Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/BVJvwz2lh6qW2nCUQKTYIFcAKjQ.roa
File: BVJvwz2lh6qW2nCUQKTYIFcAKjQ.roa (raw, json)
Hash identifier: kaLfha+ZH+y5bWDO7gX0LkZS212RgAQ6Anv4ur63M5s=
Subject key identifier: 05:52:6F:C3:3D:A5:87:AA:96:DA:70:94:40:A4:D8:20:57:00:2A:34
Certificate issuer: /CN=d5f3cc7ab0d3648b8cbe76253533a714ba009c03
Certificate serial: 019F2368683124C409470445846E8B5F079F
Authority key identifier: D5:F3:CC:7A:B0:D3:64:8B:8C:BE:76:25:35:33:A7:14:BA:00:9C:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fPMerDTZIuMvnYlNTOnFLoAnAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/BVJvwz2lh6qW2nCUQKTYIFcAKjQ.roa
Signing time: Thu 02 Jul 2026 15:17:52 +0000
ROA not before: Thu 02 Jul 2026 15:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199494
IP address blocks: 83.142.216.0/22 maxlen: 22
83.142.220.0/22 maxlen: 22
91.201.88.0/22 maxlen: 22
176.115.80.0/21 maxlen: 21
193.0.192.0/22 maxlen: 22
193.0.196.0/24 maxlen: 24
193.0.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/1fPMerDTZIuMvnYlNTOnFLoAnAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/1fPMerDTZIuMvnYlNTOnFLoAnAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fPMerDTZIuMvnYlNTOnFLoAnAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:68:31:24:c4:09:47:04:45:84:6e:8b:5f:07:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f3cc7ab0d3648b8cbe76253533a714ba009c03
Validity
Not Before: Jul 2 15:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05526fc33da587aa96da709440a4d82057002a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f0:50:25:44:ec:db:5a:34:46:98:fa:e7:0e:
e4:5a:d4:48:1c:51:cf:ba:bf:66:e8:be:03:22:ff:
69:e7:29:89:81:61:6e:9c:8a:2a:37:33:93:f6:7f:
fa:5d:0f:96:2d:74:45:61:4a:9c:fe:17:a4:4c:3a:
9b:95:7b:21:39:43:99:2c:0c:34:5e:6d:12:73:92:
6b:be:9f:b0:c8:7a:dd:eb:aa:45:f2:68:d1:69:a4:
eb:cf:cb:cf:c6:ef:32:b3:27:f7:04:85:e1:87:19:
47:40:be:ed:f6:0a:00:8a:92:50:e1:24:b6:fb:b3:
99:3f:03:52:58:dc:31:5f:19:b9:5e:52:78:14:cd:
fa:59:16:71:58:85:0c:22:fe:19:c4:95:31:45:25:
49:70:df:04:47:e3:36:1b:7b:74:d4:43:23:1a:f5:
72:1e:24:77:68:44:4c:34:f6:28:34:93:98:e8:90:
c3:95:f2:5f:5f:12:c9:da:78:9c:7a:e7:a5:1c:72:
dd:31:1e:2b:5b:aa:f2:a3:0b:d6:6f:5b:7d:d0:c4:
6b:22:9d:44:c8:7a:6c:f4:40:77:62:8d:c7:8c:86:
ed:90:c7:c8:bd:31:c6:e2:ab:0d:4e:42:25:ba:11:
98:04:dc:21:a2:70:2e:0c:7e:ad:cb:b6:a5:a9:f8:
12:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:52:6F:C3:3D:A5:87:AA:96:DA:70:94:40:A4:D8:20:57:00:2A:34
X509v3 Authority Key Identifier:
keyid:D5:F3:CC:7A:B0:D3:64:8B:8C:BE:76:25:35:33:A7:14:BA:00:9C:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fPMerDTZIuMvnYlNTOnFLoAnAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/BVJvwz2lh6qW2nCUQKTYIFcAKjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/869325-12c2-4fc0-b19b-0a1d4c022e51/1/1fPMerDTZIuMvnYlNTOnFLoAnAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.142.216.0/21
