Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/_bscvb9F5YOkNinfAMloHB_BrEo.roa
File: _bscvb9F5YOkNinfAMloHB_BrEo.roa (raw, json)
Hash identifier: d0kBFyVzMpcFxAN6QAtTkY3wGD2zhl/QNVYcFslA7FE=
Subject key identifier: FD:BB:1C:BD:BF:45:E5:83:A4:36:29:DF:00:C9:68:1C:1F:C1:AC:4A
Certificate issuer: /CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307
Certificate serial: 01A18C602ACF926401CCFAB23D82A8FA6627
Authority key identifier: CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/_bscvb9F5YOkNinfAMloHB_BrEo.roa
Signing time: Fri 30 Oct 2026 10:34:35 +0000
ROA not before: Fri 30 Oct 2026 10:34:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50265
IP address blocks: 91.233.88.0/24 maxlen: 24
185.15.188.0/22 maxlen: 22
193.106.68.0/22 maxlen: 24
217.12.32.0/22 maxlen: 24
217.12.36.0/24 maxlen: 24
217.12.39.0/24 maxlen: 24
217.12.42.0/23 maxlen: 24
217.12.44.0/22 maxlen: 24
217.172.16.0/21 maxlen: 24
2a00:46e0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:60:2a:cf:92:64:01:cc:fa:b2:3d:82:a8:fa:66:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307
Validity
Not Before: Oct 30 10:34:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fdbb1cbdbf45e583a43629df00c9681c1fc1ac4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e5:4b:1d:2a:da:77:de:ee:2d:16:eb:6d:ad:
d8:56:8f:b5:88:20:d0:79:d0:ae:fc:c5:ac:dc:80:
56:63:6f:5f:3c:96:6c:c5:32:41:dc:68:c4:61:f1:
4d:fe:f3:b6:2e:ed:3c:f4:27:4d:f8:17:72:9a:61:
48:ea:74:c2:e4:43:e7:4f:3a:b2:4a:5e:40:8f:de:
b9:51:aa:1a:5d:56:57:d1:6c:aa:0d:f6:cb:ed:d4:
e3:95:41:75:23:2a:44:e5:fe:d9:61:6e:56:31:5b:
19:bc:ed:0d:d4:fc:a9:2d:5b:ef:c7:35:29:bc:27:
c0:b8:80:86:e6:c4:0e:d3:57:20:ad:73:34:50:3d:
91:20:2e:ce:7c:d9:10:0f:e2:76:de:73:27:9f:ca:
79:29:25:a2:52:10:1b:f2:fa:ef:65:df:a0:d7:e2:
ec:ce:c9:bc:af:e8:38:94:23:cd:1f:af:cc:8d:8d:
3a:59:30:0a:4b:c6:f0:26:22:cd:56:77:9b:64:1e:
22:ee:e4:d4:f4:b9:51:9a:3f:52:94:1c:12:6b:9e:
c6:39:ae:05:61:b5:16:f1:fc:ad:5c:f5:02:e7:74:
70:07:c3:81:41:c8:56:c2:48:7f:0a:c5:5d:2e:4a:
b1:e7:15:e4:61:f6:26:14:79:af:29:75:2f:de:fa:
fa:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:BB:1C:BD:BF:45:E5:83:A4:36:29:DF:00:C9:68:1C:1F:C1:AC:4A
X509v3 Authority Key Identifier:
keyid:CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/_bscvb9F5YOkNinfAMloHB_BrEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.88.0/24
185.15.188.0/22
193.106.68.0/22
217.12.32.0-217.12.36.255
217.12.39.0/24
217.12.42.0-217.12.47.255
217.172.16.0/21
IPv6:
2a00:46e0::/48
Signature Algorithm: sha256WithRSAEncryption
30:88:2c:27:dd:49:8b:54:c1:19:35:df:1c:42:cd:05:bb:fc:
26:58:80:a7:56:17:2d:a9:8c:d7:fb:18:ec:00:56:3d:33:e9:
97:74:69:88:13:c8:cf:d4:b6:dd:f0:88:61:d6:a6:13:25:ef:
2e:b9:f7:06:bb:cc:04:da:fd:42:5b:9c:6e:8d:00:f1:5f:e3:
0e:39:49:5a:35:b8:92:db:e3:7e:89:7c:1c:ab:01:6c:12:a6:
d4:30:5b:62:0c:99:2f:22:d4:1c:14:90:93:f7:14:c9:10:98:
dd:3a:a7:92:a5:9e:97:dc:fd:10:be:e5:c5:59:04:c4:98:1c:
b6:af:17:e2:5b:a9:5c:7d:80:fe:a3:22:15:2c:62:71:5c:7d:
8e:bb:f2:26:87:81:0c:0f:47:7e:be:87:cc:48:6a:0e:3f:74:
b3:e0:d5:90:40:86:14:f3:e7:35:2f:ec:33:b4:16:05:70:7e:
9b:d0:ee:71:14:21:f9:fd:2c:f6:46:20:50:3f:d7:f9:f8:fc:
ff:17:fe:68:69:0b:b8:b6:66:ec:65:1a:61:86:30:da:75:23:
73:11:0c:9a:2a:6d:aa:3c:e7:2e:31:31:1d:00:aa:15:83:40:
a7:ff:cc:42:f3:bb:15:1c:07:66:9b:9c:2b:ff:aa:e5:a7:ff:
3a:23:24:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:43:59 2026 by rpki-client