Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/bxeM4h64PDnwHQgpeWEPs6xXjKE.roa
File: bxeM4h64PDnwHQgpeWEPs6xXjKE.roa (raw, json)
Hash identifier: vQaykNgd1AQKpk9ErV1Vc/Llei5KEpsTe/QrkRR1mYs=
Subject key identifier: 6F:17:8C:E2:1E:B8:3C:39:F0:1D:08:29:79:61:0F:B3:AC:57:8C:A1
Certificate issuer: /CN=494d0eaf80250ab8248989be71a4039718d6935a
Certificate serial: 01A0196CAC4D644F6416854C7EA9A3EC3234
Authority key identifier: 49:4D:0E:AF:80:25:0A:B8:24:89:89:BE:71:A4:03:97:18:D6:93:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/bxeM4h64PDnwHQgpeWEPs6xXjKE.roa
Signing time: Wed 19 Aug 2026 09:49:07 +0000
ROA not before: Wed 19 Aug 2026 09:49:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34197
IP address blocks: 185.150.160.0/22 maxlen: 22
185.150.160.0/24 maxlen: 24
185.150.161.0/24 maxlen: 24
185.150.162.0/24 maxlen: 24
194.187.224.0/22 maxlen: 22
194.187.224.0/24 maxlen: 24
194.187.225.0/24 maxlen: 24
194.187.226.0/24 maxlen: 24
194.187.227.0/24 maxlen: 24
195.95.224.0/23 maxlen: 23
195.95.224.0/24 maxlen: 24
195.95.225.0/24 maxlen: 24
2a07:7200::/29 maxlen: 29
2a07:7200:1::/48 maxlen: 48
2a07:7200:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 06:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:19:6c:ac:4d:64:4f:64:16:85:4c:7e:a9:a3:ec:32:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494d0eaf80250ab8248989be71a4039718d6935a
Validity
Not Before: Aug 19 09:49:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f178ce21eb83c39f01d082979610fb3ac578ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:41:de:c0:1c:ed:12:36:e8:93:5f:fa:ef:03:
22:c2:cf:d7:00:f4:59:ad:89:5c:ca:ab:0e:08:de:
3c:88:23:eb:c2:09:ad:df:9b:2b:42:4a:49:2a:dc:
58:08:35:82:f9:00:32:87:ec:2e:96:e0:df:d8:98:
52:e2:cf:f8:90:07:cf:bc:c0:b3:d7:d3:b1:cf:7e:
88:98:81:e9:ba:4f:97:dc:33:d7:3b:cf:74:0e:0d:
c5:77:4c:43:05:47:37:4d:cb:99:6e:34:80:bd:16:
b0:8a:f0:e2:3d:7f:dd:7b:01:04:39:11:fc:1e:ff:
8b:a5:3a:48:1c:87:4c:81:4c:35:f5:cc:c1:0f:29:
22:b4:4a:b4:20:66:99:2f:a6:17:4d:7c:b8:1e:2f:
ea:bc:cb:5f:a6:9d:7c:c8:63:90:c8:29:90:4b:4b:
cd:1f:94:a9:0a:57:1f:50:9b:6d:9e:82:c0:14:c5:
05:f7:44:d0:ba:d3:4a:d0:1a:aa:d2:4b:9e:06:06:
87:ce:08:8c:d5:f1:29:90:6f:08:7f:65:ba:9c:17:
c2:a1:24:ea:2c:7b:a9:95:c6:4b:b2:76:1b:17:0c:
11:17:c8:ed:73:12:ab:ce:b3:49:a5:6b:40:5a:57:
5b:ee:23:8c:b5:b3:29:26:7c:8c:af:f2:a8:a9:50:
b5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:17:8C:E2:1E:B8:3C:39:F0:1D:08:29:79:61:0F:B3:AC:57:8C:A1
X509v3 Authority Key Identifier:
keyid:49:4D:0E:AF:80:25:0A:B8:24:89:89:BE:71:A4:03:97:18:D6:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/bxeM4h64PDnwHQgpeWEPs6xXjKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.160.0/22
