Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/bgz_1JIWJ77iuRJyW9k_p2c7sL0.roa
File: bgz_1JIWJ77iuRJyW9k_p2c7sL0.roa (raw, json)
Hash identifier: b05PFr3UYLzhTDhAR2iMQcXw3+qc7LOiqoaB/wOpgWM=
Subject key identifier: 6E:0C:FF:D4:92:16:27:BE:E2:B9:12:72:5B:D9:3F:A7:67:3B:B0:BD
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 01A0EED78F41FCABC6671D1A27C49AC1F992
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/bgz_1JIWJ77iuRJyW9k_p2c7sL0.roa
Signing time: Tue 29 Sep 2026 20:24:59 +0000
ROA not before: Tue 29 Sep 2026 20:24:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210976
IP address blocks: 177.177.215.0/24 maxlen: 32
177.177.223.0/24 maxlen: 32
179.252.208.0/24 maxlen: 32
179.252.210.0/24 maxlen: 32
179.252.213.0/24 maxlen: 32
179.252.216.0/24 maxlen: 32
187.5.238.0/24 maxlen: 32
201.51.10.0/24 maxlen: 24
201.51.16.0/24 maxlen: 32
201.51.17.0/24 maxlen: 32
201.51.18.0/24 maxlen: 32
201.51.19.0/24 maxlen: 32
201.51.20.0/24 maxlen: 32
201.51.21.0/24 maxlen: 32
201.51.22.0/24 maxlen: 32
201.51.23.0/24 maxlen: 32
201.51.24.0/24 maxlen: 32
201.51.25.0/24 maxlen: 32
201.51.26.0/24 maxlen: 32
201.51.27.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:d7:8f:41:fc:ab:c6:67:1d:1a:27:c4:9a:c1:f9:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Sep 29 20:24:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e0cffd4921627bee2b912725bd93fa7673bb0bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e5:bd:5e:54:fc:03:f3:6b:a8:6e:bd:53:25:
36:56:1b:33:9e:27:70:50:3d:63:5f:64:de:19:45:
50:cc:ec:7f:87:1f:f7:69:cd:fd:e8:a1:4f:8f:c5:
25:64:19:65:93:5a:6e:f4:26:2f:9c:d2:08:ce:ab:
c1:51:34:71:e7:ed:f3:cd:5e:3c:14:e7:9b:c3:ea:
3e:a4:d7:fd:51:1f:40:b6:0d:34:9d:fa:b2:bf:87:
fa:73:e3:b6:a1:2d:48:fa:48:e2:7e:da:c3:1f:56:
bf:23:a9:c6:0e:e4:db:19:05:47:fa:ec:4d:f6:29:
d2:8e:13:d8:30:36:88:94:07:fe:f6:0b:d0:de:16:
96:e3:b3:38:61:06:78:59:3b:48:36:6c:cc:0d:d4:
93:a6:23:86:aa:7a:6c:f5:7a:48:4d:c5:2d:47:c0:
55:00:cd:c0:74:93:3e:3a:ef:41:7e:ff:1d:4c:a4:
c1:1e:3c:6e:77:df:57:d1:f7:2b:d3:9b:cb:b7:78:
c0:b3:ff:e3:c1:74:ec:49:c7:2f:c0:7e:6d:a1:94:
6a:44:20:e6:29:83:e3:17:93:c6:ad:8d:ea:93:fa:
3d:39:1c:e5:63:a4:36:74:0b:9a:9b:01:54:c5:77:
6d:a9:38:1a:60:c2:5b:c2:df:8f:66:cd:4e:1b:7a:
4f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0C:FF:D4:92:16:27:BE:E2:B9:12:72:5B:D9:3F:A7:67:3B:B0:BD
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/bgz_1JIWJ77iuRJyW9k_p2c7sL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.177.215.0/24
177.177.223.0/24
179.252.208.0/24
179.252.210.0/24
179.252.213.0/24
179.252.216.0/24
187.5.238.0/24
201.51.10.0/24
201.51.16.0-201.51.27.255
Signature Algorithm: sha256WithRSAEncryption
39:99:dc:69:c5:b2:0f:a1:01:fc:00:47:65:ac:da:1b:b7:d7:
48:5d:b9:fb:17:2e:d0:0c:ce:1f:17:59:76:df:bc:32:ce:1b:
85:b5:02:78:f6:60:ec:14:26:af:c8:57:ae:35:80:fa:c4:26:
5d:21:1b:fe:95:ab:3b:5e:4e:84:f0:13:4b:a6:ca:e3:56:84:
12:50:a5:e6:e2:4b:f6:ab:06:25:15:4c:77:07:26:da:e9:22:
2f:d7:f1:3c:f3:c8:0f:74:ca:8f:7a:48:28:b2:27:14:cc:7b:
6c:20:b9:cd:73:de:9a:d3:b6:ae:f8:bc:24:66:15:55:45:60:
5e:d4:07:62:33:48:18:3a:5d:12:21:07:16:ff:34:45:41:a1:
d6:a1:66:74:35:77:98:33:74:63:a0:e8:6b:9f:b5:cc:69:6d:
f6:3b:0a:7d:8c:c9:47:07:d3:37:10:07:2e:9b:81:49:b2:fb:
4f:d5:46:68:e6:a3:62:fe:7a:fc:74:f7:f0:7a:c0:81:a4:4e:
27:8e:cb:cd:26:25:e4:4d:4b:00:09:84:36:2d:4c:45:24:95:
7d:53:b5:92:56:13:92:6c:c1:f2:c8:61:47:98:87:27:17:15:
90:46:a0:0a:57:a1:a6:3c:2c:f8:58:fd:5a:b2:59:c6:70:ac:
24:12:10:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 17:38:55 2026 by rpki-client