91.201.88.0/22
176.115.80.0/21
193.0.192.0-193.0.197.255
Signature Algorithm: sha256WithRSAEncryption
6b:f3:0f:03:8e:cb:bb:c1:18:61:1e:4d:23:64:27:b1:4b:de:
a2:81:82:56:d2:ac:b7:36:fe:e1:a6:eb:30:ff:0f:b0:13:d2:
cb:36:69:b2:c1:8f:3d:e6:70:96:38:59:77:25:75:54:31:76:
4f:c6:81:e0:5f:37:f0:d1:0b:ea:b3:68:ef:82:f4:8e:e8:61:
85:3a:e5:6a:51:be:f0:53:83:13:9e:e2:3c:54:a1:ac:39:66:
69:95:ae:18:69:13:b2:3f:5e:4d:98:22:22:27:92:2e:e2:51:
d0:9b:8f:21:b1:2e:c6:eb:f5:2d:4d:47:2b:b9:f9:bc:90:15:
34:89:64:e5:aa:5c:88:a2:4a:b2:63:0d:5c:1f:ea:07:57:a5:
03:1e:cf:84:11:cc:30:e0:9a:9c:a5:88:14:cf:4f:30:7a:6b:
31:61:c0:8f:ed:d1:29:16:34:b0:3b:5a:aa:9c:aa:39:13:2f:
ca:13:a1:98:e5:d1:8d:53:55:ef:12:82:46:46:6c:60:5f:a6:
ab:21:79:0a:52:ef:20:48:ed:1a:80:0f:01:12:d2:6e:58:9f:
ae:f4:a3:35:e9:b9:71:56:25:65:bb:b9:43:bd:45:22:d1:57:
ed:db:7e:64:fc:b1:21:d0:e6:0b:17:f0:1e:76:ac:69:e5:cc:
f9:91:ea:fb
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZ8jaGgxJMQJRwRFhG6LXwefMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZjNjYzdhYjBkMzY0OGI4Y2JlNzYyNTM1MzNhNzE0YmEw
MDljMDMwHhcNMjYwNzAyMTUxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTUyNmZjMzNkYTU4N2FhOTZkYTcwOTQ0MGE0ZDgyMDU3MDAyYTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1PBQJUTs21o0Rpj65w7kWtRIHFHP
ur9m6L4DIv9p5ymJgWFunIoqNzOT9n/6XQ+WLXRFYUqc/hekTDqblXshOUOZLAw0
Xm0Sc5Jrvp+wyHrd66pF8mjRaaTrz8vPxu8ysyf3BIXhhxlHQL7t9goAipJQ4SS2
+7OZPwNSWNwxXxm5XlJ4FM36WRZxWIUMIv4ZxJUxRSVJcN8ER+M2G3t01EMjGvVy
HiR3aERMNPYoNJOY6JDDlfJfXxLJ2niceuelHHLdMR4rW6ryowvWb1t90MRrIp1E
yHps9EB3Yo3HjIbtkMfIvTHG4qsNTkIluhGYBNwhonAuDH6ty7alqfgSjwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFAVSb8M9pYeqltpwlECk2CBXACo0MB8GA1UdIwQY
MBaAFNXzzHqw02SLjL52JTUzpxS6AJwDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWZQTWVyRFRaSXVNdm5ZbE5UT25GTG9BbkFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS84NjkzMjUtMTJjMi00ZmMwLWIxOWIt
MGExZDRjMDIyZTUxLzEvQlZKdnd6MmxoNnFXMm5DVVFLVFlJRmNBS2pRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS84NjkzMjUtMTJjMi00ZmMwLWIxOWItMGExZDRjMDIyZTUx
LzEvMWZQTWVyRFRaSXVNdm5ZbE5UT25GTG9BbkFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQDU47YAwQC
W8lYAwQDsHNQMAwDBAbBAMADBAHBAMQwDQYJKoZIhvcNAQELBQADggEBAGvzDwOO
y7vBGGEeTSNkJ7FL3qKBglbSrLc2/uGm6zD/D7AT0ss2abLBjz3mcJY4WXcldVQx
dk/GgeBfN/DRC+qzaO+C9I7oYYU65WpRvvBTgxOe4jxUoaw5ZmmVrhhpE7I/Xk2Y
IiInki7iUdCbjyGxLsbr9S1NRyu5+byQFTSJZOWqXIiiSrJjDVwf6gdXpQMez4QR
zDDgmpyliBTPTzB6azFhwI/t0SkWNLA7WqqcqjkTL8oToZjl0Y1TVe8SgkZGbGBf
pqsheQpS7yBI7RqADwES0m5Yn670ozXpuXFWJWW7uUO9RSLRV+3bfmT8sSHQ5gsX
8B52rGnlzPmR6vs=
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:48:37 2026 by rpki-client