC
OHADBAAthDADBAAtnYgDBAA+RFcDBAA+zCQDBAA+6TEDBAA+6TgDBAA+6TwDBABQ
RJEDBABQRJ4wDAMEAFBb0QMEAFBb0gMEAFvi9wMEAF2xaAMEAF6P4gMEAF6evwME
AILBTwMEAIL/qQMEAJITiQMEAJITlAMEAJITlgMEAJITmAMEAJITvgMEALA4JgME
ALl6zgMEALnaAQMEAMEDFgMEAMHv0QMEAMNAcAMEAMNgiAMEAMNgnQMEANQ0BQME
ANlyIDANBgkqhkiG9w0BAQsFAAOCAQEAa0s4Zl76vOsFOhuDNq9b1V+dUzWa6Qte
M86vqpUj7vUYbxE26GBG18TNkqRZBv2HppMijpk1a19JlNdiDd009E807tS5qbm9
kKcEs4LEfUT8SaiCoj5cISSnKR5ZHFgbye24+fWWzeLwVsAGSKXefdA52ILikqXj
jjen/S9iba2xukc6cOexMNHlZ036DyU95G5Pv2ZdnStCbAuctf1Lr4G0aay9JfFG
XFRto3Hxu+b0NVqjRbiQH8Qi/xd1BmTsoPfpxG4UD5YpJOnedB/1IDzJJ35J1Kwn
75z7FlNPukqvrdmwdIjZhHQhNgMS+p1Jx0XKBaKcHSdWvdps5EI8pQ==
-----END CERTIFICATE-----
Generated at Mon Aug 17 18:39:20 2026 by rpki-client