Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/BxGrV8A6iDDKjqHMu12FNwL2n3Q.roa
File: BxGrV8A6iDDKjqHMu12FNwL2n3Q.roa (raw, json)
Hash identifier: pM719+JyUQctGBU4zyYhSazZkgZQIBOvLFuwl/fwC1A=
Subject key identifier: 07:11:AB:57:C0:3A:88:30:CA:8E:A1:CC:BB:5D:85:37:02:F6:9F:74
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 019CC355D0EFAD7B89CF5919A3DAF335B1D4
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/BxGrV8A6iDDKjqHMu12FNwL2n3Q.roa
Signing time: Fri 06 Mar 2026 13:28:26 +0000
ROA not before: Fri 06 Mar 2026 13:28:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212609
IP address blocks: 45.90.248.0/22 maxlen: 22
45.93.224.0/24 maxlen: 24
45.93.225.0/24 maxlen: 24
45.93.226.0/24 maxlen: 24
45.130.79.0/24 maxlen: 24
45.138.28.0/22 maxlen: 22
89.190.148.0/24 maxlen: 24
89.190.149.0/24 maxlen: 24
212.60.0.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Mar 2026 01:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c3:55:d0:ef:ad:7b:89:cf:59:19:a3:da:f3:35:b1:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Mar 6 13:28:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0711ab57c03a8830ca8ea1ccbb5d853702f69f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:19:ab:ca:6f:67:07:f9:a7:20:83:12:22:49:
f6:e4:eb:a9:6d:5d:f8:54:10:8a:79:e1:54:4c:87:
ad:02:cb:f8:7e:9a:73:b8:0f:fa:ff:52:7d:af:99:
23:33:ca:31:4e:e6:57:53:1f:98:2e:5a:9b:3d:03:
ac:df:81:8c:39:d8:ef:c5:41:10:06:a8:26:82:da:
0c:82:36:11:f9:d6:5e:3f:41:a4:89:ef:29:fd:b0:
3b:22:93:1b:b2:45:7f:0d:19:08:ab:c5:b6:f0:29:
21:15:eb:cd:81:96:4c:fa:7e:8c:e4:ed:7d:d2:8e:
83:ca:8e:62:fc:75:75:c1:3c:be:d1:b8:fc:2f:a1:
26:cb:17:4e:06:e3:81:79:d5:41:f9:f8:3c:fb:b0:
90:70:ad:fa:4c:b4:d8:d4:b7:5c:27:4a:ec:a8:ad:
90:7c:04:c6:f5:1d:72:b9:8f:76:5b:ab:52:53:94:
f1:40:5d:c3:8c:70:fa:00:16:96:ea:71:37:d8:7c:
0f:fd:30:48:b6:62:52:c1:66:ae:a5:c3:f5:a7:28:
14:ff:3c:54:76:bd:bc:02:6a:0e:6f:77:e1:18:29:
a3:3f:94:78:96:68:1c:a7:fe:30:b0:25:b4:5f:38:
2c:65:ae:b9:cc:50:d0:f3:0f:a6:49:74:74:e0:e4:
84:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:11:AB:57:C0:3A:88:30:CA:8E:A1:CC:BB:5D:85:37:02:F6:9F:74
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/BxGrV8A6iDDKjqHMu12FNwL2n3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.248.0/22
45.93.224.0-45.93.226.255
45.130.79.0/24
45.138.28.0/22
89.190.148.0/23
212.60.0.0/22
Signature Algorithm: sha256WithRSAEncryption
