Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/bmMJg_AnGKFinSNJYZ0qTmbDVFc.roa
File: bmMJg_AnGKFinSNJYZ0qTmbDVFc.roa (raw, json)
Hash identifier: gUieoBy2PlUybSc/XFtPHguECqEJNbnsnVDEN3z5qm0=
Subject key identifier: 6E:63:09:83:F0:27:18:A1:62:9D:23:49:61:9D:2A:4E:66:C3:54:57
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0C33EDF560F8B2627648E727958CF6FB8
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/bmMJg_AnGKFinSNJYZ0qTmbDVFc.roa
Signing time: Mon 21 Sep 2026 09:14:32 +0000
ROA not before: Mon 21 Sep 2026 09:14:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219429
IP address blocks: 89.125.31.0/24 maxlen: 24
103.110.39.0/24 maxlen: 24
140.225.192.0/24 maxlen: 24
140.225.206.0/23 maxlen: 23
140.225.212.0/23 maxlen: 23
153.76.212.0/23 maxlen: 23
153.76.214.0/23 maxlen: 23
153.76.216.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:17:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:3e:df:56:0f:8b:26:27:64:8e:72:79:58:cf:6f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 21 09:14:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e630983f02718a1629d2349619d2a4e66c35457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:46:0f:3e:62:bf:34:ad:a0:45:c0:39:83:b0:
7e:53:31:01:cb:15:b5:49:73:50:84:c2:e8:26:c7:
18:e5:25:c8:d0:bb:3b:ff:38:88:9b:a2:d2:fa:57:
52:bf:ff:70:89:20:9a:8f:78:50:6d:ce:18:a3:d2:
e5:a7:35:ea:2d:7d:b5:d6:02:66:51:13:d9:46:ad:
44:d3:70:18:61:5c:e2:5f:e4:3f:89:68:c0:37:bb:
44:39:eb:de:db:6b:74:44:eb:32:68:41:59:5b:d9:
e2:98:27:2f:71:61:93:6f:d0:f6:2c:e4:be:de:54:
2d:6a:1d:5a:bf:60:f5:4b:9a:cb:29:c1:0d:25:0a:
24:fc:db:02:eb:57:cb:2e:1f:c9:1b:50:f2:4e:a1:
b7:37:f7:fd:54:df:71:ca:85:f8:fa:2a:2a:ca:0d:
65:04:2a:61:00:18:21:26:de:09:d5:02:6d:47:4a:
40:c0:3f:07:9c:ae:b0:a6:da:8b:4d:ac:ce:7b:17:
12:dd:f4:84:6a:60:0c:fe:4f:75:f7:6d:8a:96:30:
26:7c:1d:dc:38:24:49:2a:d1:8f:6d:15:e7:31:e2:
ac:b3:e3:16:d8:c3:0a:66:84:30:97:06:fa:2e:00:
1e:54:3d:b4:47:7c:0d:e9:4f:32:67:b4:81:48:20:
67:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:63:09:83:F0:27:18:A1:62:9D:23:49:61:9D:2A:4E:66:C3:54:57
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/bmMJg_AnGKFinSNJYZ0qTmbDVFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.31.0/24
103.110.39.0/24
140.225.192.0/24
140.225.206.0/23
140.225.212.0/23
153.76.212.0-153.76.217.255
Signature Algorithm: sha256WithRSAEncryption
0f:e0:7b:c7:eb:a4:6b:29:15:7b:4a:84:72:dd:50:d0:06:1b:
74:9c:30:95:80:54:5a:28:bc:0d:ef:6b:c5:11:ac:31:a0:b2:
e1:56:03:f6:37:36:c1:95:1f:bd:54:be:ab:b5:e0:4f:89:d6:
fd:c7:5e:b7:95:38:f5:67:09:1a:1c:33:aa:1a:35:1c:01:1f:
54:34:ef:04:28:07:35:ac:f1:8c:9d:0e:3e:84:26:4c:18:18:
ae:37:38:7d:f7:84:5a:28:c1:3c:c9:f8:6e:8e:28:cf:a7:71:
ba:8c:20:bb:84:eb:c9:90:4a:2b:16:58:ce:75:11:da:14:da:
ac:ac:3b:bb:14:95:30:79:fe:18:6e:51:b1:8d:e3:5a:29:90:
5c:c8:0a:03:65:7c:a8:63:78:17:e3:cd:52:da:c7:97:a9:2d:
bf:f2:f4:87:f7:41:3b:e8:c3:f3:6a:53:e2:f5:ba:d4:62:4f:
f6:a5:ad:cb:c4:67:d6:7f:91:41:0d:c0:11:97:91:c4:d4:ca:
38:d0:ae:45:ac:dc:0a:ff:3e:46:29:b6:33:a1:fc:af:6f:da:
1c:66:d9:b0:a1:cf:0a:eb:99:d7:56:ce:11:52:e9:ab:1a:57:
b1:24:08:f1:40:b8:87:54:f7:98:0c:24:c5:03:41:03:71:2a:
e0:65:f7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:28:36 2026 by rpki-client