Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/BgkjRZdudgnq14hayXIQycAImbo.roa
File: BgkjRZdudgnq14hayXIQycAImbo.roa (raw, json)
Hash identifier: UYkV6nHcydRo8OL1OQpV3Fl5YmM+UicOs7o2+58bA9A=
Subject key identifier: 06:09:23:45:97:6E:76:09:EA:D7:88:5A:C9:72:10:C9:C0:08:99:BA
Certificate issuer: /CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Certificate serial: 019CE21CA1BE8FB092D4753DEB4F3E75D4C5
Authority key identifier: 2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/BgkjRZdudgnq14hayXIQycAImbo.roa
Signing time: Thu 12 Mar 2026 12:54:13 +0000
ROA not before: Thu 12 Mar 2026 12:54:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215148
IP address blocks: 31.170.249.0/24 maxlen: 24
31.171.108.0/24 maxlen: 24
31.171.109.0/24 maxlen: 24
31.171.111.0/24 maxlen: 24
31.171.119.0/24 maxlen: 24
31.171.124.0/24 maxlen: 24
62.212.224.0/24 maxlen: 24
62.212.225.0/24 maxlen: 24
62.212.226.0/24 maxlen: 24
62.212.227.0/24 maxlen: 24
62.212.228.0/24 maxlen: 24
62.212.233.0/24 maxlen: 24
62.212.234.0/24 maxlen: 24
62.212.236.0/24 maxlen: 24
62.212.244.0/24 maxlen: 24
62.212.245.0/24 maxlen: 24
77.81.56.0/24 maxlen: 24
85.132.1.0/24 maxlen: 24
85.132.3.0/24 maxlen: 24
85.132.12.0/24 maxlen: 24
85.132.17.0/24 maxlen: 24
85.132.18.0/24 maxlen: 24
85.132.43.0/24 maxlen: 24
85.132.44.0/24 maxlen: 24
85.132.46.0/24 maxlen: 24
85.132.47.0/24 maxlen: 24
85.132.48.0/24 maxlen: 24
85.132.49.0/24 maxlen: 24
85.132.52.0/24 maxlen: 24
85.132.53.0/24 maxlen: 24
85.132.54.0/24 maxlen: 24
85.132.55.0/24 maxlen: 24
85.132.57.0/24 maxlen: 24
85.132.61.0/24 maxlen: 24
85.132.67.0/24 maxlen: 24
85.132.69.0/24 maxlen: 24
85.132.71.0/24 maxlen: 24
85.132.72.0/24 maxlen: 24
85.132.75.0/24 maxlen: 24
85.132.76.0/24 maxlen: 24
85.132.78.0/24 maxlen: 24
85.132.79.0/24 maxlen: 24
85.132.81.0/24 maxlen: 24
85.132.84.0/24 maxlen: 24
85.132.85.0/24 maxlen: 24
85.132.88.0/24 maxlen: 24
85.132.89.0/24 maxlen: 24
85.132.91.0/24 maxlen: 24
85.132.95.0/24 maxlen: 24
85.132.96.0/24 maxlen: 24
85.132.99.0/24 maxlen: 24
85.132.100.0/24 maxlen: 24
85.132.101.0/24 maxlen: 24
85.132.107.0/24 maxlen: 24
85.132.109.0/24 maxlen: 24
85.132.111.0/24 maxlen: 24
85.132.115.0/24 maxlen: 24
85.132.116.0/24 maxlen: 24
85.132.123.0/24 maxlen: 24
85.132.124.0/24 maxlen: 24
94.20.16.0/24 maxlen: 24
94.20.20.0/24 maxlen: 24
94.20.21.0/24 maxlen: 24
94.20.30.0/24 maxlen: 24
94.20.40.0/24 maxlen: 24
94.20.45.0/24 maxlen: 24
94.20.47.0/24 maxlen: 24
94.20.49.0/24 maxlen: 24
94.20.62.0/24 maxlen: 24
94.20.64.0/24 maxlen: 24
94.20.65.0/24 maxlen: 24
94.20.68.0/24 maxlen: 24
94.20.71.0/24 maxlen: 24
94.20.72.0/24 maxlen: 24
94.20.74.0/24 maxlen: 24
94.20.77.0/24 maxlen: 24
94.20.81.0/24 maxlen: 24
94.20.85.0/24 maxlen: 24
94.20.94.0/24 maxlen: 24
94.20.105.0/24 maxlen: 24
94.20.137.0/24 maxlen: 24
94.20.138.0/24 maxlen: 24
94.20.142.0/24 maxlen: 24
94.20.147.0/24 maxlen: 24
94.20.178.0/24 maxlen: 24
94.20.179.0/24 maxlen: 24
94.20.216.0/24 maxlen: 24
94.20.217.0/24 maxlen: 24
94.20.225.0/24 maxlen: 24
94.20.229.0/24 maxlen: 24
94.20.230.0/24 maxlen: 24
94.20.246.0/24 maxlen: 24
94.20.248.0/24 maxlen: 24
2a01:6480:40::/48 maxlen: 48
2a01:6480:41::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:1c:a1:be:8f:b0:92:d4:75:3d:eb:4f:3e:75:d4:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e252a477242fb45f20bb08020a403a2bb466a9b
Validity
