Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/BvgqH8EAXVWJotlokwrOIHxbYAE.roa
File: BvgqH8EAXVWJotlokwrOIHxbYAE.roa (raw, json)
Hash identifier: CGihJpuAyd/wpD77regwALXMCxjzHShjZBJCu5oF9Vw=
Subject key identifier: 06:F8:2A:1F:C1:00:5D:55:89:A2:D9:68:93:0A:CE:20:7C:5B:60:01
Certificate issuer: /CN=ea4ad934118e6526c894f469f86aa320c13e08f4
Certificate serial: 019F236928FD11DD96112D1ED9B185A1D918
Authority key identifier: EA:4A:D9:34:11:8E:65:26:C8:94:F4:69:F8:6A:A3:20:C1:3E:08:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6krZNBGOZSbIlPRp-GqjIME-CPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/BvgqH8EAXVWJotlokwrOIHxbYAE.roa
Signing time: Thu 02 Jul 2026 15:18:41 +0000
ROA not before: Thu 02 Jul 2026 15:18:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21226
IP address blocks: 80.91.192.0/21 maxlen: 21
80.91.200.0/22 maxlen: 22
80.91.204.0/24 maxlen: 24
80.91.206.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/6krZNBGOZSbIlPRp-GqjIME-CPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/6krZNBGOZSbIlPRp-GqjIME-CPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6krZNBGOZSbIlPRp-GqjIME-CPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:28:fd:11:dd:96:11:2d:1e:d9:b1:85:a1:d9:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea4ad934118e6526c894f469f86aa320c13e08f4
Validity
Not Before: Jul 2 15:18:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06f82a1fc1005d5589a2d968930ace207c5b6001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:10:f6:20:95:cc:2c:6a:d1:03:ae:29:02:2c:
db:5c:a6:08:0e:b4:9a:d3:8c:4f:28:f0:6f:f2:ef:
41:1a:6d:35:b2:05:e6:5f:9e:99:95:fa:46:00:8e:
54:50:47:82:6a:17:70:e2:8a:5c:e0:1c:c6:5e:e3:
2d:4e:77:f3:7f:fd:1f:30:39:1f:39:e9:a2:82:cb:
cd:a0:3e:c0:36:20:c5:1a:1e:ca:67:f9:f3:b1:49:
52:46:ce:f3:86:36:d0:8e:02:21:1a:32:22:66:20:
16:bb:29:b6:56:48:8a:5a:72:71:de:26:57:ea:81:
ca:df:4a:0a:87:87:20:32:78:b1:fd:ea:d8:db:73:
2c:21:99:ce:50:0e:bf:a3:b4:4d:b0:ae:ef:20:ae:
ff:42:53:c8:a5:0a:05:26:95:6a:ad:80:1c:84:27:
2f:b8:2c:1b:f9:5b:a7:50:4f:35:a9:c7:a0:37:6c:
bd:a5:7c:59:b5:e2:b1:3b:f5:25:81:18:af:f2:e1:
fa:b8:c1:af:be:9a:4b:ef:2f:d1:3b:96:d1:e7:36:
3c:91:ed:89:4a:1a:ba:61:e3:93:9a:e4:58:ad:40:
c8:67:09:d8:fd:5a:30:db:e3:31:7f:fe:bd:1c:7a:
cd:79:0b:39:fc:36:6d:6d:45:12:4c:de:3d:55:e7:
ae:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F8:2A:1F:C1:00:5D:55:89:A2:D9:68:93:0A:CE:20:7C:5B:60:01
X509v3 Authority Key Identifier:
keyid:EA:4A:D9:34:11:8E:65:26:C8:94:F4:69:F8:6A:A3:20:C1:3E:08:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6krZNBGOZSbIlPRp-GqjIME-CPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/BvgqH8EAXVWJotlokwrOIHxbYAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/634172-bb37-4d82-88a2-942d2c6c5856/1/6krZNBGOZSbIlPRp-GqjIME-CPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.192.0-80.91.204.255