68:9c:5e:15:80:ed:16:a0:d6:1a:01:51:89:8d:56:ad:22:78:
f0:54:c0:f0:74:50:35:13:bd:20:2d:95:2d:8c:d8:55:65:a6:
c1:f9:14:45:f2:8c:87:94:92:96:ff:49:d4:d1:36:5d:e4:51:
38:d2:d4:3f:24:43:9a:18:c6:54:ec:67:e3:2b:b4:17:ca:18:
2a:5b:a8:9a:8d:10:c2:99:b8:49:0a:0a:98:7a:70:ca:51:b6:
08:7b:30:b0:bf:34:17:d8:31:4b:7c:01:0e:37:cf:bd:eb:80:
b8:d6:10:af:32:23:e1:9b:3c:37:4d:bf:56:3c:a7:70:4e:1b:
2f:88:41:63:e3:c2:f2:62:b5:ff:af:1e:b0:49:b5:ba:f3:05:
35:16:80:a4:9e:d4:25:97:38:9e:fd:1f:76:56:84:b8:6b:58:
b5:f1:05:a4:3b:15:9d:65:40:07:49:af:46:4a:4e:79:cf:08:
20:dd:33:01:9a:ae:58:f3:7e:51:dc:15:61:f3:62:fe:64:e6:
5c:0a:54:e4:43:75:ec:3b:db:6c:25:38:0b:74:75:39:71:cb:
5d:f2:57:da:fe:78:01:93:a5:4d:61:fe:cc:ad:a1:ad:39:7d:
b9:f7:f5:5f:59:e4:82:cd:aa:4e:69:51:ce:d7:2f:ac:a2:47:
7b:48:3a:10
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAZzDVdDvrXuJz1kZo9rzNbHUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNzYwM2E5M2JjYTMxYjAxOGY1MTFmNmQ0YjBiNzU0NmU5
NjMzNjIwHhcNMjYwMzA2MTMyODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzExYWI1N2MwM2E4ODMwY2E4ZWExY2NiYjVkODUzNzAyZjY5Zjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhmrym9nB/mnIIMSIkn25OupbV34
VBCKeeFUTIetAsv4fppzuA/6/1J9r5kjM8oxTuZXUx+YLlqbPQOs34GMOdjvxUEQ
BqgmgtoMgjYR+dZeP0Gkie8p/bA7IpMbskV/DRkIq8W28CkhFevNgZZM+n6M5O19
0o6Dyo5i/HV1wTy+0bj8L6EmyxdOBuOBedVB+fg8+7CQcK36TLTY1LdcJ0rsqK2Q
fATG9R1yuY92W6tSU5TxQF3DjHD6ABaW6nE32HwP/TBItmJSwWaupcP1pygU/zxU
dr28AmoOb3fhGCmjP5R4lmgcp/4wsCW0XzgsZa65zFDQ8w+mSXR04OSE/wIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFAcRq1fAOogwyo6hzLtdhTcC9p90MB8GA1UdIwQY
MBaAFIJ2A6k7yjGwGPUR9tSwt1RuljNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYt
YjE2Y2I0ZGZhZGQzLzEvQnhHclY4QTZpRERLanFITXUxMkZOd0wybjNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYtYjE2Y2I0ZGZhZGQz
LzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQCLVr4MAwD
BAUtXeADBAAtXeIDBAAtgk8DBAItihwDBAFZvpQDBALUPAAwDQYJKoZIhvcNAQEL
BQADggEBAGicXhWA7Rag1hoBUYmNVq0iePBUwPB0UDUTvSAtlS2M2FVlpsH5FEXy
jIeUkpb/SdTRNl3kUTjS1D8kQ5oYxlTsZ+MrtBfKGCpbqJqNEMKZuEkKCph6cMpR
tgh7MLC/NBfYMUt8AQ43z73rgLjWEK8yI+GbPDdNv1Y8p3BOGy+IQWPjwvJitf+v
HrBJtbrzBTUWgKSe1CWXOJ79H3ZWhLhrWLXxBaQ7FZ1lQAdJr0ZKTnnPCCDdMwGa
rljzflHcFWHzYv5k5lwKVORDdew722wlOAt0dTlxy13yV9r+eAGTpU1h/sytoa05
fbn39V9Z5ILNqk5pUc7XL6yiR3tIOhA=
-----END CERTIFICATE-----
Generated at Mon Mar 23 10:29:52 2026 by rpki-client