Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/BpAr5U1tYoF4et_LIvOYt8H-BnA.roa
File: BpAr5U1tYoF4et_LIvOYt8H-BnA.roa (raw, json)
Hash identifier: rPRbRZuBsZBj+Whl2UD7knJ+VAT/IDZmAinc3YvAphM=
Subject key identifier: 06:90:2B:E5:4D:6D:62:81:78:7A:DF:CB:22:F3:98:B7:C1:FE:06:70
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A11BE4926967C094D50A3D58DB0BBA2CF7
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/BpAr5U1tYoF4et_LIvOYt8H-BnA.roa
Signing time: Thu 08 Oct 2026 14:22:06 +0000
ROA not before: Thu 08 Oct 2026 14:22:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 62.132.2.0/24 maxlen: 24
62.132.116.0/24 maxlen: 24
77.67.11.0/24 maxlen: 24
77.67.27.0/24 maxlen: 24
77.67.31.0/24 maxlen: 24
194.77.26.0/24 maxlen: 24
194.77.70.0/24 maxlen: 24
194.77.186.0/24 maxlen: 24
194.122.79.0/24 maxlen: 24
195.21.129.0/24 maxlen: 24
195.21.144.0/24 maxlen: 24
195.21.146.0/24 maxlen: 24
212.189.24.0/24 maxlen: 24
212.189.48.0/24 maxlen: 24
212.189.88.0/24 maxlen: 24
212.189.104.0/24 maxlen: 24
212.222.112.0/24 maxlen: 24
212.222.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 12:40:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:e4:92:69:67:c0:94:d5:0a:3d:58:db:0b:ba:2c:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 8 14:22:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06902be54d6d6281787adfcb22f398b7c1fe0670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3f:cb:60:3b:85:9b:64:c7:00:1b:51:b6:27:
54:83:1c:89:0d:a6:c4:7b:97:d4:07:d0:7a:27:81:
9c:75:47:4f:d2:1e:9d:1d:05:b1:76:be:4b:e4:34:
7e:4b:20:2d:f1:3d:92:55:99:32:40:2e:3a:22:79:
6e:ea:cd:78:f5:f5:63:6d:40:10:18:b1:53:cc:8d:
a4:bb:74:4c:cf:a0:7b:b8:40:d4:7d:7d:5e:2c:9e:
49:fd:52:8e:bf:88:05:03:2b:91:1d:fb:40:db:c9:
d6:d0:b7:9f:ee:a5:cf:25:2b:ea:c4:dc:21:87:88:
a9:38:af:5d:7f:68:6c:c7:83:07:d6:dc:c5:5d:7f:
79:b7:5c:db:77:da:7d:82:3b:64:2f:90:51:74:49:
a9:55:83:c0:ec:40:07:08:be:0c:2a:ad:7d:78:16:
9b:ab:c5:f1:55:30:84:45:dc:34:6b:05:6e:85:1e:
a2:57:a8:f3:fd:b5:b4:df:a4:6d:48:e3:89:58:47:
81:01:6c:c1:d4:d1:52:ab:ce:bd:d7:43:eb:b6:aa:
48:6e:56:86:7a:b0:f6:8a:07:ab:71:4d:3e:8c:23:
81:87:c3:8b:ae:fe:84:c4:da:aa:d9:d8:ff:48:ae:
da:a7:bd:f2:4f:56:c9:2d:c8:5d:0a:a6:64:70:24:
37:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:90:2B:E5:4D:6D:62:81:78:7A:DF:CB:22:F3:98:B7:C1:FE:06:70
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/BpAr5U1tYoF4et_LIvOYt8H-BnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.132.2.0/24
62.132.116.0/24
77.67.11.0/24
77.67.27.0/24
77.67.31.0/24
194.77.26.0/24
194.77.70.0/24
194.77.186.0/24
194.122.79.0/24
195.21.129.0/24
195.21.144.0/24
195.21.146.0/24
212.189.24.0/24
212.189.48.0/24
212.189.88.0/24
212.189.104.0/24
212.222.112.0/24
212.222.170.0/24
Signature Algorithm: sha256WithRSAEncryption
61:e5:05:7a:35:56:52:60:ac:07:27:50:0d:a7:9a:92:b9:d2:
29:33:31:71:f9:ba:da:8f:7d:3a:55:48:a8:72:61:48:74:f3:
a4:e2:b0:f4:4c:63:b9:26:f9:89:57:79:93:58:7d:26:5e:8b:
58:b3:e6:02:6a:6a:dc:f4:ec:a3:63:7e:94:f7:1d:98:15:50:
13:4d:d0:87:a2:76:45:cf:23:b6:92:9e:44:09:18:8a:7a:ef:
16:1f:85:34:0a:be:91:e8:1e:e8:cb:60:61:5d:24:9c:50:d4:
7c:33:dc:5f:af:8c:b2:06:4e:8d:78:15:e7:2b:11:c9:c2:f7:
b9:b0:69:ce:02:82:da:2f:96:dc:b3:8d:c2:7a:c7:5c:b2:42:
90:04:3f:7f:eb:06:3e:4c:7c:7d:c3:1a:c1:bd:be:82:56:dd:
1d:76:b6:a0:8c:8e:2b:db:b4:83:ee:dd:37:5d:4d:47:3c:5a:
e8:b3:3f:14:ad:f8:22:04:d1:43:db:6c:26:40:05:41:2d:24:
20:c6:98:59:5c:1d:b9:fa:5c:c7:9d:03:a0:1e:4d:6b:04:a1:
12:7c:0b:f3:e8:03:f3:f2:4d:9f:7a:03:64:9c:36:dd:8d:12:
71:44:53:cf:26:51:0f:a5:87:f7:af:b5:05:a8:c9:94:66:da:
aa:55:01:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:16:53 2026 by rpki-client