Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/BpN_MX8E1XuM8uywmc2VLHT99Ww.roa
File: BpN_MX8E1XuM8uywmc2VLHT99Ww.roa (raw, json)
Hash identifier: kT4mShQPH9Q6L73eC0XuNc9aapyH70bUcctdhXSPy6k=
Subject key identifier: 06:93:7F:31:7F:04:D5:7B:8C:F2:EC:B0:99:CD:95:2C:74:FD:F5:6C
Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321
Certificate serial: 01A1834E76CAAEFA2134511A82ACA63B28C5
Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/BpN_MX8E1XuM8uywmc2VLHT99Ww.roa
Signing time: Wed 28 Oct 2026 16:18:39 +0000
ROA not before: Wed 28 Oct 2026 16:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215242
IP address blocks: 185.7.242.0/24 maxlen: 24
2a14:db80:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:4e:76:ca:ae:fa:21:34:51:1a:82:ac:a6:3b:28:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321
Validity
Not Before: Oct 28 16:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06937f317f04d57b8cf2ecb099cd952c74fdf56c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ed:3b:00:6c:b1:6e:35:0a:1d:e0:36:d9:0e:
ac:29:ac:3e:a2:46:b1:2c:4f:fc:59:33:fb:8b:6c:
0b:4d:55:c4:a6:ad:54:9e:f3:45:aa:65:0a:b8:e7:
2c:42:d0:47:9e:b7:bb:ae:28:e0:d3:06:d8:c3:5b:
b9:4d:1f:64:94:ce:b3:15:e3:2d:94:75:5a:20:a5:
86:e2:9c:da:35:e3:fd:6a:a5:4e:a5:1a:a6:aa:0e:
84:4e:42:88:f6:42:6f:c9:5b:2f:60:4e:e5:60:dc:
1b:ce:59:02:d4:85:40:0c:8b:5a:39:f1:59:f6:80:
73:c1:a9:98:1d:a9:4c:5f:66:75:88:0f:6d:50:6c:
17:ee:4a:f9:ef:06:6e:d9:84:65:18:f0:e6:77:6b:
84:23:f2:f9:6e:2b:e1:b8:ec:2a:59:9c:2c:2d:10:
ad:cd:91:32:b0:45:11:a6:90:dc:7c:2d:c3:79:fd:
49:bb:55:f1:aa:40:6d:d0:d1:97:f9:d4:37:10:01:
dd:05:0f:b4:44:b6:d1:16:d4:5f:a9:62:70:3b:f6:
67:08:ea:ee:33:bb:21:3b:1a:ef:0f:e6:ad:a7:da:
f1:61:b4:3a:53:66:12:34:dc:7b:a1:f8:89:86:a7:
20:f9:c1:1f:18:8e:d8:c2:99:3f:59:d7:f1:d8:d3:
c2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:93:7F:31:7F:04:D5:7B:8C:F2:EC:B0:99:CD:95:2C:74:FD:F5:6C
X509v3 Authority Key Identifier:
keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/BpN_MX8E1XuM8uywmc2VLHT99Ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.242.0/24
IPv6:
2a14:db80:5::/48
Signature Algorithm: sha256WithRSAEncryption
79:4f:e3:d1:42:b6:7e:90:b3:13:a8:68:4c:20:ed:9a:0d:fc:
9e:9c:72:96:36:36:e7:99:a9:9d:11:91:c0:96:ce:91:de:8b:
48:42:08:08:28:1f:26:5a:2f:1d:72:df:3a:25:13:fa:1c:0b:
95:88:cc:8c:eb:a9:70:8b:3f:f3:50:e1:19:24:8f:e9:65:19:
26:64:2b:9a:5e:67:02:67:ac:b4:5a:a4:91:7d:5b:37:ce:38:
bf:86:59:ba:19:78:a6:40:d2:cb:65:7d:a7:66:ad:10:ba:11:
f0:82:43:01:28:dd:4f:6e:b7:aa:4a:74:22:d9:1c:9a:78:f3:
26:a4:ba:a0:2e:50:79:6e:da:8f:fd:ec:04:9a:f6:39:a8:80:
4b:09:7c:e5:6d:70:9d:84:12:ef:7d:ae:ed:09:41:e2:29:c9:
98:1b:41:cb:88:68:b3:81:57:16:2a:b6:cf:1a:86:19:fa:ab:
cf:e0:3f:34:1a:32:dd:df:ec:38:14:43:12:17:98:ad:88:0e:
7c:dd:21:f5:57:d2:62:dc:a3:15:26:30:7f:70:76:cb:55:f4:
20:6e:13:30:c7:f6:70:1d:0c:e2:c7:c7:94:13:3b:e6:b6:9a:
e8:a3:00:34:d9:fd:d7:ad:7f:21:d2:59:0d:43:d0:57:da:08:
ae:46:a8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:32:31 2026 by rpki-client