Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/bVwbGhBG_CV5IoXeX_1AI4ewEyM.roa
File: bVwbGhBG_CV5IoXeX_1AI4ewEyM.roa (raw, json)
Hash identifier: +XMoZ7qLxuL8LJi3clBJZFqP7IHlVTCAAs0BMOcjgWs=
Subject key identifier: 6D:5C:1B:1A:10:46:FC:25:79:22:85:DE:5F:FD:40:23:87:B0:13:23
Certificate issuer: /CN=11d17e20422f59b6d8bd2d8307c1d7bfd8f0f584
Certificate serial: 019F236891C28DD88D7F24BA9C5E0980A372
Authority key identifier: 11:D1:7E:20:42:2F:59:B6:D8:BD:2D:83:07:C1:D7:BF:D8:F0:F5:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EdF-IEIvWbbYvS2DB8HXv9jw9YQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/bVwbGhBG_CV5IoXeX_1AI4ewEyM.roa
Signing time: Thu 02 Jul 2026 15:18:03 +0000
ROA not before: Thu 02 Jul 2026 15:18:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39923
IP address blocks: 91.238.219.0/24 maxlen: 24
109.68.0.0/21 maxlen: 21
109.68.160.0/21 maxlen: 21
109.68.160.0/24 maxlen: 24
109.68.161.0/24 maxlen: 24
109.68.162.0/24 maxlen: 24
109.68.163.0/24 maxlen: 24
109.68.164.0/24 maxlen: 24
109.68.165.0/24 maxlen: 24
109.68.166.0/24 maxlen: 24
109.68.167.0/24 maxlen: 24
109.68.240.0/21 maxlen: 21
185.35.164.0/22 maxlen: 22
185.35.164.0/24 maxlen: 24
185.35.165.0/24 maxlen: 24
185.35.166.0/24 maxlen: 24
185.35.167.0/24 maxlen: 24
185.58.96.0/22 maxlen: 22
185.58.96.0/24 maxlen: 24
185.58.97.0/24 maxlen: 24
185.58.98.0/24 maxlen: 24
185.58.99.0/24 maxlen: 24
185.111.204.0/22 maxlen: 22
185.111.204.0/24 maxlen: 24
185.111.205.0/24 maxlen: 24
185.111.206.0/24 maxlen: 24
185.111.207.0/24 maxlen: 24
194.145.127.0/24 maxlen: 24
194.145.152.0/24 maxlen: 24
194.145.155.0/24 maxlen: 24
194.146.23.0/24 maxlen: 24
195.189.202.0/23 maxlen: 23
195.189.202.0/24 maxlen: 24
195.189.203.0/24 maxlen: 24
2a02:2a08::/32 maxlen: 32
2a04:6480::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/EdF-IEIvWbbYvS2DB8HXv9jw9YQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/EdF-IEIvWbbYvS2DB8HXv9jw9YQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/EdF-IEIvWbbYvS2DB8HXv9jw9YQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:91:c2:8d:d8:8d:7f:24:ba:9c:5e:09:80:a3:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11d17e20422f59b6d8bd2d8307c1d7bfd8f0f584
Validity
Not Before: Jul 2 15:18:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d5c1b1a1046fc25792285de5ffd402387b01323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0b:b4:25:49:c3:62:be:83:06:2b:81:6e:5f:
9e:cc:5f:16:86:bc:64:80:c1:13:86:ef:95:b0:24:
b0:dc:76:42:20:d6:36:06:6d:97:1b:4d:ca:93:c9:
14:e5:66:e6:03:a4:21:a2:22:d5:75:ca:62:7d:89:
91:de:1a:9a:36:ea:37:69:b1:71:9a:2e:69:40:90:
5c:e1:4b:08:a5:ca:9f:ff:36:73:6d:39:0e:32:01:
e4:07:9b:b8:5f:62:e3:e4:aa:8a:81:59:74:02:2a:
34:f2:78:5e:98:c3:50:cd:a1:8d:d4:2d:57:c5:0a:
e1:e8:bb:68:88:35:60:7b:fe:33:69:e8:30:b2:37:
63:e5:95:c9:74:d3:cc:ec:22:9a:da:35:20:70:27:
41:26:9e:17:4f:83:bf:d3:d6:19:e5:fb:15:64:1b:
15:49:70:f6:65:29:2b:ee:16:d8:82:83:75:4b:ff:
d5:50:c8:2b:5d:a3:54:1f:7c:22:17:23:a0:e2:cd:
e1:6c:85:71:da:0a:30:9e:bb:16:5b:c7:1d:fc:ff:
22:8c:19:a4:a8:2c:5d:4b:69:ef:1b:ad:a4:9a:be:
01:cd:2d:fd:ac:41:d8:d0:5d:33:54:52:f6:0f:6f:
9a:83:99:f2:52:11:da:49:27:b4:5e:62:45:97:6e:
3e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5C:1B:1A:10:46:FC:25:79:22:85:DE:5F:FD:40:23:87:B0:13:23
