Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/kBPCpt4gFqRNKcv5Y3AMdci8BLs.roa
File: kBPCpt4gFqRNKcv5Y3AMdci8BLs.roa (raw, json)
Hash identifier: xZJDbUPIL7GUOZ1WQekkDuQeEH4Ts+PH1R+dpRgR/wg=
Subject key identifier: 90:13:C2:A6:DE:20:16:A4:4D:29:CB:F9:63:70:0C:75:C8:BC:04:BB
Certificate issuer: /CN=f6090b4db06a4d65935141bac98098127a8b8f5a
Certificate serial: 01A16479D0A354BF3EA5AFCA0C7ADFB0AF86
Authority key identifier: F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/kBPCpt4gFqRNKcv5Y3AMdci8BLs.roa
Signing time: Thu 22 Oct 2026 16:37:47 +0000
ROA not before: Thu 22 Oct 2026 16:37:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200514
IP address blocks: 77.81.120.0/24 maxlen: 24
77.81.121.0/24 maxlen: 24
89.248.67.0/24 maxlen: 24
91.208.113.0/24 maxlen: 24
185.66.140.0/24 maxlen: 24
185.66.141.0/24 maxlen: 24
185.66.142.0/24 maxlen: 24
185.66.143.0/24 maxlen: 24
185.192.125.0/24 maxlen: 24
185.192.126.0/24 maxlen: 24
185.192.127.0/24 maxlen: 24
194.145.208.0/24 maxlen: 24
194.145.209.0/24 maxlen: 24
213.109.207.0/24 maxlen: 24
2a0a:2c40::/48 maxlen: 48
2a0a:2c41::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 22:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:64:79:d0:a3:54:bf:3e:a5:af:ca:0c:7a:df:b0:af:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6090b4db06a4d65935141bac98098127a8b8f5a
Validity
Not Before: Oct 22 16:37:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9013c2a6de2016a44d29cbf963700c75c8bc04bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:45:b0:99:5f:80:21:35:f9:f9:bb:3d:29:70:
e1:53:28:6e:b5:72:1e:23:05:d2:f9:a9:50:de:5e:
da:33:e1:7a:d3:ad:a3:70:a1:88:b8:09:20:cd:4d:
58:19:58:8f:e1:75:9a:f7:b4:71:15:1e:e3:ed:ad:
40:a6:00:1d:bb:43:8e:43:5b:a7:50:92:17:21:eb:
c7:02:8d:e3:7e:f0:32:2e:51:21:4b:bd:d9:f6:7c:
de:b3:64:c9:f6:19:77:9c:a4:dc:eb:7f:5d:16:05:
b8:d8:9a:15:2a:eb:15:2d:02:13:d3:eb:38:22:fd:
62:ec:a5:fa:1b:57:b6:9c:7c:8c:9a:22:73:f7:d9:
8d:1d:ed:75:a3:53:45:a4:66:09:15:68:80:cf:ef:
a5:fb:fc:24:47:c7:76:1c:e4:d1:37:37:44:57:fc:
d7:b2:06:28:e7:d8:1d:94:ef:72:30:e3:82:77:c2:
b2:e3:a7:7a:c8:3a:32:97:f8:d6:90:fb:82:f8:59:
e9:fe:e3:8f:5d:a9:40:53:25:50:68:a3:82:02:9d:
1d:37:c5:28:0b:ef:67:92:ae:d6:e9:0a:d9:96:cf:
80:6d:ce:3d:c7:98:e6:ad:04:c5:f6:b3:58:26:09:
7b:fa:2c:49:f6:03:73:10:33:82:f5:5a:c6:9d:d1:
e0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:13:C2:A6:DE:20:16:A4:4D:29:CB:F9:63:70:0C:75:C8:BC:04:BB
X509v3 Authority Key Identifier:
keyid:F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/kBPCpt4gFqRNKcv5Y3AMdci8BLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.120.0/23
89.248.67.0/24
91.208.113.0/24
185.66.140.0/22
185.192.125.0-185.192.127.255
194.145.208.0/23
213.109.207.0/24
IPv6:
2a0a:2c40::/48
2a0a:2c41::/48
Signature Algorithm: sha256WithRSAEncryption
5b:b2:0d:d6:7f:99:a9:a5:55:fd:2c:fe:4b:ce:8a:de:fd:ad:
b1:82:fd:24:2e:c6:e9:72:05:a2:c3:a2:27:1a:0b:a8:c2:80:
af:35:f8:03:38:b2:87:88:21:32:ef:f3:3a:36:aa:0d:45:53:
07:12:e4:f2:5a:0d:cd:21:13:f5:52:63:f8:cd:30:7b:6f:5d:
ba:a2:52:c0:11:78:c5:ba:29:ee:77:a0:61:30:41:f2:65:a8:
46:ee:a5:67:de:9f:5c:8c:68:88:49:85:6c:49:29:20:a5:04:
41:bb:04:4e:e9:e1:02:57:aa:b6:9e:ac:c3:c8:70:be:73:5e:
61:12:6b:f7:2e:47:87:ef:fa:42:1f:0d:dc:c4:ea:9e:c3:e6:
56:2b:c6:b8:c0:e6:3b:24:06:63:69:24:15:9a:8d:07:4b:b5:
4c:a0:fa:ef:b0:43:55:47:e2:ab:61:c8:5c:08:e2:13:f2:42:
60:b2:d2:26:eb:1a:f4:b3:28:3c:b8:82:26:ab:f9:37:75:49:
f8:8d:f7:2b:13:17:8d:f8:cd:e2:0e:10:b2:e5:d0:87:77:e1:
80:3b:3e:75:5d:ee:1f:92:a0:5a:d9:7e:64:e8:39:76:cf:a1:
8d:3f:d1:0c:2b:8c:c6:4b:6d:4c:34:56:f6:8d:ae:16:46:e5:
25:8f:c3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 03:16:51 2026 by rpki-client