Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/BGwJXl4WMBOKQ5hi3Kbb5kNQP7I.roa
File: BGwJXl4WMBOKQ5hi3Kbb5kNQP7I.roa (raw, json)
Hash identifier: owx7ZG+kU6z5np1MdWRPPkvLT3950fTOMGJXFM5YMmI=
Subject key identifier: 04:6C:09:5E:5E:16:30:13:8A:43:98:62:DC:A6:DB:E6:43:50:3F:B2
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 01A0498FF86FD15C98C1138967271D31019E
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/BGwJXl4WMBOKQ5hi3Kbb5kNQP7I.roa
Signing time: Fri 28 Aug 2026 18:09:27 +0000
ROA not before: Fri 28 Aug 2026 18:09:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219438
IP address blocks: 189.74.107.0/24 maxlen: 24
191.44.36.0/24 maxlen: 24
191.44.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:49:8f:f8:6f:d1:5c:98:c1:13:89:67:27:1d:31:01:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Aug 28 18:09:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=046c095e5e1630138a439862dca6dbe643503fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c2:87:e3:8d:96:3f:bb:d0:ed:91:f7:49:34:
d0:31:95:7d:07:a5:e0:8e:ba:96:cb:77:dd:a6:c7:
50:24:00:2c:3d:96:c3:4d:f6:db:87:fc:ba:c8:73:
7e:6d:79:15:e6:60:07:69:19:f5:ce:27:9d:e0:99:
1f:07:2d:3b:1b:20:77:9b:05:6d:e5:92:4c:28:35:
ee:e1:61:ac:f6:1c:81:66:ed:71:49:8e:1e:6d:98:
db:c4:c6:e4:06:ee:8d:29:d2:cb:cb:c2:f0:39:99:
95:a9:9a:9e:87:cb:2d:c5:e5:70:d7:fb:bf:8e:04:
38:8c:35:e4:d2:63:00:95:d8:a5:fa:33:26:b9:71:
ae:e9:b8:9c:ae:7e:18:fb:8b:f3:58:5d:66:df:9a:
c0:b9:7c:48:97:11:d3:32:9f:19:0d:9b:3e:c4:ec:
03:6a:1f:08:57:30:63:f9:72:0c:89:d4:7f:62:56:
9a:42:4e:21:35:bb:75:9a:b5:fe:63:66:f9:14:f8:
f1:44:85:e6:c6:71:60:5c:d1:a6:89:4f:d6:c1:49:
e4:a5:96:eb:f0:aa:95:d0:46:c7:7d:3d:5a:9b:06:
3f:b2:b9:d6:c0:ae:c5:b8:e0:4e:c0:1e:3b:86:c8:
af:47:c7:df:d3:59:cb:a4:bc:ec:5a:62:9e:42:f1:
35:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:6C:09:5E:5E:16:30:13:8A:43:98:62:DC:A6:DB:E6:43:50:3F:B2
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/BGwJXl4WMBOKQ5hi3Kbb5kNQP7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.74.107.0/24
191.44.36.0/24
191.44.39.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:90:ff:32:2d:f6:28:8b:07:d1:dc:72:3c:b9:2f:14:ac:ae:
9c:3e:d3:aa:e6:db:5a:15:7a:c0:b5:08:d5:26:ea:29:cd:d6:
70:26:a3:84:d9:ff:a5:ab:8e:67:40:25:40:e0:b8:f6:ba:dd:
ad:1d:28:14:2f:28:05:e5:61:de:14:9d:ca:b9:29:fb:6a:98:
bf:40:86:9f:2b:8f:46:c7:da:cf:d7:77:ec:8d:3b:0f:3d:2f:
d9:b8:e9:c2:f9:7d:a6:3a:7f:08:d1:1d:05:7e:64:47:66:66:
60:2b:01:d7:d5:c6:fc:a0:67:15:55:82:69:ca:b9:b7:59:d3:
21:79:ba:9a:0c:39:57:a0:6f:08:70:f5:36:63:c1:25:d9:95:
48:93:39:17:b1:7c:21:1c:ac:84:55:90:89:0f:5d:0e:73:ca:
a1:f9:35:cd:a4:3f:cd:fd:d4:37:ed:54:54:58:5c:f4:8f:eb:
2c:92:fe:a2:e4:c9:6f:23:cf:e0:c5:17:38:96:1f:85:64:45:
49:6f:de:55:ff:e4:98:5d:1c:db:ec:12:c9:e7:92:7f:40:0f:
e7:20:9b:60:5e:d0:61:a3:9d:b1:90:6e:49:8b:c8:f7:68:fc:
c5:ba:d2:d3:17:6d:08:b1:be:ba:12:1e:98:3c:28:72:82:1f:
57:b3:98:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:30 2026 by rpki-client