Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/BOGoFgwnR582QadwWvkqHAe6qVI.roa
File: BOGoFgwnR582QadwWvkqHAe6qVI.roa (raw, json)
Hash identifier: oircMKRintaHw6lUQ07pz+tVKLYa1YRVcLBCoNJ37p0=
Subject key identifier: 04:E1:A8:16:0C:27:47:9F:36:41:A7:70:5A:F9:2A:1C:07:BA:A9:52
Certificate issuer: /CN=ec97b72d5d4f750f1b138c2a901dd6510921be41
Certificate serial: 019EF8B1FFDD4B6CF5D24A254A7D0A19869D
Authority key identifier: EC:97:B7:2D:5D:4F:75:0F:1B:13:8C:2A:90:1D:D6:51:09:21:BE:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/BOGoFgwnR582QadwWvkqHAe6qVI.roa
Signing time: Wed 24 Jun 2026 08:14:35 +0000
ROA not before: Wed 24 Jun 2026 08:14:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21080
IP address blocks: 185.76.160.0/22 maxlen: 22
195.85.237.0/24 maxlen: 24
2001:67c:253c::/48 maxlen: 48
2a05:5a80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:b1:ff:dd:4b:6c:f5:d2:4a:25:4a:7d:0a:19:86:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec97b72d5d4f750f1b138c2a901dd6510921be41
Validity
Not Before: Jun 24 08:14:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04e1a8160c27479f3641a7705af92a1c07baa952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:56:67:b0:07:10:88:98:db:f0:72:e4:3b:81:
40:da:57:75:d0:fe:5c:73:0a:9c:d8:93:3d:a2:cb:
84:45:95:ab:92:ef:dc:8a:d9:a3:3a:5d:4e:b6:5d:
e5:27:59:e4:50:26:3c:ea:87:82:5b:4e:0a:16:b1:
1a:9b:ad:e1:dc:7f:e4:68:8c:84:ae:6c:83:0b:19:
e3:90:e2:0b:56:92:ba:d8:3c:a6:89:ac:dc:94:37:
ac:ba:83:ca:7d:89:b7:42:02:52:93:af:8f:5a:61:
88:e7:3e:43:12:c7:85:25:ec:d1:19:0d:fd:9a:7a:
80:14:60:c7:e0:35:a3:68:89:75:31:f7:59:f4:f6:
06:ca:fc:fc:45:59:96:aa:21:b3:ee:c9:13:45:f9:
a5:37:de:a2:5e:87:43:79:4f:8d:83:dd:4d:75:18:
69:c2:49:82:d2:39:18:b4:34:df:19:4f:fc:d6:40:
9e:d7:30:a2:e9:29:a3:d8:a9:52:24:0b:57:2f:c5:
cc:71:64:0e:51:3d:0f:19:f3:fa:8c:6b:80:fe:aa:
2b:ec:69:51:4b:cf:f3:76:f0:84:18:56:3c:30:8c:
9c:5a:fc:5c:83:c6:6f:49:0f:1b:79:a7:aa:9b:92:
97:af:fc:af:64:8b:9a:45:ff:c5:3a:8b:40:02:ac:
2a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E1:A8:16:0C:27:47:9F:36:41:A7:70:5A:F9:2A:1C:07:BA:A9:52
X509v3 Authority Key Identifier:
keyid:EC:97:B7:2D:5D:4F:75:0F:1B:13:8C:2A:90:1D:D6:51:09:21:BE:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/BOGoFgwnR582QadwWvkqHAe6qVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ef9860-2658-44df-b172-8066fa21241a/1/7Je3LV1PdQ8bE4wqkB3WUQkhvkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.160.0/22
195.85.237.0/24
IPv6:
2001:67c:253c::/48
2a05:5a80::/29
Signature Algorithm: sha256WithRSAEncryption
