Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/BpAJvymjfh2wAAfD6sgHbVT7VMk.roa
File: BpAJvymjfh2wAAfD6sgHbVT7VMk.roa (raw, json)
Hash identifier: ELwHlwXVUn1e58Lq5hlSu0xTfnK8E7D1IeEOAh7JDho=
Subject key identifier: 06:90:09:BF:29:A3:7E:1D:B0:00:07:C3:EA:C8:07:6D:54:FB:54:C9
Certificate issuer: /CN=6991c56f11a7171c6153239769f557beba10182d
Certificate serial: 01A0F3D026A1E4AEF216BF9595574EC69DA8
Authority key identifier: 69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/BpAJvymjfh2wAAfD6sgHbVT7VMk.roa
Signing time: Wed 30 Sep 2026 19:34:59 +0000
ROA not before: Wed 30 Sep 2026 19:34:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202244
IP address blocks: 95.164.88.0/24 maxlen: 24
95.164.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f3:d0:26:a1:e4:ae:f2:16:bf:95:95:57:4e:c6:9d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6991c56f11a7171c6153239769f557beba10182d
Validity
Not Before: Sep 30 19:34:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=069009bf29a37e1db00007c3eac8076d54fb54c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:16:fe:6a:45:ef:14:36:93:89:a7:90:66:8c:
30:2f:af:5a:e6:12:f5:18:0d:86:15:8b:3f:b3:ca:
a3:c7:38:dd:a1:fd:85:48:e6:bb:78:1e:ff:d6:6b:
f7:f4:1d:80:ca:5a:62:a1:29:03:28:8d:62:c1:6c:
dd:00:bb:ae:b2:38:bd:3d:7d:2e:b7:36:cd:4c:33:
66:a4:40:cb:62:09:62:be:ec:fb:6d:e9:54:3b:62:
21:eb:f6:70:ae:26:0d:bd:a1:ee:fb:ef:19:a9:00:
c5:96:f4:18:09:cf:3e:d1:ec:10:d7:01:4c:2f:48:
20:71:56:d0:39:92:9d:d8:16:b3:e3:f0:24:20:ab:
bb:69:48:eb:c5:c5:36:52:29:be:bb:f8:b2:93:a8:
67:2b:a6:a3:3e:8c:c4:2f:a3:ac:3d:63:31:d1:a4:
09:9f:e2:30:0d:82:69:e4:35:fd:dd:f0:42:38:bb:
0c:51:25:74:fd:11:3b:42:4a:90:88:99:92:8e:75:
74:fa:c4:72:fd:01:51:b4:4c:22:58:21:98:4c:63:
5d:89:df:07:44:51:8c:e2:af:28:b5:5a:c5:a8:20:
ad:f6:27:40:e0:dd:0f:2e:fd:5b:69:40:84:f0:ca:
05:bb:6b:7b:6b:c1:98:7c:ea:8c:4f:5d:68:32:f3:
05:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:90:09:BF:29:A3:7E:1D:B0:00:07:C3:EA:C8:07:6D:54:FB:54:C9
X509v3 Authority Key Identifier:
keyid:69:91:C5:6F:11:A7:17:1C:61:53:23:97:69:F5:57:BE:BA:10:18:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZHFbxGnFxxhUyOXafVXvroQGC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/BpAJvymjfh2wAAfD6sgHbVT7VMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/428815-02b9-4606-b066-65d1567340fd/1/aZHFbxGnFxxhUyOXafVXvroQGC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.88.0/24
95.164.135.0/24
