Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/BgGae1wMsrXSNbCuc58GZ8KVoR8.roa
File: BgGae1wMsrXSNbCuc58GZ8KVoR8.roa (raw, json)
Hash identifier: mr2zFt2gl3kJKClNxzReZKf69V4UgUiaes1wwParPmU=
Subject key identifier: 06:01:9A:7B:5C:0C:B2:B5:D2:35:B0:AE:73:9F:06:67:C2:95:A1:1F
Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Certificate serial: 01A16F4DB4BC6B88E86D4A06030A83DECF28
Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/BgGae1wMsrXSNbCuc58GZ8KVoR8.roa
Signing time: Sat 24 Oct 2026 19:05:25 +0000
ROA not before: Sat 24 Oct 2026 19:05:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8069
IP address blocks: 145.190.0.0/23 maxlen: 23
145.190.2.0/24 maxlen: 24
145.190.3.0/24 maxlen: 24
145.190.4.0/23 maxlen: 23
145.190.6.0/24 maxlen: 24
145.190.7.0/24 maxlen: 24
145.190.8.0/21 maxlen: 21
145.190.16.0/21 maxlen: 21
145.190.24.0/21 maxlen: 21
145.190.32.0/22 maxlen: 22
145.190.36.0/24 maxlen: 24
145.190.37.0/24 maxlen: 24
145.190.38.0/23 maxlen: 23
145.190.40.0/23 maxlen: 23
145.190.42.0/24 maxlen: 24
145.190.43.0/24 maxlen: 24
145.190.44.0/22 maxlen: 22
145.190.48.0/22 maxlen: 22
145.190.52.0/23 maxlen: 23
145.190.54.0/24 maxlen: 24
145.190.55.0/24 maxlen: 24
145.190.56.0/23 maxlen: 23
145.190.58.0/24 maxlen: 24
145.190.59.0/24 maxlen: 24
145.190.60.0/24 maxlen: 24
145.190.61.0/24 maxlen: 24
145.190.62.0/24 maxlen: 24
145.190.63.0/24 maxlen: 24
145.190.64.0/24 maxlen: 24
145.190.65.0/24 maxlen: 24
145.190.66.0/24 maxlen: 24
145.190.67.0/24 maxlen: 24
145.190.68.0/24 maxlen: 24
145.190.69.0/24 maxlen: 24
145.190.76.0/24 maxlen: 24
145.190.77.0/24 maxlen: 24
145.190.78.0/24 maxlen: 24
145.190.81.0/24 maxlen: 24
145.190.86.0/24 maxlen: 24
145.190.89.0/24 maxlen: 24
145.190.128.0/24 maxlen: 24
145.190.129.0/24 maxlen: 24
145.190.130.0/24 maxlen: 24
145.190.131.0/24 maxlen: 24
145.190.132.0/24 maxlen: 24
145.190.133.0/24 maxlen: 24
145.190.134.0/24 maxlen: 24
145.190.135.0/24 maxlen: 24
145.190.142.0/24 maxlen: 24
145.190.150.0/24 maxlen: 24
145.190.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 22:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6f:4d:b4:bc:6b:88:e8:6d:4a:06:03:0a:83:de:cf:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb
Validity
Not Before: Oct 24 19:05:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06019a7b5c0cb2b5d235b0ae739f0667c295a11f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:26:11:e6:9e:da:34:ad:1c:59:42:53:bb:0c:
4e:f6:00:9d:55:03:83:4b:19:70:a1:20:95:bd:c8:
2d:2f:c4:8f:a6:00:af:a2:0c:fb:f8:74:3b:03:57:
58:2e:33:4d:29:4d:b0:3e:9c:4d:f4:cc:d0:1b:05:
50:d6:31:f5:08:9d:b8:d0:b9:69:82:cd:9d:ea:3b:
75:7d:94:e8:58:38:2c:97:f8:92:84:2f:af:d6:a9:
78:43:1f:94:86:98:f3:4a:0e:9b:77:af:16:09:34:
aa:6d:e5:b3:18:c6:44:b9:59:5e:c1:0b:53:6a:2f:
e5:b2:69:29:de:a9:30:ea:50:3d:f5:7b:07:c4:60:
77:1c:9c:a1:6c:7f:29:a6:30:d9:96:3a:29:26:1f:
f8:55:b6:90:91:9d:bc:f6:86:e0:ee:96:63:5a:37:
0d:b3:01:ef:45:e3:d4:8c:d2:4f:17:8d:4c:d5:2b:
d0:8a:24:26:da:98:56:e1:20:63:08:2e:8f:ef:4b:
99:95:77:ed:d1:26:76:8c:c1:65:10:9f:e8:ae:e4:
63:5c:b0:50:cf:26:02:bb:9a:fe:a4:14:ea:7d:49:
a6:64:33:b0:dc:65:9f:0b:4f:a9:11:99:9a:70:e3:
57:21:50:b3:ed:01:51:26:33:7e:15:0c:40:91:08:
0d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:01:9A:7B:5C:0C:B2:B5:D2:35:B0:AE:73:9F:06:67:C2:95:A1:1F
X509v3 Authority Key Identifier:
keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/BgGae1wMsrXSNbCuc58GZ8KVoR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.190.0.0-145.190.69.255
145.190.76.0-145.190.78.255
145.190.81.0/24
145.190.86.0/24
145.190.89.0/24
145.190.128.0/21
145.190.142.0/24
145.190.150.0/24
145.190.162.0/24
Signature Algorithm: sha256WithRSAEncryption
55:da:0b:48:df:99:ad:e6:1d:c8:31:0f:04:e7:4c:7c:86:ed:
45:f2:b8:04:a2:38:7b:50:d9:bd:2a:57:37:0d:8a:4b:c7:5e:
5f:4e:27:e1:0d:08:8e:d5:d2:4b:ee:59:6e:23:41:9b:8c:aa:
22:7f:c5:d9:4f:1d:9e:12:4c:9a:31:b7:79:1d:00:1a:20:c4:
3f:c1:6b:fc:d2:5a:3f:e4:50:4d:fa:c4:03:04:b4:8e:a8:2e:
44:6c:94:ec:a4:cd:18:a8:0a:02:b1:62:df:f2:f0:d5:30:a2:
70:6b:d9:f8:57:94:f7:5a:fc:32:cc:b6:9c:5b:23:18:13:28:
9a:7c:db:c7:84:c3:dd:5a:86:8a:31:89:a6:32:a4:ea:ff:dc:
a7:5c:33:c8:61:f3:1e:39:59:14:cd:2b:65:78:04:f9:2c:01:
ac:bc:e5:3a:fd:b1:c3:0c:46:59:bc:fc:ed:cc:40:e7:59:29:
5a:85:3f:90:1e:cc:fb:44:f2:13:35:93:82:ac:78:70:9a:94:
b3:d5:74:8e:7e:b8:0e:05:98:c9:9b:11:e8:e1:47:f2:5d:a0:
56:ce:8c:1f:07:b2:d3:72:6f:80:84:a6:3b:58:fc:b2:96:af:
a1:a0:ab:22:41:2a:60:1c:8e:f7:4a:22:51:77:e5:ba:8c:aa:
4a:06:a8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:51:16 2026 by rpki-client