Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/bweQP_geAszHrjR1GpHsCW010XU.roa
File: bweQP_geAszHrjR1GpHsCW010XU.roa (raw, json)
Hash identifier: 2fyixlTpIewSYJyWERXzOL+kQBaJG72Bv+TWkjEAMwc=
Subject key identifier: 6F:07:90:3F:F8:1E:02:CC:C7:AE:34:75:1A:91:EC:09:6D:35:D1:75
Certificate issuer: /CN=dbb89d4be55d6b3bcc786a21812cd50b684e657d
Certificate serial: 019F2368983DAFF9659C2F5D19F1C3D7AF15
Authority key identifier: DB:B8:9D:4B:E5:5D:6B:3B:CC:78:6A:21:81:2C:D5:0B:68:4E:65:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27idS-VdazvMeGohgSzVC2hOZX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/bweQP_geAszHrjR1GpHsCW010XU.roa
Signing time: Thu 02 Jul 2026 15:18:05 +0000
ROA not before: Thu 02 Jul 2026 15:18:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205681
IP address blocks: 85.158.120.0/21 maxlen: 21
85.158.120.0/24 maxlen: 24
85.158.123.0/24 maxlen: 24
85.158.124.0/24 maxlen: 24
85.158.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/27idS-VdazvMeGohgSzVC2hOZX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/27idS-VdazvMeGohgSzVC2hOZX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/27idS-VdazvMeGohgSzVC2hOZX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:98:3d:af:f9:65:9c:2f:5d:19:f1:c3:d7:af:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb89d4be55d6b3bcc786a21812cd50b684e657d
Validity
Not Before: Jul 2 15:18:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f07903ff81e02ccc7ae34751a91ec096d35d175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:42:f9:c4:27:48:2a:80:55:0e:c6:12:20:e4:
8c:4d:fb:8d:8f:1f:f6:d0:34:1f:80:76:0c:96:e0:
84:31:d7:e8:81:c7:d8:3c:9c:eb:76:7b:7c:9a:89:
5e:16:59:8f:e4:42:03:4a:81:e7:e5:ad:6f:72:4e:
20:c3:24:bb:c4:8c:d1:82:47:71:30:ea:36:2f:2a:
61:d8:3a:38:13:f1:82:88:7f:8c:2e:19:b5:9c:fd:
b1:8d:fe:d4:06:88:cf:57:1c:4d:ab:91:e6:fd:33:
ed:bb:1b:44:30:7f:c8:43:9e:d2:0c:bd:a3:76:87:
c9:1d:84:c2:2f:30:8e:4e:4f:91:8e:75:70:e3:03:
e2:cd:51:54:e9:9a:b3:bd:f7:58:c3:f4:f4:82:56:
04:cd:c2:f6:54:50:ca:68:9f:26:41:ca:51:08:b2:
20:fa:c6:80:d8:47:c3:8d:e4:7d:46:0a:0b:f4:ac:
77:97:86:0e:75:d6:76:5f:d2:2c:2c:e3:e7:5d:6f:
1c:64:68:26:27:05:a6:28:fe:94:f9:67:2e:1a:4c:
27:f2:7f:96:6c:25:62:1d:88:5a:7b:f8:70:e9:c4:
d9:4f:0b:14:14:c7:a6:f6:49:4a:b9:da:45:7d:2f:
1e:d0:47:f1:f7:8c:ad:30:22:3e:c6:d1:01:b7:ef:
cd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:07:90:3F:F8:1E:02:CC:C7:AE:34:75:1A:91:EC:09:6D:35:D1:75
X509v3 Authority Key Identifier:
keyid:DB:B8:9D:4B:E5:5D:6B:3B:CC:78:6A:21:81:2C:D5:0B:68:4E:65:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27idS-VdazvMeGohgSzVC2hOZX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/bweQP_geAszHrjR1GpHsCW010XU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0a7eae-739c-42ea-940a-58366e98a9e6/1/27idS-VdazvMeGohgSzVC2hOZX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.120.0/21
Signature Algorithm: sha256WithRSAEncryption
0e:68:69:45:4c:1e:a7:8a:da:b3:41:f7:e7:25:c0:83:e8:2c:
44:b9:35:f8:73:6b:65:23:0d:ee:29:58:fa:be:e0:e7:de:55:
49:21:5f:0d:a5:b2:9d:45:ad:1d:36:c1:f4:ae:d7:dc:8a:51:
44:a7:af:b6:04:9d:08:92:6a:23:1f:bc:58:27:68:47:af:17:
33:52:f3:b6:51:7e:95:19:04:39:2d:a2:c7:de:4e:77:3b:17:
73:a7:b3:97:cf:9a:46:d5:a4:94:4a:ef:bd:d4:3a:3e:35:e4:
c7:62:ae:45:f4:bf:c6:a9:9f:03:9e:ab:31:38:61:78:c2:36:
fa:80:72:c9:4f:e8:d2:49:91:17:5c:d7:6d:2d:21:de:82:f1:
3c:b6:46:15:64:f5:45:3c:2f:51:7c:94:1b:37:7d:a1:ef:c5:
42:c5:fe:7f:a4:22:e0:c5:fc:88:52:38:5e:b1:47:57:b2:58:
50:bb:b5:51:51:19:fd:05:4c:b5:36:67:ad:64:84:48:5e:b2:
ee:37:73:43:9a:2e:d6:4e:d6:54:d1:41:72:ed:33:21:cf:b2:
fe:1a:fe:d0:9a:8d:9d:06:de:c8:4c:73:7b:70:0c:80:48:bd:
e0:b5:20:ea:37:a9:32:1f:ae:46:15:68:5d:43:00:59:83:44:
cf:ce:6d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:19:11 2026 by rpki-client