194.187.224.0/22
195.95.224.0/23
IPv6:
2a07:7200::/29
Signature Algorithm: sha256WithRSAEncryption
0c:a2:4b:92:db:5d:d8:f3:cc:0e:de:9c:87:6e:1a:68:9d:fd:
0f:eb:66:c6:b0:98:fc:54:e6:bd:31:99:1b:ca:ec:2c:24:a9:
b0:27:9f:bf:df:af:fb:f2:08:71:88:85:e4:65:c3:bb:b0:83:
19:2c:a8:ff:17:81:5b:6d:a4:ff:50:79:68:e7:f6:16:90:c7:
36:8e:cd:cc:f8:8f:f8:b9:da:99:fb:15:a8:f2:36:a0:f6:6f:
5b:15:dc:fc:60:a7:80:53:94:7d:ce:a2:06:99:b5:1f:c9:1d:
a4:d8:ba:32:da:19:d7:41:16:91:c4:28:0e:c1:22:76:64:fa:
0c:aa:69:87:ab:b4:4e:28:b1:24:9a:ca:83:ad:d4:8a:0c:e0:
10:4a:d5:f9:1f:2c:a2:ac:c3:62:ae:4a:1b:3f:db:ea:9b:24:
f5:33:44:82:71:73:e2:9b:77:9b:15:20:f7:fc:b3:da:8f:f0:
62:95:22:72:51:1d:1e:7f:08:e7:ed:61:af:2b:f5:30:c0:8a:
b3:13:53:68:d5:fb:ca:ee:6d:52:dd:d1:c6:5c:bc:29:25:6a:
36:4f:23:a6:ad:f4:e4:de:88:01:c9:72:cb:74:5f:22:d0:fc:
f8:c4:63:db:3e:bf:e7:4e:e0:b6:e4:1e:8b:ce:7e:e5:77:d0:
8c:a1:3d:89
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAaAZbKxNZE9kFoVMfqmj7DI0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5NGQwZWFmODAyNTBhYjgyNDg5ODliZTcxYTQwMzk3MThk
NjkzNWEwHhcNMjYwODE5MDk0OTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjE3OGNlMjFlYjgzYzM5ZjAxZDA4Mjk3OTYxMGZiM2FjNTc4Y2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60HewBztEjbok1/67wMiws/XAPRZ
rYlcyqsOCN48iCPrwgmt35srQkpJKtxYCDWC+QAyh+wuluDf2JhS4s/4kAfPvMCz
19Oxz36ImIHpuk+X3DPXO890Dg3Fd0xDBUc3TcuZbjSAvRawivDiPX/dewEEORH8
Hv+LpTpIHIdMgUw19czBDykitEq0IGaZL6YXTXy4Hi/qvMtfpp18yGOQyCmQS0vN
H5SpClcfUJttnoLAFMUF90TQutNK0Bqq0kueBgaHzgiM1fEpkG8If2W6nBfCoSTq
LHuplcZLsnYbFwwRF8jtcxKrzrNJpWtAWldb7iOMtbMpJnyMr/KoqVC1twIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFG8XjOIeuDw58B0IKXlhD7OsV4yhMB8GA1UdIwQY
MBaAFElNDq+AJQq4JImJvnGkA5cY1pNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1UwT3I0QWxDcmdraVltLWNhUURseGpXazFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jODg1NTUtYWJiNy00YjEwLWFiNjQt
MTljNTQyN2U0MTZmLzEvYnhlTTRoNjRQRG53SFFncGVXRVBzNnhYaktFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9jODg1NTUtYWJiNy00YjEwLWFiNjQtMTljNTQyN2U0MTZm
LzEvU1UwT3I0QWxDcmdraVltLWNhUURseGpXazFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuZagAwQC
wrvgAwQBw1/gMA0EAgACMAcDBQMqB3IAMA0GCSqGSIb3DQEBCwUAA4IBAQAMokuS
213Y88wO3pyHbhponf0P62bGsJj8VOa9MZkbyuwsJKmwJ5+/36/78ghxiIXkZcO7
sIMZLKj/F4FbbaT/UHlo5/YWkMc2js3M+I/4udqZ+xWo8jag9m9bFdz8YKeAU5R9
zqIGmbUfyR2k2Loy2hnXQRaRxCgOwSJ2ZPoMqmmHq7ROKLEkmsqDrdSKDOAQStX5
HyyirMNirkobP9vqmyT1M0SCcXPim3ebFSD3/LPaj/BilSJyUR0efwjn7WGvK/Uw
wIqzE1No1fvK7m1S3dHGXLwpJWo2TyOmrfTk3ogByXLLdF8i0Pz4xGPbPr/nTuC2
5B6Lzn7ld9CMoT2J
-----END CERTIFICATE-----
Generated at Thu Aug 27 10:26:46 2026 by rpki-client