74:80:74:67:82:cd:fc:1b:48:d5:67:c0:97:bb:ab:d9:f0:08:
eb:53:96:6c:8c:54:5f:23:22:d2:57:3a:45:56:ac:ba:d9:4e:
d1:31:ab:10:77:44:cb:7d:4f:3c:66:29:e7:61:f8:68:da:b7:
90:d3:34:4b:7a:72:f7:99:cc:89:50:a8:8c:21:7b:3b:b6:bf:
08:a9:a2:56:c6:e1:e0:e2:f5:2c:7e:5b:da:08:4c:1a:06:51:
2f:db:a3:b8:b6:ba:04:69:eb:6c:4f:ff:ca:b1:e5:68:11:08:
dc:20:38:5e:a0:14:8e:28:31:52:b9:24:39:f6:ca:6f:5f:3e:
fb:43:0e:39:18:02:cb:9f:49:b0:8f:d8:e7:b2:62:f0:be:ca:
8a:c3:d1:ad:d1:09:5b:53:1e:b2:57:86:bd:b0:4c:48:92:cf:
cf:b7:15:7a:8e:d1:20:6c:38:43:ba:4c:4a:1b:b6:52:a8:77:
c7:3c:5d:6d:96:0c:54:a0:9b:34:ea:31:8c:70:d9:f6:8c:ac:
47:3b:4e:71:57:e4:8a:e2:91:a4:3d:23:0d:6c:a8:21:97:21:
63:a2:a7:eb:3d:48:44:ce:22:42:e4:25:73:72:90:8e:ff:a0:
e8:28:65:1c:9f:76:29:63:4c:96:1f:bc:39:47:d3:ae:ea:81:
f7:bb:10:6e
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZ74sf/dS2z10kolSn0KGYadMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjOTdiNzJkNWQ0Zjc1MGYxYjEzOGMyYTkwMWRkNjUxMDky
MWJlNDEwHhcNMjYwNjI0MDgxNDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNGUxYTgxNjBjMjc0NzlmMzY0MWE3NzA1YWY5MmExYzA3YmFhOTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFZnsAcQiJjb8HLkO4FA2ld10P5c
cwqc2JM9osuERZWrku/citmjOl1Otl3lJ1nkUCY86oeCW04KFrEam63h3H/kaIyE
rmyDCxnjkOILVpK62DymiazclDesuoPKfYm3QgJSk6+PWmGI5z5DEseFJezRGQ39
mnqAFGDH4DWjaIl1MfdZ9PYGyvz8RVmWqiGz7skTRfmlN96iXodDeU+Ng91NdRhp
wkmC0jkYtDTfGU/81kCe1zCi6Smj2KlSJAtXL8XMcWQOUT0PGfP6jGuA/qor7GlR
S8/zdvCEGFY8MIycWvxcg8ZvSQ8beaeqm5KXr/yvZIuaRf/FOotAAqwq5QIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFAThqBYMJ0efNkGncFr5KhwHuqlSMB8GA1UdIwQY
MBaAFOyXty1dT3UPGxOMKpAd1lEJIb5BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0plM0xWMVBkUThiRTR3cWtCM1dVUWtodmtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lZjk4NjAtMjY1OC00NGRmLWIxNzIt
ODA2NmZhMjEyNDFhLzEvQk9Hb0Znd25SNTgyUWFkd1d2a3FIQWU2cVZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9lZjk4NjAtMjY1OC00NGRmLWIxNzItODA2NmZhMjEyNDFh
LzEvN0plM0xWMVBkUThiRTR3cWtCM1dVUWtodmtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQCuUygAwQA
w1XtMBYEAgACMBADBwAgAQZ8JTwDBQMqBVqAMA0GCSqGSIb3DQEBCwUAA4IBAQB0
gHRngs38G0jVZ8CXu6vZ8AjrU5ZsjFRfIyLSVzpFVqy62U7RMasQd0TLfU88Zinn
Yfho2reQ0zRLenL3mcyJUKiMIXs7tr8IqaJWxuHg4vUsflvaCEwaBlEv26O4troE
aetsT//KseVoEQjcIDheoBSOKDFSuSQ59spvXz77Qw45GALLn0mwj9jnsmLwvsqK
w9Gt0QlbUx6yV4a9sExIks/PtxV6jtEgbDhDukxKG7ZSqHfHPF1tlgxUoJs06jGM
cNn2jKxHO05xV+SK4pGkPSMNbKghlyFjoqfrPUhEziJC5CVzcpCO/6DoKGUcn3Yp
Y0yWH7w5R9Ou6oH3uxBu
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:10:06 2026 by rpki-client