Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/8BVqiYoC4pdkWRPHsuDsZ1nbPkg.roa
File: 8BVqiYoC4pdkWRPHsuDsZ1nbPkg.roa (raw, json)
Hash identifier: YlIb2r+HtOXHbVaf3hx/0cAWv9rehXOSv0iPZqDeyMk=
Subject key identifier: F0:15:6A:89:8A:02:E2:97:64:59:13:C7:B2:E0:EC:67:59:DB:3E:48
Certificate issuer: /CN=bfe3971a32c0692c4e342e911790662470cf31b2
Certificate serial: 019DAB3D2DC36BA64FE78081083128137D83
Authority key identifier: BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/8BVqiYoC4pdkWRPHsuDsZ1nbPkg.roa
Signing time: Mon 20 Apr 2026 14:13:26 +0000
ROA not before: Mon 20 Apr 2026 14:13:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201814
IP address blocks: 5.181.188.0/22 maxlen: 22
91.223.3.0/24 maxlen: 24
91.226.198.0/23 maxlen: 23
91.226.198.0/24 maxlen: 24
91.226.199.0/24 maxlen: 24
95.214.52.0/22 maxlen: 23
95.214.52.0/23 maxlen: 23
95.214.54.0/23 maxlen: 23
146.19.24.0/24 maxlen: 24
178.211.139.0/24 maxlen: 24
185.16.36.0/22 maxlen: 24
185.16.36.0/23 maxlen: 23
185.16.38.0/23 maxlen: 23
185.225.191.0/24 maxlen: 24
185.248.24.0/24 maxlen: 24
193.34.212.0/22 maxlen: 22
193.34.212.0/23 maxlen: 23
193.34.214.0/23 maxlen: 23
193.34.215.0/24 maxlen: 24
195.3.220.0/22 maxlen: 22
195.3.220.0/23 maxlen: 23
195.3.222.0/23 maxlen: 23
195.3.222.0/24 maxlen: 24
212.23.222.0/24 maxlen: 24
2a03:cfc0::/32 maxlen: 32
2a03:cfc0::/33 maxlen: 33
2a03:cfc0:8000::/33 maxlen: 33
2a09:d580::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Apr 2026 01:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ab:3d:2d:c3:6b:a6:4f:e7:80:81:08:31:28:13:7d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe3971a32c0692c4e342e911790662470cf31b2
Validity
Not Before: Apr 20 14:13:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f0156a898a02e297645913c7b2e0ec6759db3e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ee:74:df:43:1d:48:91:13:90:df:cb:b2:a5:
80:64:66:c6:21:f4:d8:5b:81:79:25:90:a4:d5:13:
50:15:40:5f:e0:46:88:a5:7e:c8:87:7a:49:24:65:
57:f2:81:50:f2:4a:ce:8e:05:c8:ca:d3:45:45:27:
bc:6f:4b:f3:ac:75:a3:f5:c3:f8:11:0f:7d:a3:70:
7e:4b:a2:5d:9f:09:00:41:86:3e:c5:5d:81:eb:42:
42:5e:a9:2a:a9:d1:3b:87:51:56:06:61:0f:80:8b:
5d:90:95:b7:89:a2:84:57:11:88:9d:9b:6e:9d:1f:
4b:93:a6:39:69:90:a1:b0:e5:d2:bc:8b:08:01:51:
20:5c:71:10:6b:f2:c0:1c:3b:51:bf:fc:4d:f1:09:
ab:ae:53:c2:f8:dc:dd:6a:a4:26:13:71:ec:79:3e:
94:65:90:46:36:9a:46:ea:4d:6e:5a:97:e2:07:c8:
c2:bb:27:3e:3c:75:44:fb:30:48:c3:29:30:4c:48:
9d:90:92:85:12:02:50:68:9b:d8:b0:28:0b:8f:0a:
60:1d:56:b1:8c:b1:94:c5:fc:8c:a8:14:6c:f1:3f:
b7:65:9b:ea:a0:b1:b6:20:40:f7:6b:2b:42:f7:67:
e2:50:24:e9:39:8c:d8:b7:df:19:bc:36:7e:3d:79:
e0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:15:6A:89:8A:02:E2:97:64:59:13:C7:B2:E0:EC:67:59:DB:3E:48
X509v3 Authority Key Identifier:
keyid:BF:E3:97:1A:32:C0:69:2C:4E:34:2E:91:17:90:66:24:70:CF:31:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-OXGjLAaSxONC6RF5BmJHDPMbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/8BVqiYoC4pdkWRPHsuDsZ1nbPkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d76bf8-541f-4efc-98c5-c4dcc7f6b7df/1/v-OXGjLAaSxONC6RF5BmJHDPMbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.188.0/22
91.223.3.0/24
91.226.198.0/23
95.214.52.0/22
146.19.24.0/24
178.211.139.0/24
185.16.36.0/22
185.225.191.0/24
185.248.24.0/24
193.34.212.0/22
195.3.220.0/22
212.23.222.0/24
IPv6:
2a03:cfc0::/32
2a09:d580::/29
Signature Algorithm: sha256WithRSAEncryption
35:11:16:07:e2:1a:d8:d8:2f:7b:f9:07:e5:99:e9:40:46:97:
3b:ac:b0:4a:b2:ec:83:85:a5:5b:f6:bc:62:da:ef:8d:82:be:
51:4b:24:a6:2c:13:51:52:8d:28:c0:e1:07:03:01:23:38:b4:
28:bf:c1:64:6e:28:3b:d1:42:00:ec:e0:62:c4:ce:3a:27:e1:
a4:ba:c1:3d:ba:91:be:9a:bb:df:c8:c9:40:32:be:d9:57:c6:
4e:1f:f2:20:40:a1:0f:60:e5:d9:3d:60:50:85:21:a0:b1:6e:
d5:8a:06:bc:64:21:86:2a:2c:4c:c4:54:14:a5:9d:42:5e:e3:
73:aa:02:17:77:7f:4b:98:11:a5:62:90:e1:d2:bf:3f:9a:60:
a2:39:41:bc:1a:16:49:6b:5d:90:75:f5:18:e8:3a:de:22:3f:
4f:1b:7f:ef:dc:85:23:31:e5:01:6b:ea:59:11:47:6b:dc:66:
f8:e2:65:2c:e6:92:17:df:37:16:0a:d9:77:da:4f:52:55:f7:
ea:cc:a9:58:3e:ba:1f:82:fe:8c:4d:4f:dd:45:47:bd:d6:b5:
d1:fd:da:b6:90:41:34:75:37:bc:4d:83:95:fe:27:c0:26:89:
49:01:60:9e:7e:6f:60:ae:ca:01:a0:f2:a3:02:d1:27:fa:0d:
ba:52:2b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 25 04:18:50 2026 by rpki-client