Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/bW3L94Pms6yWw3t2jtFT3HSfLBM.roa
File: bW3L94Pms6yWw3t2jtFT3HSfLBM.roa (raw, json)
Hash identifier: TIjHAEfiHkyK23GwFNj02WmJg5DbCF9vzAsA7b60xtg=
Subject key identifier: 6D:6D:CB:F7:83:E6:B3:AC:96:C3:7B:76:8E:D1:53:DC:74:9F:2C:13
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019E160DCE391F12178E824202E0FEE52CC2
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/bW3L94Pms6yWw3t2jtFT3HSfLBM.roa
Signing time: Mon 11 May 2026 08:01:03 +0000
ROA not before: Mon 11 May 2026 08:01:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62387
IP address blocks: 79.132.92.0/22 maxlen: 22
85.234.161.0/24 maxlen: 24
85.234.162.0/24 maxlen: 24
85.234.180.0/22 maxlen: 22
89.191.108.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:16:0d:ce:39:1f:12:17:8e:82:42:02:e0:fe:e5:2c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: May 11 08:01:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d6dcbf783e6b3ac96c37b768ed153dc749f2c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:83:34:fb:0f:2e:52:c2:02:f9:25:1e:90:77:
f7:d2:35:2e:ef:fc:ae:de:1d:8b:bb:bb:5b:54:7a:
3a:2b:bb:23:fa:e5:29:7f:28:92:56:2c:88:6e:cf:
f6:17:13:0d:cd:f8:8a:db:67:01:07:a1:6d:b0:c3:
d2:14:93:09:1a:bb:f9:8a:8b:e8:cb:25:95:1b:a2:
46:de:41:af:c3:2a:1d:4c:bc:75:91:a4:46:b3:a3:
10:c2:72:3e:ea:c6:18:d0:34:27:af:c5:35:84:c6:
62:4b:46:21:41:88:9b:bb:b2:e2:d8:9e:8a:2f:d3:
d7:81:bd:0e:02:6c:37:20:ed:fc:a2:92:a3:0e:d8:
6b:d8:5d:f3:02:c4:0a:c1:11:65:96:ff:6e:80:82:
a9:14:ba:6f:b7:c9:0a:09:77:ff:30:bf:44:18:57:
b6:60:de:41:3d:5b:c3:93:00:1e:68:5c:08:52:14:
f1:7b:b0:15:26:7f:c3:e0:6a:40:b5:fb:4c:3e:a0:
69:e7:c8:3c:3c:33:b3:8f:f9:f5:6f:ba:c0:bc:3b:
5a:fe:61:ea:4c:07:ae:83:4a:cd:03:50:3b:d4:c2:
68:5a:96:0f:83:15:9c:6d:5c:cf:9e:5b:63:96:bc:
c2:eb:7a:bd:ff:2b:1f:62:de:df:63:9f:93:01:09:
79:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:6D:CB:F7:83:E6:B3:AC:96:C3:7B:76:8E:D1:53:DC:74:9F:2C:13
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/bW3L94Pms6yWw3t2jtFT3HSfLBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.132.92.0/22
85.234.161.0-85.234.162.255
85.234.180.0/22
89.191.108.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:95:2c:16:0d:1c:7b:b3:e1:cd:39:72:69:af:e6:88:37:f5:
33:32:7f:34:5a:f5:37:ed:ac:8e:66:dc:68:df:ab:e2:39:c1:
c8:a6:8b:aa:2f:61:08:b2:fd:db:42:95:f0:87:ca:e6:1f:8c:
6a:9b:30:fa:8a:97:22:27:3c:99:f9:25:ab:a6:79:98:79:fd:
19:61:4c:e2:64:56:f8:e9:05:2f:a9:d8:0d:d9:bc:1f:2a:3d:
43:8d:4f:85:b4:e8:5c:48:de:14:21:ac:3f:15:ec:0d:59:79:
9a:4c:67:37:6d:0e:cf:d5:62:91:b4:1e:bd:a2:08:a9:6f:cc:
cf:3d:f3:9b:86:7c:83:c5:74:c4:84:0f:16:97:3f:e8:72:4a:
63:ba:10:fb:6f:50:83:6b:95:84:a3:82:46:6c:62:04:7a:5e:
28:b0:97:b9:07:b6:39:4f:7c:b2:d4:f6:88:e0:46:f0:cb:59:
52:6b:7b:ad:d6:3b:b5:00:ac:af:3b:bc:95:9c:5f:38:37:e8:
e4:ba:e5:d1:75:12:7a:98:55:4e:88:f5:71:1e:2b:14:72:0e:
5a:54:8f:6e:72:01:0a:28:3c:05:0c:7a:03:d2:58:36:1f:54:
08:f6:fa:2b:9f:76:9b:48:af:01:71:3a:f2:59:94:c6:28:35:
fa:60:ec:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:55:41 2026 by rpki-client