X509v3 Authority Key Identifier:
keyid:11:D1:7E:20:42:2F:59:B6:D8:BD:2D:83:07:C1:D7:BF:D8:F0:F5:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdF-IEIvWbbYvS2DB8HXv9jw9YQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/bVwbGhBG_CV5IoXeX_1AI4ewEyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/EdF-IEIvWbbYvS2DB8HXv9jw9YQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.219.0/24
109.68.0.0/21
109.68.160.0/21
109.68.240.0/21
185.35.164.0/22
185.58.96.0/22
185.111.204.0/22
194.145.127.0/24
194.145.152.0/24
194.145.155.0/24
194.146.23.0/24
195.189.202.0/23
IPv6:
2a02:2a08::/32
2a04:6480::/29
Signature Algorithm: sha256WithRSAEncryption
2c:58:93:00:df:d1:9e:7a:36:86:56:81:a0:4e:36:2b:f0:63:
bf:fd:55:f5:be:ec:92:b4:16:1c:9c:6e:bf:be:c1:2f:99:06:
42:d2:f1:f2:81:73:24:86:e7:13:00:a6:2d:73:72:72:7d:a3:
98:3d:b7:0e:4d:77:8c:c6:d5:fd:7e:8c:de:aa:fe:87:17:e4:
57:d8:7d:17:c2:26:d1:72:3a:12:6c:4e:5b:19:b1:fb:f4:1b:
de:8a:d0:e9:19:7a:14:cc:04:e0:7a:cd:8c:5b:c2:7d:be:da:
f7:a7:de:8f:26:ce:65:a2:ae:25:46:94:dd:84:66:18:a0:ab:
91:f4:8f:d9:0f:1d:48:4a:db:ca:50:ef:5b:a0:1b:94:90:af:
24:df:45:c0:4a:90:dd:2b:87:39:b0:8c:f0:3f:a9:7e:ff:97:
3c:05:3d:49:ff:07:88:dc:97:3e:52:37:9e:30:7c:39:83:b5:
9b:cd:7f:d6:00:c1:6c:e9:5e:07:2a:40:c5:46:94:00:9b:b3:
4f:2b:ed:8b:0d:ca:ef:67:de:3a:87:c9:c1:f6:86:36:a9:44:
97:34:65:5e:48:76:95:ec:a9:48:a2:26:26:91:de:75:a7:3d:
04:4b:0c:58:d8:d7:64:16:16:4f:99:7d:70:ac:64:e3:3c:68:
82:0a:0b:b9
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgISAZ8jaJHCjdiNfyS6nF4JgKNyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZDE3ZTIwNDIyZjU5YjZkOGJkMmQ4MzA3YzFkN2JmZDhm
MGY1ODQwHhcNMjYwNzAyMTUxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDVjMWIxYTEwNDZmYzI1NzkyMjg1ZGU1ZmZkNDAyMzg3YjAxMzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wu0JUnDYr6DBiuBbl+ezF8Whrxk
gMEThu+VsCSw3HZCINY2Bm2XG03Kk8kU5WbmA6QhoiLVdcpifYmR3hqaNuo3abFx
mi5pQJBc4UsIpcqf/zZzbTkOMgHkB5u4X2Lj5KqKgVl0Aio08nhemMNQzaGN1C1X
xQrh6LtoiDVge/4zaegwsjdj5ZXJdNPM7CKa2jUgcCdBJp4XT4O/09YZ5fsVZBsV
SXD2ZSkr7hbYgoN1S//VUMgrXaNUH3wiFyOg4s3hbIVx2gownrsWW8cd/P8ijBmk
qCxdS2nvG62kmr4BzS39rEHY0F0zVFL2D2+ag5nyUhHaSSe0XmJFl24+bwIDAQAB
o4ICYTCCAl0wHQYDVR0OBBYEFG1cGxoQRvwleSKF3l/9QCOHsBMjMB8GA1UdIwQY
MBaAFBHRfiBCL1m22L0tgwfB17/Y8PWEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWRGLUlFSXZXYmJZdlMyREI4SFh2OWp3OVlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9mNzBlMWEtNzMyZS00ZTZiLWIzYjUt
ZjU2MmI4OTc0ZDhiLzEvYlZ3YkdoQkdfQ1Y1SW9YZVhfMUFJNGV3RXlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9mNzBlMWEtNzMyZS00ZTZiLWIzYjUtZjU2MmI4OTc0ZDhi
LzEvRWRGLUlFSXZXYmJZdlMyREI4SFh2OWp3OVlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHcGCCsGAQUFBwEHAQH/BGgwZjBOBAIAATBIAwQAW+7bAwQD
bUQAAwQDbUSgAwQDbUTwAwQCuSOkAwQCuTpgAwQCuW/MAwQAwpF/AwQAwpGYAwQA
wpGbAwQAwpIXAwQBw73KMBQEAgACMA4DBQAqAioIAwUDKgRkgDANBgkqhkiG9w0B
AQsFAAOCAQEALFiTAN/Rnno2hlaBoE42K/Bjv/1V9b7skrQWHJxuv77BL5kGQtLx
8oFzJIbnEwCmLXNycn2jmD23Dk13jMbV/X6M3qr+hxfkV9h9F8Im0XI6EmxOWxmx
+/Qb3orQ6Rl6FMwE4HrNjFvCfb7a96fejybOZaKuJUaU3YRmGKCrkfSP2Q8dSErb
ylDvW6AblJCvJN9FwEqQ3SuHObCM8D+pfv+XPAU9Sf8HiNyXPlI3njB8OYO1m81/
1gDBbOleBypAxUaUAJuzTyvtiw3K72feOofJwfaGNqlElzRlXkh2leypSKImJpHe
dac9BEsMWNjXZBYWT5l9cKxk4zxoggoLuQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:08:30 2026 by rpki-client