Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/bhvvkDqvxZh9Qcyt0MvyMCF0yW4.roa
File: bhvvkDqvxZh9Qcyt0MvyMCF0yW4.roa (raw, json)
Hash identifier: OYcVCm5KwV5enIOqK18ZHC3T8SAY/mTenHcmViPY4NQ=
Subject key identifier: 6E:1B:EF:90:3A:AF:C5:98:7D:41:CC:AD:D0:CB:F2:30:21:74:C9:6E
Certificate issuer: /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Certificate serial: 019DB9135BA4AE56A5CE3203AE7369D9C111
Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/bhvvkDqvxZh9Qcyt0MvyMCF0yW4.roa
Signing time: Thu 23 Apr 2026 06:42:26 +0000
ROA not before: Thu 23 Apr 2026 06:42:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1136
IP address blocks: 37.251.0.0/17 maxlen: 17
46.227.232.0/21 maxlen: 21
62.131.0.0/16 maxlen: 16
62.216.0.0/19 maxlen: 19
62.251.0.0/17 maxlen: 17
77.160.0.0/13 maxlen: 13
77.168.0.0/14 maxlen: 14
77.172.0.0/16 maxlen: 16
77.173.0.0/16 maxlen: 16
77.174.0.0/16 maxlen: 16
77.175.0.0/16 maxlen: 16
77.175.0.0/17 maxlen: 17
77.175.128.0/17 maxlen: 17
80.60.0.0/15 maxlen: 15
80.100.0.0/15 maxlen: 15
81.204.0.0/14 maxlen: 14
82.92.0.0/14 maxlen: 14
82.136.192.0/18 maxlen: 18
82.161.0.0/16 maxlen: 16
82.168.0.0/15 maxlen: 15
82.170.0.0/16 maxlen: 16
83.68.0.0/19 maxlen: 19
84.39.0.0/19 maxlen: 19
84.80.0.0/16 maxlen: 16
84.82.0.0/15 maxlen: 15
84.84.0.0/14 maxlen: 14
85.113.224.0/19 maxlen: 19
86.80.0.0/13 maxlen: 13
86.88.0.0/15 maxlen: 15
86.90.0.0/16 maxlen: 16
86.92.0.0/14 maxlen: 14
88.159.0.0/16 maxlen: 16
109.72.32.0/20 maxlen: 20
128.127.32.0/20 maxlen: 20
188.142.0.0/17 maxlen: 17
194.109.0.0/16 maxlen: 16
195.64.64.0/19 maxlen: 19
195.121.0.0/16 maxlen: 16
195.240.0.0/16 maxlen: 16
195.240.0.0/17 maxlen: 17
195.240.128.0/18 maxlen: 18
195.240.192.0/18 maxlen: 18
195.241.0.0/16 maxlen: 16
212.123.128.0/18 maxlen: 18
212.182.128.0/18 maxlen: 18
212.238.0.0/16 maxlen: 16
213.10.0.0/16 maxlen: 16
213.75.0.0/16 maxlen: 16
213.84.0.0/16 maxlen: 16
213.148.224.0/19 maxlen: 19
213.197.0.0/18 maxlen: 18
213.222.0.0/19 maxlen: 19
2001:888::/29 maxlen: 29
2001:980::/29 maxlen: 29
2a02:a400::/25 maxlen: 25
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b9:13:5b:a4:ae:56:a5:ce:32:03:ae:73:69:d9:c1:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Validity
Not Before: Apr 23 06:42:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e1bef903aafc5987d41ccadd0cbf2302174c96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:31:9f:d0:45:be:c8:91:0e:af:bb:08:23:8e:
da:af:84:bf:9d:54:8d:66:5c:66:47:01:bd:67:93:
