Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/Bu84RhuemJnWYuQuYDWAPY6eUcM.roa
File: Bu84RhuemJnWYuQuYDWAPY6eUcM.roa (raw, json)
Hash identifier: HW6yRnsl3nokN3GyGFBi+j2pUsGdKkc/tn9uxXaGfzs=
Subject key identifier: 06:EF:38:46:1B:9E:98:99:D6:62:E4:2E:60:35:80:3D:8E:9E:51:C3
Certificate issuer: /CN=89008da41922728bc5bedbbd7088701c529b99ed
Certificate serial: 019FB9A6AAE694255694FABA39D170F5CEE3
Authority key identifier: 89:00:8D:A4:19:22:72:8B:C5:BE:DB:BD:70:88:70:1C:52:9B:99:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQCNpBkicovFvtu9cIhwHFKbme0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/Bu84RhuemJnWYuQuYDWAPY6eUcM.roa
Signing time: Fri 31 Jul 2026 19:28:55 +0000
ROA not before: Fri 31 Jul 2026 19:28:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213418
IP address blocks: 91.198.102.0/24 maxlen: 24
185.60.180.0/24 maxlen: 24
185.231.52.0/24 maxlen: 24
185.231.53.0/24 maxlen: 24
185.231.54.0/24 maxlen: 24
185.231.55.0/24 maxlen: 24
2a13:bc80::/32 maxlen: 32
2a13:bc81::/32 maxlen: 32
2a13:bc82::/32 maxlen: 32
2a13:bc83::/32 maxlen: 32
2a13:bc84::/32 maxlen: 32
2a13:bc85::/32 maxlen: 32
2a13:bc86::/32 maxlen: 32
2a13:bc87::/32 maxlen: 32
2a14:b700::/32 maxlen: 32
2a14:b701::/32 maxlen: 32
2a14:b702::/32 maxlen: 32
2a14:b703::/32 maxlen: 32
2a14:b704::/32 maxlen: 32
2a14:b705::/32 maxlen: 32
2a14:b706::/32 maxlen: 32
2a14:b707::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.mft
rsync://rpki.ripe.net/repository/DEFAULT/iQCNpBkicovFvtu9cIhwHFKbme0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b9:a6:aa:e6:94:25:56:94:fa:ba:39:d1:70:f5:ce:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89008da41922728bc5bedbbd7088701c529b99ed
Validity
Not Before: Jul 31 19:28:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06ef38461b9e9899d662e42e6035803d8e9e51c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:31:46:48:c7:3f:3a:bd:88:bb:cf:47:4e:9f:
b7:88:f9:08:8f:81:73:c6:b1:7e:c2:21:09:8e:51:
91:19:31:24:35:fa:e6:73:3d:f2:ed:c9:89:16:21:
11:d8:6b:56:06:1c:44:3c:65:aa:a5:8b:b3:16:96:
d1:4b:d1:d3:a4:df:f9:9a:e7:b4:5b:05:d6:ff:5a:
a6:70:55:ef:2b:47:60:6f:a3:a1:a0:c8:01:70:5c:
db:d0:6a:3b:4c:0b:5c:73:e6:7b:fb:9f:0a:8d:f2:
e1:80:d0:a4:cb:cf:a4:f0:84:91:11:aa:99:5a:78:
43:c7:13:7b:71:d6:cb:3b:83:8f:f5:03:64:e7:e5:
c9:1e:25:41:cb:83:af:58:72:1f:cc:7b:ab:ee:68:
13:8f:4a:2f:94:4f:6d:1f:e6:a8:a7:3f:8f:de:6f:
e5:7b:11:20:e4:49:c1:c1:23:00:07:e2:57:f7:ce:
6e:a8:92:1a:20:e2:c6:33:49:12:63:a7:4d:8d:ea:
b6:0e:ca:ed:b8:d9:a9:d8:43:cb:ee:17:64:0c:8e:
c8:15:5e:29:b2:29:fb:42:7a:99:4e:65:25:06:5e:
08:f1:24:bd:cc:e0:9b:1d:dc:c8:8d:fa:61:8a:01:
be:95:c2:37:f1:60:c0:32:8b:f7:af:ce:a5:d0:fa:
ac:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:EF:38:46:1B:9E:98:99:D6:62:E4:2E:60:35:80:3D:8E:9E:51:C3
X509v3 Authority Key Identifier:
keyid:89:00:8D:A4:19:22:72:8B:C5:BE:DB:BD:70:88:70:1C:52:9B:99:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQCNpBkicovFvtu9cIhwHFKbme0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/Bu84RhuemJnWYuQuYDWAPY6eUcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.102.0/24
185.60.180.0/24
185.231.52.0/22
IPv6:
2a13:bc80::/29
2a14:b700::/29
Signature Algorithm: sha256WithRSAEncryption
59:ca:d7:9d:b6:cf:48:05:02:b2:be:ab:05:0d:8c:a9:c3:b4:
b5:44:b9:23:18:69:15:83:12:0e:9f:5d:7a:93:da:c8:20:13:
33:66:fb:44:ed:a8:26:1d:9d:92:6a:d0:52:e4:d2:13:fc:56:
3d:16:a8:54:3c:06:b4:5b:52:40:a2:16:0c:c3:08:24:d7:17:
d4:03:1d:f7:49:15:e0:d3:ed:ef:d0:15:ef:9e:0e:64:fc:0c:
7c:fe:53:9a:36:f2:4e:1a:f6:e4:84:b2:a7:3f:a1:9a:86:16:
2e:ef:cb:3a:ac:f4:b0:51:ab:a7:3f:c4:12:47:e5:29:49:12:
ee:9c:d2:41:32:1d:93:32:82:17:b4:07:d4:26:d8:b3:7e:19:
8a:5a:62:8a:12:a1:ee:65:db:db:40:21:08:8b:40:02:38:7a:
6f:63:b6:de:38:0a:ee:2e:b2:e3:0f:a2:73:c1:5b:75:05:e1:
cc:bc:74:74:f7:cf:42:18:db:1b:fe:27:74:5e:de:42:12:37:
c5:e9:b2:1f:e3:ff:db:34:1e:60:e7:06:47:9f:1a:15:8d:af:
83:fa:37:54:35:6e:46:4c:d3:c6:9d:05:56:d5:1a:41:00:b8:
4e:9a:79:0b:8c:97:9a:85:9e:ae:6e:f7:69:d3:95:06:53:24:
03:25:ec:a2
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAZ+5pqrmlCVWlPq6OdFw9c7jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5MDA4ZGE0MTkyMjcyOGJjNWJlZGJiZDcwODg3MDFjNTI5
Yjk5ZWQwHhcNMjYwNzMxMTkyODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNmVmMzg0NjFiOWU5ODk5ZDY2MmU0MmU2MDM1ODAzZDhlOWU1MWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTFGSMc/Or2Iu89HTp+3iPkIj4Fz
xrF+wiEJjlGRGTEkNfrmcz3y7cmJFiER2GtWBhxEPGWqpYuzFpbRS9HTpN/5mue0
WwXW/1qmcFXvK0dgb6OhoMgBcFzb0Go7TAtcc+Z7+58KjfLhgNCky8+k8ISREaqZ
WnhDxxN7cdbLO4OP9QNk5+XJHiVBy4OvWHIfzHur7mgTj0ovlE9tH+aopz+P3m/l
exEg5EnBwSMAB+JX985uqJIaIOLGM0kSY6dNjeq2DsrtuNmp2EPL7hdkDI7IFV4p
sin7QnqZTmUlBl4I8SS9zOCbHdzIjfphigG+lcI38WDAMov3r86l0PqsYQIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFAbvOEYbnpiZ1mLkLmA1gD2OnlHDMB8GA1UdIwQY
MBaAFIkAjaQZInKLxb7bvXCIcBxSm5ntMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVFDTnBCa2ljb3ZGdnR1OWNJaHdIRktibWUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9lNWIxNGItOWQ1Yi00MzQ2LThlODUt
NjM3MjlmZTU4OGEyLzEvQnU4NFJodWVtSm5XWXVRdVlEV0FQWTZlVWNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9lNWIxNGItOWQ1Yi00MzQ2LThlODUtNjM3MjlmZTU4OGEy
LzEvaVFDTnBCa2ljb3ZGdnR1OWNJaHdIRktibWUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQAW8ZmAwQA
uTy0AwQCuec0MBQEAgACMA4DBQMqE7yAAwUDKhS3ADANBgkqhkiG9w0BAQsFAAOC
AQEAWcrXnbbPSAUCsr6rBQ2MqcO0tUS5IxhpFYMSDp9depPayCATM2b7RO2oJh2d
kmrQUuTSE/xWPRaoVDwGtFtSQKIWDMMIJNcX1AMd90kV4NPt79AV754OZPwMfP5T
mjbyThr25ISypz+hmoYWLu/LOqz0sFGrpz/EEkflKUkS7pzSQTIdkzKCF7QH1CbY
s34ZilpiihKh7mXb20AhCItAAjh6b2O23jgK7i6y4w+ic8FbdQXhzLx0dPfPQhjb
G/4ndF7eQhI3xemyH+P/2zQeYOcGR58aFY2vg/o3VDVuRkzTxp0FVtUaQQC4Tpp5
C4yXmoWerm73adOVBlMkAyXsog==
-----END CERTIFICATE-----
Generated at Wed Aug 26 13:52:23 2026 by rpki-client