Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/Booj1ASQ-cXKqkh-r2x7fAQ_0Uw.roa
File: Booj1ASQ-cXKqkh-r2x7fAQ_0Uw.roa (raw, json)
Hash identifier: zF9nqvpnqLrzZFWAUgKZQIRUSTlgxgEW6M1SkVs+U8w=
Subject key identifier: 06:8A:23:D4:04:90:F9:C5:CA:AA:48:7E:AF:6C:7B:7C:04:3F:D1:4C
Certificate issuer: /CN=0bfa7348d6c1d7186328328720730f684fa20edc
Certificate serial: 019E1AF83D3193FBC66F58A85E752F8559D2
Authority key identifier: 0B:FA:73:48:D6:C1:D7:18:63:28:32:87:20:73:0F:68:4F:A2:0E:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/Booj1ASQ-cXKqkh-r2x7fAQ_0Uw.roa
Signing time: Tue 12 May 2026 06:55:36 +0000
ROA not before: Tue 12 May 2026 06:55:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13208
IP address blocks: 81.20.176.0/20 maxlen: 24
159.255.208.0/21 maxlen: 24
185.57.212.0/22 maxlen: 22
213.133.193.0/24 maxlen: 24
213.133.194.0/24 maxlen: 24
213.133.195.0/24 maxlen: 24
213.133.196.0/24 maxlen: 24
213.133.197.0/24 maxlen: 24
213.133.198.0/24 maxlen: 24
213.133.199.0/24 maxlen: 24
213.133.201.0/24 maxlen: 24
213.133.202.0/24 maxlen: 24
213.133.203.0/24 maxlen: 24
213.133.207.0/24 maxlen: 24
213.133.208.0/22 maxlen: 22
213.133.213.0/24 maxlen: 24
213.133.214.0/24 maxlen: 24
213.133.215.0/24 maxlen: 24
213.133.216.0/24 maxlen: 24
213.133.217.0/24 maxlen: 24
213.133.218.0/24 maxlen: 24
213.133.219.0/24 maxlen: 24
213.133.220.0/24 maxlen: 24
213.133.221.0/24 maxlen: 24
213.133.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1a:f8:3d:31:93:fb:c6:6f:58:a8:5e:75:2f:85:59:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfa7348d6c1d7186328328720730f684fa20edc
Validity
Not Before: May 12 06:55:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=068a23d40490f9c5caaa487eaf6c7b7c043fd14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ea:08:51:53:ff:a6:90:d6:b2:61:85:2d:46:
4e:88:45:b2:cb:2c:ef:de:c3:8b:86:13:ee:a1:e6:
a3:f6:d5:f7:0e:24:60:9d:27:b3:23:f7:9e:0a:f7:
dd:a2:ec:e6:11:ae:5f:d4:29:00:f8:5c:7e:d6:bd:
8f:25:9f:c1:49:2b:bd:86:27:a1:f0:08:9f:48:eb:
fc:86:fc:33:90:e3:66:17:da:4d:90:be:e2:cd:e3:
b3:1a:bc:ce:b1:0b:cc:77:db:89:75:a5:10:f0:9b:
d5:45:de:08:71:18:13:a4:53:fa:d3:26:a0:08:5a:
38:33:79:76:a9:c4:48:84:40:e5:16:d8:a3:94:08:
e1:3b:97:1a:c1:c7:87:dd:eb:46:62:79:c4:5d:03:
61:20:29:4b:00:cc:1c:e9:3d:a8:42:b5:e7:0d:93:
fc:2e:2d:28:04:63:4e:7d:3b:b6:ea:58:1e:17:02:
2d:2a:1a:84:a0:97:4f:fa:d5:71:00:cd:b3:cc:7c:
dd:17:91:b3:53:88:ae:22:47:a9:0c:cb:eb:43:10:
6e:83:3a:7e:71:b6:6f:9a:3d:08:97:19:de:a9:41:
3e:a9:22:af:ee:56:a8:ee:74:29:8f:6a:23:8d:de:
99:c6:42:21:f0:cc:55:d6:f7:0d:5c:15:43:ca:f8:
d9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:8A:23:D4:04:90:F9:C5:CA:AA:48:7E:AF:6C:7B:7C:04:3F:D1:4C
X509v3 Authority Key Identifier:
keyid:0B:FA:73:48:D6:C1:D7:18:63:28:32:87:20:73:0F:68:4F:A2:0E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_pzSNbB1xhjKDKHIHMPaE-iDtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/Booj1ASQ-cXKqkh-r2x7fAQ_0Uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1e2a0e-9514-4d70-903d-85706645e734/1/C_pzSNbB1xhjKDKHIHMPaE-iDtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.20.176.0/20
159.255.208.0/21
185.57.212.0/22
213.133.193.0-213.133.199.255
213.133.201.0-213.133.203.255
213.133.207.0-213.133.211.255
213.133.213.0-213.133.221.255
213.133.223.0/24
Signature Algorithm: sha256WithRSAEncryption
55:26:e1:7b:9a:1b:1f:58:ad:75:eb:c9:78:e4:50:0f:62:f2:
90:bd:b8:2a:ff:c9:45:e0:d6:35:34:44:17:d7:07:ee:de:a6:
2e:50:46:0e:ea:7e:aa:b2:8f:30:56:2b:ac:04:52:cf:63:54:
ff:3b:bf:81:27:6f:b1:77:b2:db:3e:ef:21:dd:0b:ce:3b:9a:
bc:7c:73:d8:8b:97:dd:1d:3e:52:a6:f7:14:aa:08:5b:09:eb:
dc:3d:76:2a:55:d2:41:73:97:0d:3e:4f:35:cf:89:21:1b:2f:
db:75:33:14:fb:a3:f8:db:86:b3:c8:5c:65:2c:82:b2:c6:f8:
7d:66:d2:7c:68:92:db:84:26:9e:cc:41:b8:f3:92:31:72:ce:
ac:d7:60:c3:0d:17:a5:52:ba:ee:32:85:bc:1e:08:3a:32:be:
95:f1:95:d3:db:46:56:c8:d6:91:cb:8b:4c:6f:3b:6e:c7:b3:
90:10:64:57:20:bf:bb:1a:41:88:12:93:34:f3:ce:de:da:3d:
6f:4e:20:47:6f:7d:76:d0:ed:59:90:a6:50:f3:74:34:c3:6b:
fa:eb:b9:3f:fa:7d:27:ec:0d:93:16:cc:28:46:cb:ce:e6:cd:
8d:f6:4c:5b:d4:ec:6d:e9:66:0c:29:19:ef:84:54:be:ac:85:
97:e9:21:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:41:09 2026 by rpki-client