Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/bv8Jy2Ggkv_unKNYC2Wm2j0_4Ls.roa
File: bv8Jy2Ggkv_unKNYC2Wm2j0_4Ls.roa (raw, json)
Hash identifier: iDhvNAHl3H07Bvw/93MOVys8cig991UhSd4f5ZgdRrs=
Subject key identifier: 6E:FF:09:CB:61:A0:92:FF:EE:9C:A3:58:0B:65:A6:DA:3D:3F:E0:BB
Certificate issuer: /CN=aa2d7547181d78a0878f7c346e301da0e12de3a9
Certificate serial: 019F23684282D17E0E0FF10A2E86A9A1709D
Authority key identifier: AA:2D:75:47:18:1D:78:A0:87:8F:7C:34:6E:30:1D:A0:E1:2D:E3:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qi11RxgdeKCHj3w0bjAdoOEt46k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/bv8Jy2Ggkv_unKNYC2Wm2j0_4Ls.roa
Signing time: Thu 02 Jul 2026 15:17:42 +0000
ROA not before: Thu 02 Jul 2026 15:17:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35765
IP address blocks: 87.247.192.0/22 maxlen: 22
87.247.196.0/22 maxlen: 22
87.247.200.0/22 maxlen: 22
87.247.204.0/22 maxlen: 22
87.247.208.0/20 maxlen: 20
195.128.104.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/qi11RxgdeKCHj3w0bjAdoOEt46k.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/qi11RxgdeKCHj3w0bjAdoOEt46k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qi11RxgdeKCHj3w0bjAdoOEt46k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 15:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:42:82:d1:7e:0e:0f:f1:0a:2e:86:a9:a1:70:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa2d7547181d78a0878f7c346e301da0e12de3a9
Validity
Not Before: Jul 2 15:17:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6eff09cb61a092ffee9ca3580b65a6da3d3fe0bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b8:ae:c1:c6:60:c3:7f:f8:f9:ca:07:89:2c:
c1:d4:5b:5c:32:5a:67:55:e4:f2:86:c0:09:cc:21:
eb:45:ab:f1:43:83:bc:8f:23:62:75:67:2f:cf:8a:
47:6d:4e:03:10:e7:d6:43:e5:56:cd:c7:46:3e:74:
89:57:06:29:65:1c:39:06:3d:7f:e7:3b:f7:b8:eb:
ed:20:44:77:0d:fc:1e:50:c9:c3:73:6b:1a:8d:64:
21:21:07:96:2e:f0:87:b1:10:60:42:8b:67:ab:38:
34:8c:38:80:a1:a8:81:1c:b3:ac:9d:67:7e:e4:70:
94:c4:8c:39:11:7b:b7:30:0e:4e:55:0f:f9:23:46:
cd:2a:51:ea:79:94:e6:3e:9a:fc:83:9e:e5:94:2a:
9a:5b:bc:be:2c:7a:88:df:0d:92:9a:55:f7:a4:1b:
a7:c4:d1:1e:3e:8a:45:2e:9a:bf:65:97:84:c1:62:
c0:96:c5:42:5a:21:d4:00:06:91:ba:fc:34:ac:25:
92:02:3d:4a:66:5b:63:b4:df:ae:ef:f0:30:e3:13:
9e:34:58:cd:a8:f5:0e:96:6f:52:55:de:09:18:a6:
93:40:eb:27:34:fc:5e:e0:fd:d5:3e:32:36:4f:b1:
7d:75:ad:79:ab:23:bf:33:5d:b6:f5:ff:0a:dc:57:
b1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:FF:09:CB:61:A0:92:FF:EE:9C:A3:58:0B:65:A6:DA:3D:3F:E0:BB
X509v3 Authority Key Identifier:
keyid:AA:2D:75:47:18:1D:78:A0:87:8F:7C:34:6E:30:1D:A0:E1:2D:E3:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qi11RxgdeKCHj3w0bjAdoOEt46k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/bv8Jy2Ggkv_unKNYC2Wm2j0_4Ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/qi11RxgdeKCHj3w0bjAdoOEt46k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.247.192.0/19
