Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/BkqDRw1iz5sXxEobDQ8sSl8fZ-Q.roa
File: BkqDRw1iz5sXxEobDQ8sSl8fZ-Q.roa (raw, json)
Hash identifier: ImpBJmFAicVZe4FyuclessqektskyarT3dkjgbIAApc=
Subject key identifier: 06:4A:83:47:0D:62:CF:9B:17:C4:4A:1B:0D:0F:2C:4A:5F:1F:67:E4
Certificate issuer: /CN=ac1f721b7b7e6d049fbfe520e1ca89c1ca256813
Certificate serial: 019F69EADB18E73C6221F6DAE1ED4ADCB33F
Authority key identifier: AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/BkqDRw1iz5sXxEobDQ8sSl8fZ-Q.roa
Signing time: Thu 16 Jul 2026 07:53:46 +0000
ROA not before: Thu 16 Jul 2026 07:53:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39251
IP address blocks: 77.76.16.0/20 maxlen: 20
77.76.16.0/24 maxlen: 24
91.92.72.0/21 maxlen: 24
91.92.80.0/20 maxlen: 24
91.92.96.0/21 maxlen: 24
91.207.190.0/23 maxlen: 23
91.207.190.0/24 maxlen: 24
91.207.191.0/24 maxlen: 24
91.223.66.0/24 maxlen: 24
91.245.192.0/24 maxlen: 24
185.163.140.0/22 maxlen: 24
185.225.84.0/22 maxlen: 24
185.229.252.0/22 maxlen: 24
193.37.238.0/24 maxlen: 24
194.169.223.0/24 maxlen: 24
194.169.230.0/24 maxlen: 24
194.169.237.0/24 maxlen: 24
194.169.242.0/24 maxlen: 24
195.238.84.0/23 maxlen: 23
195.238.84.0/24 maxlen: 24
195.238.85.0/24 maxlen: 24
212.70.140.0/24 maxlen: 24
212.70.141.0/24 maxlen: 24
213.232.88.0/22 maxlen: 24
2a0b:f800::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:69:ea:db:18:e7:3c:62:21:f6:da:e1:ed:4a:dc:b3:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac1f721b7b7e6d049fbfe520e1ca89c1ca256813
Validity
Not Before: Jul 16 07:53:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=064a83470d62cf9b17c44a1b0d0f2c4a5f1f67e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a4:bf:98:fe:d7:b1:ce:be:71:f8:76:ee:6e:
85:77:71:0c:d8:02:e3:c6:8f:b2:aa:59:e8:c1:d9:
c0:38:46:b8:b7:f4:b9:d8:fd:21:70:fb:1a:c2:6c:
24:42:a2:73:8d:ad:83:28:01:c3:19:85:b3:b9:25:
1d:a6:bf:23:7b:a5:35:12:57:7b:79:5e:bf:5e:d1:
28:76:7d:1b:64:2d:e3:dc:a2:f1:69:85:49:5d:96:
14:4d:ab:8b:29:e8:3d:5f:36:80:47:53:c1:06:7d:
7e:ce:8f:d7:67:02:bb:c3:e0:35:75:63:e4:75:1c:
2d:15:ce:53:06:68:2e:2a:89:32:bf:93:a8:2f:ec:
af:fd:46:f8:8e:2f:49:ec:6d:ec:cf:07:93:68:23:
00:8d:82:00:82:86:92:50:cb:1d:79:22:30:7a:3d:
31:ca:f4:84:dd:ac:45:fe:53:5a:0e:cc:2e:97:fe:
f7:8d:ac:e5:06:0e:03:5c:30:9d:ee:a3:91:58:35:
41:f9:60:f8:f3:fa:77:49:3f:17:e2:28:ad:02:c6:
be:50:f5:fc:40:48:f0:d3:b3:e5:9a:e7:63:05:0b:
2e:87:92:6e:9a:b0:25:fb:44:68:89:be:1b:22:7e:
d5:98:47:83:c2:64:71:ee:40:5b:1a:3d:11:42:f2:
fa:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4A:83:47:0D:62:CF:9B:17:C4:4A:1B:0D:0F:2C:4A:5F:1F:67:E4
X509v3 Authority Key Identifier:
keyid:AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/BkqDRw1iz5sXxEobDQ8sSl8fZ-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.76.16.0/20
91.92.72.0-91.92.103.255
91.207.190.0/23
91.223.66.0/24
91.245.192.0/24
185.163.140.0/22
185.225.84.0/22
185.229.252.0/22
193.37.238.0/24
194.169.223.0/24
194.169.230.0/24
194.169.237.0/24
194.169.242.0/24
195.238.84.0/23
212.70.140.0/23
213.232.88.0/22
IPv6:
2a0b:f800::/32
Signature Algorithm: sha256WithRSAEncryption
b6:47:2f:25:39:a5:25:e8:32:1e:fe:27:4e:e3:d5:81:de:4a:
1d:e2:36:ec:02:c0:ad:ac:90:28:65:ff:48:4c:a4:42:96:c1:
47:db:48:ab:72:f4:1c:65:ad:51:bc:a9:54:ba:33:29:f8:61:
24:6b:6d:cb:00:07:bc:cf:e9:32:26:dc:42:4a:0c:40:83:8e:
e4:0f:d2:f4:69:5f:8f:44:d3:f1:f4:82:3c:3b:6a:8e:3c:9e:
ec:7c:5a:6d:9d:4e:6a:a9:23:ce:9b:83:10:2d:8f:74:3b:b0:
c0:e1:91:cc:71:20:c9:2c:bd:6b:85:45:ac:fe:32:06:f6:e5:
71:e1:8e:1e:d9:b6:13:7f:a6:ef:a1:72:39:35:e6:23:d1:eb:
bb:6f:cf:6c:d4:67:c9:25:a8:22:b0:b7:84:4c:a5:ba:7c:96:
1e:fe:ce:36:21:a7:8e:d2:fe:f1:71:c5:5e:b8:9e:61:f9:cb:
c7:00:90:30:79:5f:c4:67:e8:09:55:c6:65:29:a1:d9:5c:02:
86:59:ed:55:a8:ac:26:7c:5b:8f:f0:7d:98:57:4a:ed:ff:75:
87:a4:46:bd:93:d6:f1:fb:a6:3d:b7:07:41:30:ec:07:da:86:
56:5d:13:1c:53:3b:80:cc:7f:96:d1:96:59:c5:38:d1:85:26:
31:86:9c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:19 2026 by rpki-client