Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/BVx20OvNIr_bjMiJlAuvJK99SH4.roa
File: BVx20OvNIr_bjMiJlAuvJK99SH4.roa (raw, json)
Hash identifier: DO6SxTL8ZIDZlJLjGOfKoMzyvMaVazIOTTdETJq4hxI=
Subject key identifier: 05:5C:76:D0:EB:CD:22:BF:DB:8C:C8:89:94:0B:AF:24:AF:7D:48:7E
Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Certificate serial: 019CB9D283259C5F7D64EE39AC4EF814BEC7
Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/BVx20OvNIr_bjMiJlAuvJK99SH4.roa
Signing time: Wed 04 Mar 2026 17:08:26 +0000
ROA not before: Wed 04 Mar 2026 17:08:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39737
IP address blocks: 77.93.160.0/23 maxlen: 23
77.93.162.0/24 maxlen: 24
77.93.164.0/22 maxlen: 22
77.93.168.0/22 maxlen: 22
77.93.176.0/20 maxlen: 20
86.105.181.0/24 maxlen: 24
86.107.183.0/24 maxlen: 24
87.243.0.0/21 maxlen: 21
89.18.0.0/20 maxlen: 20
89.18.0.0/21 maxlen: 21
89.18.0.0/24 maxlen: 24
89.18.1.0/24 maxlen: 24
89.18.2.0/24 maxlen: 24
89.18.3.0/24 maxlen: 24
89.18.4.0/24 maxlen: 24
89.18.5.0/24 maxlen: 24
89.18.6.0/24 maxlen: 24
89.18.7.0/24 maxlen: 24
89.18.8.0/24 maxlen: 24
89.18.9.0/24 maxlen: 24
89.18.10.0/24 maxlen: 24
89.18.11.0/24 maxlen: 24
89.18.12.0/24 maxlen: 24
89.18.13.0/24 maxlen: 24
89.18.14.0/24 maxlen: 24
89.18.15.0/24 maxlen: 24
89.18.25.0/24 maxlen: 24
89.18.31.0/24 maxlen: 24
89.34.72.0/23 maxlen: 23
89.35.74.0/23 maxlen: 23
89.37.120.0/21 maxlen: 21
89.38.140.0/22 maxlen: 22
89.43.193.0/24 maxlen: 24
89.44.232.0/22 maxlen: 22
89.46.160.0/22 maxlen: 22
89.47.224.0/21 maxlen: 21
92.55.131.0/24 maxlen: 24
92.55.132.0/24 maxlen: 24
92.55.134.0/24 maxlen: 24
92.55.135.0/24 maxlen: 24
92.55.144.0/21 maxlen: 21
92.55.152.0/24 maxlen: 24
92.55.153.0/24 maxlen: 24
92.55.154.0/24 maxlen: 24
94.177.32.0/21 maxlen: 21
94.177.40.0/21 maxlen: 21
188.247.129.0/24 maxlen: 24
188.247.132.0/23 maxlen: 23
188.247.224.0/23 maxlen: 23
188.247.226.0/23 maxlen: 23
188.247.238.0/24 maxlen: 24
188.247.239.0/24 maxlen: 24
188.247.240.0/21 maxlen: 21
188.247.248.0/21 maxlen: 21
188.247.252.0/22 maxlen: 22
193.58.243.0/24 maxlen: 24
193.254.242.0/23 maxlen: 23
194.102.221.0/24 maxlen: 24
195.20.145.0/24 maxlen: 24
2a00:1480::/48 maxlen: 48
2a00:1480:1::/48 maxlen: 48
2a00:1480:5::/48 maxlen: 48
2a00:1480:6::/48 maxlen: 48
2a00:1480:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:d2:83:25:9c:5f:7d:64:ee:39:ac:4e:f8:14:be:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Validity
Not Before: Mar 4 17:08:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=055c76d0ebcd22bfdb8cc889940baf24af7d487e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:24:30:f9:36:b1:8f:83:13:63:72:5f:77:74:
75:3e:ef:65:2b:46:d6:48:40:2a:91:e6:e6:44:14:
22:d9:c5:8b:b4:c2:73:e1:d1:ee:bc:45:c3:47:ab:
2d:3b:ed:aa:74:ae:a6:83:a0:69:b4:ab:e1:22:39:
c9:7e:cb:44:da:ff:5d:5a:1c:67:44:c8:83:21:3b:
b3:d7:1f:71:22:40:94:2e:18:33:da:c7:a3:7d:0e:
40:0d:98:49:34:49:8c:5b:49:82:92:4f:b8:db:4d:
2a:77:60:02:d6:9c:15:92:a8:31:31:3a:b5:2f:4e:
bf:69:f6:43:f5:14:aa:5b:c4:d5:76:5c:53:68:81:
ea:45:d0:c1:c4:fd:30:ef:11:c3:52:c7:c2:46:c3:
7d:48:2d:a5:ea:e0:3d:de:03:fc:23:14:a3:a1:08:
4e:c3:76:41:45:0f:d4:9d:44:c0:af:5a:4e:9a:91:
cc:ba:e8:31:37:bb:60:b3:9c:81:82:fd:30:77:b6:
7e:cb:6f:76:23:44:51:d1:b0:76:16:e7:7d:1f:7b:
fa:2e:d4:3d:2c:02:34:65:85:82:fc:ca:0d:1b:b3:
03:9a:70:70:3e:61:34:5b:4d:60:07:b1:8e:9b:d6:
70:49:6e:c8:73:d2:0d:6a:36:c3:34:ad:74:d1:b6:
c4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:5C:76:D0:EB:CD:22:BF:DB:8C:C8:89:94:0B:AF:24:AF:7D:48:7E
X509v3 Authority Key Identifier:
keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/BVx20OvNIr_bjMiJlAuvJK99SH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.160.0-77.93.162.255
77.93.164.0-77.93.171.255
77.93.176.0/20
86.105.181.0/24
86.107.183.0/24
87.243.0.0/21
89.18.0.0/20
89.18.25.0/24
89.18.31.0/24
89.34.72.0/23
89.35.74.0/23
89.37.120.0/21
89.38.140.0/22
89.43.193.0/24
89.44.232.0/22
89.46.160.0/22
89.47.224.0/21
92.55.131.0-92.55.132.255
92.55.134.0/23
92.55.144.0-92.55.154.255
94.177.32.0/20
188.247.129.0/24
188.247.132.0/23
188.247.224.0/22
188.247.238.0-188.247.255.255
193.58.243.0/24
193.254.242.0/23
194.102.221.0/24
195.20.145.0/24
IPv6:
2a00:1480::/47
2a00:1480:5::-2a00:1480:7:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1f:6b:7c:ee:b7:5f:1c:e3:ef:07:cf:3c:4b:c3:17:6c:44:38:
86:3b:a7:82:bc:8b:96:1f:f8:85:29:18:2f:2d:03:91:4e:c1:
33:bc:cc:f5:b2:44:50:dd:41:78:43:3f:61:8c:75:d1:85:0e:
d7:ae:8a:92:7e:e3:9c:0e:59:c0:d3:fe:4d:a5:42:98:8e:99:
f9:90:dd:da:c4:95:60:f3:29:d1:f8:dd:eb:ff:53:79:09:ca:
fc:1a:a2:9c:33:3a:f6:5d:90:e1:18:c8:08:a6:a5:f0:27:c0:
7b:5c:b3:76:60:78:10:42:91:3d:5c:ba:5f:e9:3d:f5:4f:89:
bf:b5:a8:f1:71:4d:76:c7:64:19:0a:2f:dd:1c:3a:52:e6:42:
01:2c:93:c6:f4:d5:30:46:a4:47:73:6c:13:0a:35:4a:c4:f8:
20:6a:49:79:e6:d8:0f:c2:ee:ff:84:19:4c:04:e5:6f:c6:d2:
f9:93:55:d2:0e:c1:58:70:43:4c:40:55:c0:0c:69:2e:c7:22:
70:00:57:15:0a:7d:5c:f8:8b:c4:1a:aa:f6:a6:db:aa:ff:23:
84:8d:a1:3f:78:98:18:22:78:5d:46:31:2c:ad:ce:3c:9b:15:
8a:cb:a9:ad:4b:11:7d:52:fd:f3:8b:86:78:f6:74:dd:73:c7:
be:ae:9f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 03:44:49 2026 by rpki-client