Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/bemkvInvV_hUeKqlnNmpEY5yC3Y.roa
File: bemkvInvV_hUeKqlnNmpEY5yC3Y.roa (raw, json)
Hash identifier: KxeHwHUdqp1DIrqMScxqgnhP2cyId7zoWYENlA59cfE=
Subject key identifier: 6D:E9:A4:BC:89:EF:57:F8:54:78:AA:A5:9C:D9:A9:11:8E:72:0B:76
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 019F8BFBABC11E9C11B0CD8360E90AB52698
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/bemkvInvV_hUeKqlnNmpEY5yC3Y.roa
Signing time: Wed 22 Jul 2026 22:39:14 +0000
ROA not before: Wed 22 Jul 2026 22:39:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48716
IP address blocks: 91.147.119.0/24 maxlen: 24
91.147.123.0/24 maxlen: 24
91.147.126.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8b:fb:ab:c1:1e:9c:11:b0:cd:83:60:e9:0a:b5:26:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Jul 22 22:39:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6de9a4bc89ef57f85478aaa59cd9a9118e720b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:04:8a:55:75:45:7c:c1:c4:66:2e:c7:f9:27:
95:a0:21:f0:8f:b8:be:e9:93:ee:1a:cc:3f:3b:21:
fc:2b:8e:fe:e2:e8:2e:90:57:40:03:05:4e:04:2e:
bf:28:4e:2f:a1:11:9d:6f:5f:a0:ca:44:e4:4a:c3:
08:64:bd:c4:81:10:f9:85:98:1a:55:bf:9c:e8:65:
f5:c6:59:0d:ab:48:c1:ed:ed:03:52:1d:dc:6d:e4:
a9:53:95:80:fb:54:12:4b:4b:f9:f4:6e:52:23:d8:
ba:e6:73:26:80:f3:54:b9:c0:2f:e3:8a:37:01:41:
e7:03:5b:93:0a:42:0f:1e:1b:1d:e8:06:7b:71:cd:
d8:b1:c0:2c:39:9c:c6:fe:d7:b9:92:85:aa:6b:22:
c4:9f:52:20:be:0c:cc:0d:f2:09:f9:ba:ef:6b:b5:
ce:c4:cd:59:b1:fe:70:35:c3:ba:96:01:4f:3e:3c:
ca:69:a9:2d:c9:aa:59:24:9f:e4:64:d6:8f:f4:14:
98:39:76:62:a6:ad:1d:2b:ee:57:0b:8c:07:d4:45:
ad:7c:44:cb:22:8e:2a:34:69:4a:95:b3:d7:11:1e:
f7:05:e1:ba:90:e8:67:7a:34:f0:09:eb:aa:3d:2c:
c9:af:54:4c:66:ba:62:06:98:2e:40:c6:d5:6e:ca:
ef:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E9:A4:BC:89:EF:57:F8:54:78:AA:A5:9C:D9:A9:11:8E:72:0B:76
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/bemkvInvV_hUeKqlnNmpEY5yC3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.119.0/24
91.147.123.0/24
91.147.126.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:bd:27:7c:eb:86:ed:fe:27:89:88:76:13:c5:41:f8:f3:d6:
43:f7:5b:32:9b:cd:b6:9f:90:57:f3:98:8c:7d:1c:5d:81:40:
ba:5a:20:37:54:4b:4f:33:fd:d1:e5:f2:64:56:45:9f:2a:a1:
b1:b5:e0:b8:10:7c:c1:47:fe:fc:f1:1e:48:00:90:0a:c8:a8:
6c:d0:2e:f5:91:aa:19:19:10:eb:c8:fc:38:3c:05:8a:62:37:
5b:c8:af:ef:90:90:51:39:dd:e3:32:5a:ce:ce:07:13:46:51:
7c:c9:66:66:93:3f:9a:e3:c0:b8:7d:fe:e0:fd:c6:69:64:f2:
36:29:78:80:f0:10:d8:a6:e5:a2:ab:0b:c4:a4:7c:c1:6a:6b:
b3:71:67:1f:17:d9:c1:3b:e6:83:8f:c1:92:51:33:81:a2:8b:
f3:9c:90:68:a0:86:39:c7:ad:b0:2e:29:60:25:3d:36:54:b4:
95:6e:09:bc:59:d4:7d:03:3f:9c:10:5f:4a:fc:fd:2c:7f:89:
7c:fc:19:3b:a5:b3:ec:76:86:78:48:55:6b:fc:15:53:70:74:
09:c2:05:79:eb:e4:1f:4c:b3:77:fa:0a:6c:76:dc:14:05:cc:
3e:03:25:04:a5:33:a6:d8:00:11:f5:13:9f:31:56:10:60:d7:
24:91:20:2d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ+L+6vBHpwRsM2DYOkKtSaYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi
ZTAwNWQwHhcNMjYwNzIyMjIzOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZGU5YTRiYzg5ZWY1N2Y4NTQ3OGFhYTU5Y2Q5YTkxMThlNzIwYjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgSKVXVFfMHEZi7H+SeVoCHwj7i+
6ZPuGsw/OyH8K47+4ugukFdAAwVOBC6/KE4voRGdb1+gykTkSsMIZL3EgRD5hZga
Vb+c6GX1xlkNq0jB7e0DUh3cbeSpU5WA+1QSS0v59G5SI9i65nMmgPNUucAv44o3
AUHnA1uTCkIPHhsd6AZ7cc3YscAsOZzG/te5koWqayLEn1IgvgzMDfIJ+brva7XO
xM1Zsf5wNcO6lgFPPjzKaaktyapZJJ/kZNaP9BSYOXZipq0dK+5XC4wH1EWtfETL
Io4qNGlKlbPXER73BeG6kOhnejTwCeuqPSzJr1RMZrpiBpguQMbVbsrvYwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFG3ppLyJ71f4VHiqpZzZqRGOcgt2MB8GA1UdIwQY
MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt
ZTEyYjE2NDIxNWI5LzEvYmVta3ZJbnZWX2hVZUtxbG5ObXBFWTV5QzNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5
LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW5N3AwQA
W5N7AwQBW5N+MA0GCSqGSIb3DQEBCwUAA4IBAQBqvSd864bt/ieJiHYTxUH489ZD
91sym822n5BX85iMfRxdgUC6WiA3VEtPM/3R5fJkVkWfKqGxteC4EHzBR/788R5I
AJAKyKhs0C71kaoZGRDryPw4PAWKYjdbyK/vkJBROd3jMlrOzgcTRlF8yWZmkz+a
48C4ff7g/cZpZPI2KXiA8BDYpuWiqwvEpHzBamuzcWcfF9nBO+aDj8GSUTOBoovz
nJBooIY5x62wLilgJT02VLSVbgm8WdR9Az+cEF9K/P0sf4l8/Bk7pbPsdoZ4SFVr
/BVTcHQJwgV56+QfTLN3+gpsdtwUBcw+AyUEpTOm2AAR9ROfMVYQYNckkSAt
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:20:38 2026 by rpki-client