80.91.206.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:67:c5:e1:1d:6a:85:e3:40:6a:58:c5:13:b2:18:ad:13:4d:
15:7f:66:1c:bc:af:fb:d8:79:44:4e:a5:cd:ae:3d:38:f6:e2:
05:3d:5c:80:b1:d4:0d:cb:31:0f:77:09:2d:7a:90:ca:29:b3:
70:51:b9:63:ce:25:49:55:79:0e:87:20:5f:07:f2:8f:1c:36:
22:10:90:38:69:42:8f:54:dd:5c:6e:34:f4:c5:05:97:62:19:
ec:8e:4e:c0:d2:f1:b4:c4:27:75:d5:b3:db:88:fc:db:bb:26:
5d:d2:76:61:06:bf:76:13:e5:0e:5c:87:04:1a:06:1a:a1:20:
d3:34:fb:9e:76:26:d6:3e:5a:15:5a:18:af:ec:ff:35:13:c5:
b0:19:3e:26:5a:16:6f:b8:f3:7e:3a:87:28:cd:af:ed:cc:43:
9d:6c:4a:ea:9f:f7:76:5c:af:27:e4:33:87:1e:8c:9f:d1:8d:
53:ae:be:97:da:bd:ca:e9:f6:c4:20:aa:7a:96:80:a7:57:2b:
df:b7:e2:23:03:13:b0:c1:94:77:2f:06:c0:c1:65:bc:92:10:
10:bd:d8:49:7b:45:6e:a6:e1:bf:0a:e4:ff:e6:93:8d:a9:8b:
e2:c1:94:3a:81:aa:62:c7:e6:9e:9e:b3:45:5e:b5:ab:ef:b5:
f7:dd:5c:ad
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZ8jaSj9Ed2WES0e2bGFodkYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNGFkOTM0MTE4ZTY1MjZjODk0ZjQ2OWY4NmFhMzIwYzEz
ZTA4ZjQwHhcNMjYwNzAyMTUxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNmY4MmExZmMxMDA1ZDU1ODlhMmQ5Njg5MzBhY2UyMDdjNWI2MDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xD2IJXMLGrRA64pAizbXKYIDrSa
04xPKPBv8u9BGm01sgXmX56ZlfpGAI5UUEeCahdw4opc4BzGXuMtTnfzf/0fMDkf
OemigsvNoD7ANiDFGh7KZ/nzsUlSRs7zhjbQjgIhGjIiZiAWuym2VkiKWnJx3iZX
6oHK30oKh4cgMnix/erY23MsIZnOUA6/o7RNsK7vIK7/QlPIpQoFJpVqrYAchCcv
uCwb+VunUE81qcegN2y9pXxZteKxO/UlgRiv8uH6uMGvvppL7y/RO5bR5zY8ke2J
Shq6YeOTmuRYrUDIZwnY/Vow2+Mxf/69HHrNeQs5/DZtbUUSTN49VeeuqQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFAb4Kh/BAF1ViaLZaJMKziB8W2ABMB8GA1UdIwQY
MBaAFOpK2TQRjmUmyJT0afhqoyDBPgj0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmtyWk5CR09aU2JJbFBScC1HcWpJTUUtQ1BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC82MzQxNzItYmIzNy00ZDgyLTg4YTIt
OTQyZDJjNmM1ODU2LzEvQnZncUg4RUFYVldKb3Rsb2t3ck9JSHhiWUFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC82MzQxNzItYmIzNy00ZDgyLTg4YTItOTQyZDJjNmM1ODU2
LzEvNmtyWk5CR09aU2JJbFBScC1HcWpJTUUtQ1BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAZQW8AD
BABQW8wDBAFQW84wDQYJKoZIhvcNAQELBQADggEBAB5nxeEdaoXjQGpYxROyGK0T
TRV/Zhy8r/vYeUROpc2uPTj24gU9XICx1A3LMQ93CS16kMops3BRuWPOJUlVeQ6H
IF8H8o8cNiIQkDhpQo9U3VxuNPTFBZdiGeyOTsDS8bTEJ3XVs9uI/Nu7Jl3SdmEG
v3YT5Q5chwQaBhqhINM0+552JtY+WhVaGK/s/zUTxbAZPiZaFm+48346hyjNr+3M
Q51sSuqf93ZcryfkM4cejJ/RjVOuvpfavcrp9sQgqnqWgKdXK9+34iMDE7DBlHcv
BsDBZbySEBC92El7RW6m4b8K5P/mk42pi+LBlDqBqmLH5p6es0VetavvtffdXK0=
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:26:55 2026 by rpki-client