63:5d:cd:3a:3f:49:3d:d4:e4:07:0c:7c:39:ab:49:
61:8e:00:1c:50:4d:ab:36:6c:e1:69:8c:99:df:66:
cf:fa:14:25:c4:fb:7a:55:6d:ae:78:d9:a1:af:c6:
3a:87:e6:0f:32:e6:f6:e2:e7:b6:b6:cc:20:98:60:
12:58:41:7e:fd:53:39:0a:e3:fb:ac:78:31:5e:fe:
b0:1d:f7:d0:fe:e9:bc:bd:e1:7a:d8:98:1e:2b:00:
9d:01:d2:4d:34:04:4b:ca:ff:71:b9:78:e2:b1:54:
e2:c3:75:23:3f:85:60:27:32:34:41:5e:95:44:70:
c7:fa:9c:c8:e6:35:78:3a:c4:0e:8f:9b:a6:c2:03:
a1:00:48:44:37:76:7f:2c:dc:f9:04:e6:f4:38:dd:
a9:72:b0:f5:19:9b:07:61:86:8e:5a:9c:0b:45:15:
05:8f:73:63:06:c3:02:9f:a4:5a:13:23:87:64:63:
80:41:62:7b:aa:fa:9a:49:11:70:21:59:16:61:7e:
1a:3e:1c:5c:cc:76:d6:2e:8c:16:f8:2f:71:2b:84:
5c:53:cb:2b:01:a6:3b:07:c8:5f:6e:e0:6d:d0:92:
3d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1B:EF:90:3A:AF:C5:98:7D:41:CC:AD:D0:CB:F2:30:21:74:C9:6E
X509v3 Authority Key Identifier:
keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/bhvvkDqvxZh9Qcyt0MvyMCF0yW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.251.0.0/17
46.227.232.0/21
62.131.0.0/16
62.216.0.0/19
62.251.0.0/17
77.160.0.0/12
80.60.0.0/15
80.100.0.0/15
81.204.0.0/14
82.92.0.0/14
82.136.192.0/18
82.161.0.0/16
82.168.0.0-82.170.255.255
83.68.0.0/19
84.39.0.0/19
84.80.0.0/16
84.82.0.0-84.87.255.255
85.113.224.0/19
86.80.0.0-86.90.255.255
86.92.0.0/14
88.159.0.0/16
109.72.32.0/20
128.127.32.0/20
188.142.0.0/17
194.109.0.0/16
195.64.64.0/19
195.121.0.0/16
195.240.0.0/15
212.123.128.0/18
212.182.128.0/18
212.238.0.0/16
213.10.0.0/16
213.75.0.0/16
213.84.0.0/16
213.148.224.0/19
213.197.0.0/18
213.222.0.0/19
IPv6:
2001:888::/29
2001:980::/29
2a02:a400::/25
Signature Algorithm: sha256WithRSAEncryption
73:73:53:70:bd:62:02:da:a3:93:30:90:b4:b3:65:71:75:07:
4d:92:18:d5:6f:82:c1:aa:28:17:f4:4b:d1:55:1c:7d:ec:92:
ee:a3:cf:3e:fc:51:79:e2:e8:b4:1e:8d:ed:cf:a4:d3:7e:cd:
1c:c9:0c:70:7e:94:85:7c:af:29:ee:17:48:83:ec:0a:ba:0e:
6f:0a:d5:8d:5d:35:c9:3b:49:1a:cf:57:a9:a2:e5:f1:10:75:
83:5e:79:47:fd:30:a1:29:21:7d:f4:48:58:8d:fa:6e:81:95:
8d:b5:d5:59:b4:e4:05:a4:1f:d6:21:d1:fe:e0:60:de:ec:15:
33:3c:80:a5:69:e8:60:be:40:b3:bd:65:cc:08:27:6e:c7:d3:
58:6f:29:50:75:27:2c:02:d0:a6:88:ba:d2:7e:9e:26:e2:1b:
27:68:c0:d4:88:d0:a4:0e:df:8a:65:cf:f3:bd:24:6e:34:d6:
e4:ac:87:df:14:9f:5d:9e:97:a4:97:58:0a:e9:95:9d:4b:98:
e5:b2:38:6a:d8:7c:59:86:04:51:d8:2a:d4:18:f3:5e:07:b1:
c4:0c:34:8c:4b:fc:b7:3b:6a:a5:44:72:f1:20:3d:00:59:45:
bf:05:88:17:e0:ab:5d:cc:86:5f:17:57:3f:2f:f1:9b:e2:f9:
66:0b:57:76
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 28 07:16:26 2026 by rpki-client