Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/Bm94FmqkSOA2MsQgl2WAzmeBYK8.roa
File: Bm94FmqkSOA2MsQgl2WAzmeBYK8.roa (raw, json)
Hash identifier: or8S+BBAG0WDCIa4Ogpl1l9cDKTu3XEnblvgiDsF7Ic=
Subject key identifier: 06:6F:78:16:6A:A4:48:E0:36:32:C4:20:97:65:80:CE:67:81:60:AF
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 01A17CA402E3E681834984B6F567316A609E
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/Bm94FmqkSOA2MsQgl2WAzmeBYK8.roa
Signing time: Tue 27 Oct 2026 09:14:45 +0000
ROA not before: Tue 27 Oct 2026 09:14:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9123
IP address blocks: 201.51.0.0/24 maxlen: 32
201.51.1.0/24 maxlen: 32
201.51.2.0/24 maxlen: 32
201.51.3.0/24 maxlen: 32
201.51.4.0/24 maxlen: 32
201.51.5.0/24 maxlen: 32
201.51.6.0/24 maxlen: 32
201.51.7.0/24 maxlen: 32
201.51.8.0/24 maxlen: 32
201.51.9.0/24 maxlen: 32
201.51.11.0/24 maxlen: 24
201.51.12.0/24 maxlen: 24
201.51.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:a4:02:e3:e6:81:83:49:84:b6:f5:67:31:6a:60:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Oct 27 09:14:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=066f78166aa448e03632c420976580ce678160af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:97:b7:05:86:1f:6c:76:7f:93:41:98:56:e9:
ef:f5:19:6b:6c:c4:49:6d:ce:ef:58:d8:b8:27:c6:
73:4b:29:b6:fc:f5:61:16:d5:25:df:b0:9c:09:75:
97:a2:b1:3f:6f:73:2c:85:94:a5:51:a8:6c:ed:c3:
52:d5:c0:fc:f2:e6:29:c8:19:ed:64:ce:c4:89:eb:
6a:2c:7d:cf:68:ed:07:f4:8d:44:ea:3e:51:32:ff:
33:4f:dd:6f:82:da:35:a4:90:d5:e2:a5:5c:c7:f3:
97:81:13:1f:46:18:b6:d9:21:1e:c1:75:84:ec:1a:
69:a8:b2:df:1f:71:9b:9e:df:2e:39:f5:a8:32:eb:
b4:25:4e:b2:63:31:ec:dc:59:05:48:73:44:8e:92:
f4:cd:5b:6c:1d:f4:54:d9:03:26:c8:cc:7c:84:86:
88:9f:bb:8f:b3:67:b8:7b:b3:1c:dd:50:18:c6:13:
2e:36:cc:cc:72:24:0d:6d:39:8d:8f:4f:f4:57:ef:
c2:03:e4:a2:57:bf:f8:27:6c:c1:21:a0:b1:c2:13:
9f:16:6a:90:b0:e4:c9:5c:df:0d:47:dd:bd:f4:51:
71:85:0c:6e:89:10:63:85:24:67:ec:cd:3a:7c:48:
44:15:a4:8b:4b:61:81:49:3a:25:bf:9a:4f:3a:16:
58:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:6F:78:16:6A:A4:48:E0:36:32:C4:20:97:65:80:CE:67:81:60:AF
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/Bm94FmqkSOA2MsQgl2WAzmeBYK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.51.0.0-201.51.9.255
201.51.11.0-201.51.13.255
Signature Algorithm: sha256WithRSAEncryption
86:79:8f:e6:66:fb:41:bd:65:0b:ec:70:f1:bc:c4:b4:ad:5b:
6b:2d:6f:98:5f:64:de:aa:66:5f:65:23:97:2e:87:63:dd:8f:
f9:81:2a:65:8b:a9:9a:70:6d:4d:84:ef:61:21:9a:be:86:be:
a0:17:44:38:9e:42:78:d1:1c:57:65:b7:88:6a:5b:a3:4e:93:
db:d1:30:1a:5f:ee:31:fb:7a:b3:c7:d2:62:4a:c4:9e:68:b9:
5a:82:f6:0a:27:a5:65:0d:2c:01:7b:bc:d2:d7:bc:24:d5:c1:
01:a5:71:93:15:47:88:ea:6c:eb:5e:a3:0d:81:9b:cc:84:25:
a6:e1:a0:70:6c:17:e7:6d:4b:13:b4:60:83:18:c5:38:17:2b:
f0:d6:bc:bd:10:b6:09:b9:c7:7f:9e:f4:34:2f:71:54:1b:02:
10:ac:63:62:3d:c3:ca:40:6a:b4:1c:3f:4c:9a:fd:0c:4f:ed:
41:48:68:ab:e8:83:6d:55:48:dd:47:3d:a1:48:82:72:83:05:
44:87:ff:a4:f4:7f:a8:32:fa:69:9a:9c:bb:92:62:ca:51:43:
36:45:74:86:08:90:ec:56:5e:32:0d:aa:03:d6:f7:11:bc:14:
52:77:19:83:30:a7:29:7c:fb:f3:06:11:74:24:9b:40:89:2c:
a4:dc:4a:b0
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAaF8pALj5oGDSYS29WcxamCeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZmEyNjIzYjIyMmQwOGQ5MzU2OTc1MDQ0Yjk0MDdiNWZl
YTQ4YmEwHhcNMjYxMDI3MDkxNDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjZmNzgxNjZhYTQ0OGUwMzYzMmM0MjA5NzY1ODBjZTY3ODE2MGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppe3BYYfbHZ/k0GYVunv9RlrbMRJ
bc7vWNi4J8ZzSym2/PVhFtUl37CcCXWXorE/b3MshZSlUahs7cNS1cD88uYpyBnt
ZM7EietqLH3PaO0H9I1E6j5RMv8zT91vgto1pJDV4qVcx/OXgRMfRhi22SEewXWE
7BppqLLfH3Gbnt8uOfWoMuu0JU6yYzHs3FkFSHNEjpL0zVtsHfRU2QMmyMx8hIaI
n7uPs2e4e7Mc3VAYxhMuNszMciQNbTmNj0/0V+/CA+SiV7/4J2zBIaCxwhOfFmqQ
sOTJXN8NR9299FFxhQxuiRBjhSRn7M06fEhEFaSLS2GBSTolv5pPOhZYvwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFAZveBZqpEjgNjLEIJdlgM5ngWCvMB8GA1UdIwQY
MBaAFGn6JiOyItCNk1aXUES5QHtf6ki6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWZvbUk3SWkwSTJUVnBkUVJMbEFlMV9xU0xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9kZGI0MjQtN2ViMi00OTVlLThiYjYt
NzJmYjk3ZDU5Y2U0LzEvQm05NEZtcWtTT0EyTXNRZ2wyV0F6bWVCWUs4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9kZGI0MjQtN2ViMi00OTVlLThiYjYtNzJmYjk3ZDU5Y2U0
LzEvYWZvbUk3SWkwSTJUVnBkUVJMbEFlMV9xU0xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAATAbMAsDAwDJMwME
AckzCDAMAwQAyTMLAwQByTMMMA0GCSqGSIb3DQEBCwUAA4IBAQCGeY/mZvtBvWUL
7HDxvMS0rVtrLW+YX2TeqmZfZSOXLodj3Y/5gSpli6macG1NhO9hIZq+hr6gF0Q4
nkJ40RxXZbeIalujTpPb0TAaX+4x+3qzx9JiSsSeaLlagvYKJ6VlDSwBe7zS17wk
1cEBpXGTFUeI6mzrXqMNgZvMhCWm4aBwbBfnbUsTtGCDGMU4Fyvw1ry9ELYJucd/
nvQ0L3FUGwIQrGNiPcPKQGq0HD9Mmv0MT+1BSGir6INtVUjdRz2hSIJygwVEh/+k
9H+oMvppmpy7kmLKUUM2RXSGCJDsVl4yDaoD1vcRvBRSdxmDMKcpfPvzBhF0JJtA
iSyk3Eqw
-----END CERTIFICATE-----
Generated at Sun Nov 15 08:47:51 2026 by rpki-client