Not Before: Mar 12 12:54:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06092345976e7609ead7885ac97210c9c00899ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:06:53:39:eb:c4:f7:c1:b3:ba:24:14:1a:d6:
5a:0b:85:75:7f:ad:af:5a:dc:47:c0:18:71:72:c2:
ae:0f:1e:63:67:df:ba:e5:3b:b4:39:68:0d:17:14:
f4:dd:06:f3:5e:e7:6c:26:07:f7:58:a8:cf:ff:5e:
58:f7:3a:84:7f:5b:fa:82:27:86:0c:2e:79:ff:0b:
47:5c:e0:fc:14:44:9c:98:58:df:2e:68:d7:87:56:
6e:d0:04:ab:ee:e2:e7:80:14:a4:7f:01:dd:fb:2e:
e8:d7:08:2e:9d:cc:96:b6:a5:fb:1c:6b:cb:81:b2:
08:a1:7a:8c:29:c7:a9:f7:b7:21:c3:e6:43:39:c8:
f6:ef:83:5e:3e:db:59:21:f0:28:40:62:af:b9:84:
66:80:82:8b:81:30:02:ac:b3:10:8f:08:ac:c2:0d:
47:c2:ca:5a:2d:ea:d4:7f:ec:6c:2b:b2:d8:5b:d4:
27:ff:16:b4:39:b5:2e:e5:55:38:46:b6:03:55:30:
61:2e:5c:44:f1:18:1b:91:3a:93:51:af:fd:1a:38:
11:1b:92:a1:ae:f9:0d:e9:24:5a:d4:d2:f4:e2:a6:
07:a7:44:b6:b2:bc:b6:83:00:06:d8:78:f1:f9:2a:
e4:df:85:d6:f6:6d:4e:f6:d9:42:0b:a8:73:49:49:
9b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:09:23:45:97:6E:76:09:EA:D7:88:5A:C9:72:10:C9:C0:08:99:BA
X509v3 Authority Key Identifier:
keyid:2E:25:2A:47:72:42:FB:45:F2:0B:B0:80:20:A4:03:A2:BB:46:6A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiUqR3JC-0XyC7CAIKQDortGaps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/BgkjRZdudgnq14hayXIQycAImbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b10562-26a1-4645-8d2b-16f146bef995/1/LiUqR3JC-0XyC7CAIKQDortGaps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.170.249.0/24
31.171.108.0/23
31.171.111.0/24
31.171.119.0/24
31.171.124.0/24
62.212.224.0-62.212.228.255
62.212.233.0-62.212.234.255
62.212.236.0/24
62.212.244.0/23
77.81.56.0/24
85.132.1.0/24
85.132.3.0/24
85.132.12.0/24
85.132.17.0-85.132.18.255
85.132.43.0-85.132.44.255
85.132.46.0-85.132.49.255
85.132.52.0/22
85.132.57.0/24
85.132.61.0/24
85.132.67.0/24
85.132.69.0/24
85.132.71.0-85.132.72.255
85.132.75.0-85.132.76.255
85.132.78.0/23
85.132.81.0/24
85.132.84.0/23
85.132.88.0/23
85.132.91.0/24
85.132.95.0-85.132.96.255
85.132.99.0-85.132.101.255
85.132.107.0/24
85.132.109.0/24
85.132.111.0/24
85.132.115.0-85.132.116.255
85.132.123.0-85.132.124.255
94.20.16.0/24
94.20.20.0/23
94.20.30.0/24
94.20.40.0/24
94.20.45.0/24
94.20.47.0/24
94.20.49.0/24
94.20.62.0/24
94.20.64.0/23
94.20.68.0/24
94.20.71.0-94.20.72.255
94.20.74.0/24
94.20.77.0/24
94.20.81.0/24
94.20.85.0/24
94.20.94.0/24
94.20.105.0/24
94.20.137.0-94.20.138.255
94.20.142.0/24
94.20.147.0/24
94.20.178.0/23
94.20.216.0/23
94.20.225.0/24
94.20.229.0-94.20.230.255
94.20.246.0/24
94.20.248.0/24
IPv6:
2a01:6480:40::/47
Signature Algorithm: sha256WithRSAEncryption
73:90:bd:f6:fa:31:ae:2b:81:60:a0:89:48:2a:c1:f4:d2:03:
d4:8e:ed:7e:28:8f:19:0c:40:02:58:6c:c9:81:1f:ce:d2:42:
ee:76:60:4d:ec:10:33:c0:46:4d:0b:66:ee:79:3a:6f:ce:ae:
63:de:de:7c:9f:c8:2b:80:8e:e2:1a:85:1e:b5:b7:f9:74:91:
7c:fd:5e:e3:7a:8f:43:1b:65:98:0f:df:03:84:af:85:6b:5c:
13:ef:35:18:89:79:78:05:7f:b1:23:c3:09:66:7f:b1:a8:85:
55:d7:1a:11:4f:4c:79:c8:47:ad:74:20:7b:29:3f:cd:df:a3:
01:fb:f0:bd:b0:d4:c9:31:e3:16:be:64:d6:9b:bb:8a:6a:15:
c1:b9:51:7a:7d:29:d1:cb:f4:d9:fd:f5:31:06:c9:bf:dc:64:
5e:05:25:2b:54:c1:ce:03:cf:3e:a1:f9:c7:2e:ae:a6:bc:29:
21:2b:ad:a0:27:e7:a2:a2:e3:d8:5c:13:c6:84:cf:35:93:e9:
3d:e1:9a:52:24:3e:42:64:38:a2:ef:95:7a:9d:87:c5:f0:ff:
2b:bc:e4:4c:e5:6b:51:c3:43:9c:49:df:69:d5:70:f5:c1:f8:
88:18:91:63:32:43:87:8c:31:8f:5c:41:03:14:88:13:17:29:
a4:ec:5d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 00:13:37 2026 by rpki-client