Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/bplXSiFsGP80TRfwY9VPJGWee2c.roa
File: bplXSiFsGP80TRfwY9VPJGWee2c.roa (raw, json)
Hash identifier: l3qY0C7QFTqXEk+k6M4Yxnd2Mw57O7Mb+BBGWXTpW80=
Subject key identifier: 6E:99:57:4A:21:6C:18:FF:34:4D:17:F0:63:D5:4F:24:65:9E:7B:67
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 019E218C65941FFB91F252A923DCBE45F4CC
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/bplXSiFsGP80TRfwY9VPJGWee2c.roa
Signing time: Wed 13 May 2026 13:35:09 +0000
ROA not before: Wed 13 May 2026 13:35:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 85.232.178.0/24 maxlen: 24
85.232.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 01:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:8c:65:94:1f:fb:91:f2:52:a9:23:dc:be:45:f4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: May 13 13:35:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e99574a216c18ff344d17f063d54f24659e7b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c2:3f:ee:a5:a7:9e:6b:04:d7:b5:de:de:55:
60:ba:08:b1:67:35:b2:d0:a4:3f:72:91:70:8f:00:
10:09:c2:ef:35:66:90:07:d8:f7:05:12:e3:01:0b:
dc:d0:8a:74:13:78:cd:21:a0:52:0c:ee:d6:12:b4:
ea:50:1b:8e:a7:0d:7f:4c:30:ee:bc:fe:27:57:5a:
15:2d:b9:c2:37:c1:8d:c8:81:26:88:73:7a:e5:a0:
6b:a4:cb:19:1f:03:62:14:33:d9:78:88:d1:19:aa:
2e:46:7b:47:4a:4d:3d:e4:dc:18:45:fc:80:95:99:
14:0b:7d:c7:df:c7:28:ff:7b:89:2f:95:47:66:7c:
7e:88:10:86:c8:10:2f:31:04:f9:3a:66:27:db:75:
78:cd:3d:d9:6d:0b:26:6e:ef:b5:fb:20:fc:46:10:
20:00:ed:67:ab:26:24:9c:c5:4c:5d:2b:4a:cb:d1:
d4:5a:4a:33:92:ce:e4:2d:05:be:5b:13:bc:d1:1e:
91:1e:f2:a7:1d:75:ea:d1:81:c5:77:1d:b2:f8:65:
44:f8:60:24:bb:fc:04:f1:2b:aa:04:bf:f8:c5:cf:
ba:d7:fd:a3:17:f1:9e:7c:2d:3a:de:a0:4c:bb:9f:
2f:09:5e:51:70:2e:98:94:8b:1f:01:f9:3a:f7:2c:
99:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:99:57:4A:21:6C:18:FF:34:4D:17:F0:63:D5:4F:24:65:9E:7B:67
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/bplXSiFsGP80TRfwY9VPJGWee2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.232.178.0/24
85.232.183.0/24
Signature Algorithm: sha256WithRSAEncryption
62:d5:da:5a:55:c1:0c:53:c5:a7:cc:d8:8c:e8:1d:ff:ec:ec:
c0:9a:d4:f9:1d:25:3d:10:00:f9:c2:d0:d3:cc:aa:13:e4:9b:
f1:c3:40:7a:89:07:89:fe:ca:f0:48:a0:ca:e4:a8:54:89:6c:
8d:54:5f:d0:a3:04:02:55:08:3f:99:67:66:1e:52:fb:f6:a8:
db:88:48:87:77:00:b7:0d:cf:e3:93:d7:5d:7e:63:6c:aa:21:
bb:ca:03:fa:45:0c:00:20:52:ea:80:3b:f8:b3:22:b9:dc:28:
65:aa:20:ce:2e:b2:ed:5c:82:30:7a:70:c3:96:05:e4:39:ee:
01:0c:ad:3a:e1:99:5b:8e:fa:61:01:db:c2:e6:17:73:11:53:
86:d5:2f:12:e1:00:5c:84:6e:da:5f:fb:65:d9:b6:40:33:15:
40:bb:dc:cc:a6:5e:59:78:70:d4:96:97:ca:87:da:e5:f0:0d:
f9:e2:de:96:bc:6c:a3:27:4e:70:74:51:7c:e6:44:5f:9e:ec:
b6:13:c0:15:9b:8c:12:73:44:ce:89:7f:ec:da:d5:4f:19:e4:
95:3e:8d:c4:ed:39:4d:79:36:a8:27:c9:af:cf:80:24:70:14:
69:91:41:0d:c3:30:5b:b5:29:02:3e:39:e9:7a:e3:2b:45:bb:
6f:2d:cf:97
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ4hjGWUH/uR8lKpI9y+RfTMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNWUwMjMwYmU3OTllNDQ4MjljODcyMGNhMzgzNDcwNDU0
OTRlMjAwHhcNMjYwNTEzMTMzNTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTk5NTc0YTIxNmMxOGZmMzQ0ZDE3ZjA2M2Q1NGYyNDY1OWU3YjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsI/7qWnnmsE17Xe3lVgugixZzWy
0KQ/cpFwjwAQCcLvNWaQB9j3BRLjAQvc0Ip0E3jNIaBSDO7WErTqUBuOpw1/TDDu
vP4nV1oVLbnCN8GNyIEmiHN65aBrpMsZHwNiFDPZeIjRGaouRntHSk095NwYRfyA
lZkUC33H38co/3uJL5VHZnx+iBCGyBAvMQT5OmYn23V4zT3ZbQsmbu+1+yD8RhAg
AO1nqyYknMVMXStKy9HUWkozks7kLQW+WxO80R6RHvKnHXXq0YHFdx2y+GVE+GAk
u/wE8SuqBL/4xc+61/2jF/GefC063qBMu58vCV5RcC6YlIsfAfk69yyZXQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFG6ZV0ohbBj/NE0X8GPVTyRlnntnMB8GA1UdIwQY
MBaAFG9eAjC+eZ5EgpyHIMo4NHBFSU4gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83MGNjZWYtMTdmMy00OTI4LTljMGIt
YmE3YzdkODE5MGNhLzEvYnBsWFNpRnNHUDgwVFJmd1k5VlBKR1dlZTJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny83MGNjZWYtMTdmMy00OTI4LTljMGItYmE3YzdkODE5MGNh
LzEvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVeiyAwQA
Vei3MA0GCSqGSIb3DQEBCwUAA4IBAQBi1dpaVcEMU8WnzNiM6B3/7OzAmtT5HSU9
EAD5wtDTzKoT5Jvxw0B6iQeJ/srwSKDK5KhUiWyNVF/QowQCVQg/mWdmHlL79qjb
iEiHdwC3Dc/jk9ddfmNsqiG7ygP6RQwAIFLqgDv4syK53ChlqiDOLrLtXIIwenDD
lgXkOe4BDK064ZlbjvphAdvC5hdzEVOG1S8S4QBchG7aX/tl2bZAMxVAu9zMpl5Z
eHDUlpfKh9rl8A354t6WvGyjJ05wdFF85kRfnuy2E8AVm4wSc0TOiX/s2tVPGeSV
Po3E7TlNeTaoJ8mvz4AkcBRpkUENwzBbtSkCPjnpeuMrRbtvLc+X
-----END CERTIFICATE-----
Generated at Fri May 15 08:17:26 2026 by rpki-client