195.128.104.0/21
Signature Algorithm: sha256WithRSAEncryption
8b:dd:32:e7:82:12:8b:9f:a8:f3:be:c9:4c:9f:01:67:02:3e:
93:ef:72:87:52:5a:d0:78:dc:1f:31:1b:5f:5c:7b:01:f0:26:
69:09:8b:cf:41:77:52:28:e4:65:7f:4d:3d:ac:cc:73:30:b2:
21:f9:66:82:9d:fa:ab:1e:45:29:eb:2e:b2:bb:b5:b8:a6:a0:
55:14:8f:10:db:01:02:41:d2:a7:f2:da:16:11:06:37:8b:62:
67:b3:cd:23:b5:ff:45:ca:b5:e7:46:bb:77:0d:2a:8f:28:97:
bd:51:45:29:cf:a4:00:94:21:e1:1e:18:ff:54:b0:84:96:e9:
65:b8:27:85:4d:4b:af:8a:54:71:96:e4:ab:da:18:55:c2:11:
66:2b:e3:d6:67:d7:1d:61:d8:e5:fb:9a:7d:c9:2f:bf:86:87:
a0:fc:b1:2b:f8:46:10:13:14:c4:98:9c:00:51:22:c9:e0:15:
ae:6d:55:84:d7:52:5e:ff:35:09:48:99:f1:e2:f6:bd:51:e4:
39:f8:eb:eb:23:88:de:55:35:49:25:05:7b:c4:db:41:f5:01:
87:ea:7c:c2:55:03:4a:d3:ee:ce:bd:16:06:58:0f:7d:df:35:
01:20:0d:13:0f:35:65:2b:f0:29:89:04:81:36:73:f7:30:02:
e5:97:56:a8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ8jaEKC0X4OD/EKLoapoXCdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMmQ3NTQ3MTgxZDc4YTA4NzhmN2MzNDZlMzAxZGEwZTEy
ZGUzYTkwHhcNMjYwNzAyMTUxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZWZmMDljYjYxYTA5MmZmZWU5Y2EzNTgwYjY1YTZkYTNkM2ZlMGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqriuwcZgw3/4+coHiSzB1FtcMlpn
VeTyhsAJzCHrRavxQ4O8jyNidWcvz4pHbU4DEOfWQ+VWzcdGPnSJVwYpZRw5Bj1/
5zv3uOvtIER3DfweUMnDc2sajWQhIQeWLvCHsRBgQotnqzg0jDiAoaiBHLOsnWd+
5HCUxIw5EXu3MA5OVQ/5I0bNKlHqeZTmPpr8g57llCqaW7y+LHqI3w2SmlX3pBun
xNEePopFLpq/ZZeEwWLAlsVCWiHUAAaRuvw0rCWSAj1KZltjtN+u7/Aw4xOeNFjN
qPUOlm9SVd4JGKaTQOsnNPxe4P3VPjI2T7F9da15qyO/M1229f8K3Fex4wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFG7/CcthoJL/7pyjWAtlpto9P+C7MB8GA1UdIwQY
MBaAFKotdUcYHXigh498NG4wHaDhLeOpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWkxMVJ4Z2RlS0NIajN3MGJqQWRvT0V0NDZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9iMzg3MDctMzljZS00Y2NiLTk3YTAt
OWI3MGQ2MGM0ODAwLzEvYnY4SnkyR2drdl91bktOWUMyV20yajBfNExzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9iMzg3MDctMzljZS00Y2NiLTk3YTAtOWI3MGQ2MGM0ODAw
LzEvcWkxMVJ4Z2RlS0NIajN3MGJqQWRvT0V0NDZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFV/fAAwQD
w4BoMA0GCSqGSIb3DQEBCwUAA4IBAQCL3TLnghKLn6jzvslMnwFnAj6T73KHUlrQ
eNwfMRtfXHsB8CZpCYvPQXdSKORlf009rMxzMLIh+WaCnfqrHkUp6y6yu7W4pqBV
FI8Q2wECQdKn8toWEQY3i2Jns80jtf9FyrXnRrt3DSqPKJe9UUUpz6QAlCHhHhj/
VLCElulluCeFTUuvilRxluSr2hhVwhFmK+PWZ9cdYdjl+5p9yS+/hoeg/LEr+EYQ
ExTEmJwAUSLJ4BWubVWE11Je/zUJSJnx4va9UeQ5+OvrI4jeVTVJJQV7xNtB9QGH
6nzCVQNK0+7OvRYGWA993zUBIA0TDzVlK/ApiQSBNnP3MALll1ao
-----END CERTIFICATE-----
Generated at Fri Oct 16 00:18:26 2026 by rpki-client