Signature Algorithm: sha256WithRSAEncryption
90:71:e8:8a:f7:b9:9c:e1:1a:80:7e:cc:bb:00:3c:eb:fb:ba:
cf:b4:93:d0:61:cf:0f:5d:51:f4:41:90:93:b0:66:91:dc:61:
55:77:9d:0a:a7:9f:b2:4f:db:a6:64:5a:df:83:8b:fd:25:3e:
27:9e:c8:58:27:45:8e:85:98:ef:60:4e:10:3a:7b:86:3e:32:
c3:3b:04:a4:f0:51:fd:46:10:3f:4d:3f:2b:ae:62:df:d9:24:
8a:8e:3f:8a:1d:26:92:0c:55:2a:5a:14:f5:75:32:21:bf:ad:
47:39:84:d7:0a:74:d2:59:07:f9:9c:cc:d7:65:ea:7d:f7:db:
87:d4:21:7f:27:71:e4:77:6f:a7:a1:da:27:c1:bc:26:96:47:
c0:b3:57:c5:56:40:b8:72:18:03:77:c7:46:4c:2c:a3:ae:b6:
86:ee:53:de:7a:48:e9:40:50:2d:26:b4:b7:1c:fc:6f:00:15:
ea:c0:84:7e:1d:b4:1c:e7:f7:76:86:62:b0:d4:a8:99:fa:5a:
98:b0:f2:40:cd:aa:a4:27:98:88:ba:7b:b9:46:5b:ea:e7:f5:
da:6f:5e:05:7f:be:5b:74:0c:13:80:ba:01:db:73:2e:f5:12:
fb:f7:60:8f:a0:ea:29:b1:0b:4f:16:15:34:fd:08:23:ca:e4:
3f:ea:73:18
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaDz0Cah5K7yFr+VlVdOxp2oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5OTFjNTZmMTFhNzE3MWM2MTUzMjM5NzY5ZjU1N2JlYmEx
MDE4MmQwHhcNMjYwOTMwMTkzNDU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjkwMDliZjI5YTM3ZTFkYjAwMDA3YzNlYWM4MDc2ZDU0ZmI1NGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Bb+akXvFDaTiaeQZowwL69a5hL1
GA2GFYs/s8qjxzjdof2FSOa7eB7/1mv39B2AylpioSkDKI1iwWzdALuusji9PX0u
tzbNTDNmpEDLYglivuz7belUO2Ih6/ZwriYNvaHu++8ZqQDFlvQYCc8+0ewQ1wFM
L0ggcVbQOZKd2Baz4/AkIKu7aUjrxcU2Uim+u/iyk6hnK6ajPozEL6OsPWMx0aQJ
n+IwDYJp5DX93fBCOLsMUSV0/RE7QkqQiJmSjnV0+sRy/QFRtEwiWCGYTGNdid8H
RFGM4q8otVrFqCCt9idA4N0PLv1baUCE8MoFu2t7a8GYfOqMT11oMvMFlQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAaQCb8po34dsAAHw+rIB21U+1TJMB8GA1UdIwQY
MBaAFGmRxW8RpxccYVMjl2n1V766EBgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYt
NjVkMTU2NzM0MGZkLzEvQnBBSnZ5bWpmaDJ3QUFmRDZzZ0hiVlQ3Vk1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC80Mjg4MTUtMDJiOS00NjA2LWIwNjYtNjVkMTU2NzM0MGZk
LzEvYVpIRmJ4R25GeHhoVXlPWGFmVlh2cm9RR0MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAX6RYAwQA
X6SHMA0GCSqGSIb3DQEBCwUAA4IBAQCQceiK97mc4RqAfsy7ADzr+7rPtJPQYc8P
XVH0QZCTsGaR3GFVd50Kp5+yT9umZFrfg4v9JT4nnshYJ0WOhZjvYE4QOnuGPjLD
OwSk8FH9RhA/TT8rrmLf2SSKjj+KHSaSDFUqWhT1dTIhv61HOYTXCnTSWQf5nMzX
Zep999uH1CF/J3Hkd2+nodonwbwmlkfAs1fFVkC4chgDd8dGTCyjrraG7lPeekjp
QFAtJrS3HPxvABXqwIR+HbQc5/d2hmKw1KiZ+lqYsPJAzaqkJ5iIunu5Rlvq5/Xa
b14Ff75bdAwTgLoB23Mu9RL792CPoOopsQtPFhU0/QgjyuQ/6nMY
-----END CERTIFICATE-----
Generated at Sun Oct 4 15:00:34 2026 by rpki-client