Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/C_BcKLg9J9op53P8rlTr_7TpSXM.roa
File: C_BcKLg9J9op53P8rlTr_7TpSXM.roa (raw, json)
Hash identifier: UfOzXsHJ7ktrBn1FfroJmmo4vwf7ebLad3GnqYpHmZ8=
Subject key identifier: 0B:F0:5C:28:B8:3D:27:DA:29:E7:73:FC:AE:54:EB:FF:B4:E9:49:73
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 019D0638F70058CA2E7E2CF43C3892DB9822
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/C_BcKLg9J9op53P8rlTr_7TpSXM.roa
Signing time: Thu 19 Mar 2026 13:11:29 +0000
ROA not before: Thu 19 Mar 2026 13:11:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42065
IP address blocks: 46.19.184.0/21 maxlen: 21
77.239.224.0/19 maxlen: 19
83.243.64.0/22 maxlen: 22
83.243.68.0/24 maxlen: 24
83.243.70.0/23 maxlen: 23
91.108.0.0/22 maxlen: 24
91.108.24.0/21 maxlen: 24
91.108.32.0/23 maxlen: 24
91.108.52.0/24 maxlen: 24
92.62.48.0/20 maxlen: 22
94.124.176.0/22 maxlen: 23
94.124.178.0/23 maxlen: 24
94.229.96.0/20 maxlen: 20
95.140.92.0/24 maxlen: 24
95.140.94.0/24 maxlen: 24
95.161.0.0/18 maxlen: 24
95.161.88.0/22 maxlen: 24
95.161.95.0/24 maxlen: 24
95.161.96.0/23 maxlen: 24
95.161.100.0/23 maxlen: 23
95.161.102.0/23 maxlen: 24
95.161.104.0/23 maxlen: 24
95.161.124.0/24 maxlen: 24
95.161.125.0/24 maxlen: 24
95.161.127.0/24 maxlen: 24
185.26.72.0/24 maxlen: 24
185.26.74.0/24 maxlen: 24
185.51.60.0/22 maxlen: 24
188.65.64.0/21 maxlen: 21
193.218.140.0/22 maxlen: 22
212.232.64.0/20 maxlen: 20
213.21.0.0/19 maxlen: 19
213.21.48.0/20 maxlen: 20
2a00:11d8::/32 maxlen: 48
2a02:1e1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:38:f7:00:58:ca:2e:7e:2c:f4:3c:38:92:db:98:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Mar 19 13:11:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0bf05c28b83d27da29e773fcae54ebffb4e94973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fd:79:12:dc:c0:d9:de:89:e4:c8:c0:65:12:
51:5a:35:11:02:c3:5e:56:9a:25:af:5c:9c:71:ba:
45:6e:60:cd:e3:f3:ed:48:07:92:64:8b:01:b7:44:
91:c6:ae:a9:ab:8f:67:c6:00:8b:46:f9:17:72:77:
d9:b4:6f:62:4b:1d:20:cd:e2:17:1f:2d:43:cd:8f:
d1:48:ca:c2:80:3f:cf:03:79:1c:10:c9:d8:95:ed:
b5:98:e6:85:49:72:5d:be:2e:97:a0:f0:a9:ba:1a:
2a:3f:0b:58:84:a7:ad:5d:31:ef:44:b2:7b:e0:45:
d8:fb:6f:d1:54:9d:40:b5:ab:a7:8d:ef:a9:5b:44:
e9:c8:e4:65:a9:74:a4:c0:a1:9c:d0:e3:c5:f4:20:
4b:79:f1:24:5b:93:d8:52:4f:f9:6b:e7:73:24:05:
43:e3:d6:fe:a5:4d:3e:1d:75:5d:9c:1b:57:3a:ba:
41:fd:61:4b:87:0f:09:06:31:a0:83:71:6c:40:57:
b9:2b:d0:9e:97:bd:79:27:4c:14:1c:a4:e3:a1:64:
3e:d8:c0:21:23:ec:31:d6:b1:40:e9:55:2b:d5:6b:
7c:f5:ff:d7:80:e2:4a:4b:67:3d:6f:ad:40:15:05:
5c:74:96:ae:0a:34:76:90:f7:ad:49:c7:f3:45:6b:
b0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F0:5C:28:B8:3D:27:DA:29:E7:73:FC:AE:54:EB:FF:B4:E9:49:73
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/C_BcKLg9J9op53P8rlTr_7TpSXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.19.184.0/21
77.239.224.0/19
83.243.64.0-83.243.68.255
83.243.70.0/23
91.108.0.0/22
91.108.24.0-91.108.33.255
91.108.52.0/24
92.62.48.0/20
94.124.176.0/22
94.229.96.0/20
95.140.92.0/24
95.140.94.0/24
95.161.0.0/18
95.161.88.0/22
95.161.95.0-95.161.97.255
95.161.100.0-95.161.105.255
95.161.124.0/23
95.161.127.0/24
185.26.72.0/24
185.26.74.0/24
185.51.60.0/22
188.65.64.0/21
193.218.140.0/22
212.232.64.0/20
213.21.0.0/19
213.21.48.0/20
IPv6:
2a00:11d8::/32
2a02:1e1::/32
Signature Algorithm: sha256WithRSAEncryption
4b:75:21:23:08:b0:ed:b2:e7:b2:5d:16:c5:1b:1d:65:1e:ec:
63:78:cf:6d:5c:f3:2b:62:d4:71:bf:96:cd:d2:84:af:44:26:
ee:a5:da:bd:45:6c:9b:97:2f:6c:29:ca:c1:6c:6a:1b:85:d0:
d2:ed:b4:4c:b7:b9:29:94:8a:ee:ab:6b:cc:24:c8:7b:e6:18:
19:bd:5b:48:a6:ab:45:41:07:11:4a:32:2b:90:d9:fe:00:8d:
c9:7d:30:eb:cc:71:5e:36:15:5a:a9:62:d7:c3:d0:7b:50:6c:
1e:97:cb:1b:28:74:10:cc:50:36:08:35:44:a0:16:0f:13:51:
b3:25:4d:60:05:64:f8:09:fe:f0:0e:17:a9:37:41:ff:33:0f:
ca:ab:40:5e:2f:f7:97:b9:ef:bc:6a:de:25:45:e0:0e:c9:4a:
f5:94:4b:d1:97:62:9e:ff:47:77:7c:8a:95:68:1c:bb:5a:24:
95:3d:b6:0b:40:f0:1e:cc:48:17:e7:f6:a2:04:33:f5:3e:bd:
62:a2:77:04:5e:74:92:4c:ee:c4:f2:9d:5e:07:75:a1:c4:ee:
be:c4:8c:53:0c:f5:cf:d3:d2:73:bf:88:71:77:13:41:08:5a:
81:36:d1:d5:94:7f:cc:02:fe:f8:ff:9a:80:97:f9:31:07:ae:
58:6c:2c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:31:47 2026 by rpki-client