Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/BIsCV-yWcFXQhnmlMMlsDm3h-uM.roa
File: BIsCV-yWcFXQhnmlMMlsDm3h-uM.roa (raw, json)
Hash identifier: x1HdnC8VQIIwXch3xUdE0ehAwnjU8Ct5Jcy6U24BIMg=
Subject key identifier: 04:8B:02:57:EC:96:70:55:D0:86:79:A5:30:C9:6C:0E:6D:E1:FA:E3
Certificate issuer: /CN=3cf615f06d23228c769a85faf0510393d064e0e0
Certificate serial: 01A0D06DF93E2B6FCE39A6B5B897357DCE10
Authority key identifier: 3C:F6:15:F0:6D:23:22:8C:76:9A:85:FA:F0:51:03:93:D0:64:E0:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/BIsCV-yWcFXQhnmlMMlsDm3h-uM.roa
Signing time: Wed 23 Sep 2026 22:41:03 +0000
ROA not before: Wed 23 Sep 2026 22:41:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47376
IP address blocks: 91.222.196.0/24 maxlen: 24
91.222.197.0/24 maxlen: 24
103.215.220.0/24 maxlen: 24
103.215.223.0/24 maxlen: 24
195.28.11.0/24 maxlen: 24
195.234.191.0/24 maxlen: 24
195.238.231.0/24 maxlen: 24
195.238.240.0/24 maxlen: 24
2a05:63c0::/29 maxlen: 29
2a0f:c040::/29 maxlen: 29
2a10:ef00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:6d:f9:3e:2b:6f:ce:39:a6:b5:b8:97:35:7d:ce:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cf615f06d23228c769a85faf0510393d064e0e0
Validity
Not Before: Sep 23 22:41:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=048b0257ec967055d08679a530c96c0e6de1fae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:33:76:18:1c:13:d0:f4:f2:ca:90:eb:f2:4f:
cd:f0:d2:2f:8e:dd:76:23:24:c1:f8:dc:33:69:81:
38:86:c7:07:c3:4e:c9:32:f3:cf:16:e6:63:45:3d:
61:16:25:d4:a1:2f:5e:be:f6:03:86:bb:1d:06:96:
52:29:b5:f3:1e:a0:61:77:8c:27:f6:3f:bc:8b:24:
5f:09:8d:76:b0:f0:27:3f:d5:3e:dc:75:4e:72:22:
b5:83:0d:8f:e3:31:30:f5:a6:97:b5:26:66:b2:d3:
ad:d5:43:80:62:b3:57:ea:fc:ad:18:c3:97:3e:8f:
17:25:2e:ca:b4:57:b2:c7:91:73:67:56:28:8a:b2:
7d:07:74:67:e5:2d:78:b3:c8:58:48:0c:a9:bc:38:
0e:d3:51:14:cd:ba:80:e2:da:88:5d:2d:08:f5:0b:
a1:17:cb:08:c8:14:39:1f:cc:30:54:74:2a:94:7b:
98:bb:58:7d:ab:e3:7f:95:c5:a6:1a:dd:38:c9:72:
fc:0f:fc:00:a7:9d:0b:91:24:52:ff:df:5e:0a:aa:
d0:d3:35:46:8b:26:c8:f0:d5:70:2b:4d:e9:d9:e2:
ee:b4:2d:33:15:44:cf:45:5d:57:2d:24:ad:31:f0:
d8:9c:a9:09:95:91:71:47:be:08:e7:90:7f:4d:d8:
c8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8B:02:57:EC:96:70:55:D0:86:79:A5:30:C9:6C:0E:6D:E1:FA:E3
X509v3 Authority Key Identifier:
keyid:3C:F6:15:F0:6D:23:22:8C:76:9A:85:FA:F0:51:03:93:D0:64:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PPYV8G0jIox2moX68FEDk9Bk4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/BIsCV-yWcFXQhnmlMMlsDm3h-uM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c93a66-c7c7-4c33-a725-18d1a406aaed/1/PPYV8G0jIox2moX68FEDk9Bk4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.222.196.0/23
103.215.220.0/24
103.215.223.0/24
195.28.11.0/24
195.234.191.0/24
195.238.231.0/24
195.238.240.0/24
IPv6:
2a05:63c0::/29
2a0f:c040::/29
2a10:ef00::/29
Signature Algorithm: sha256WithRSAEncryption
4a:ca:ac:9e:d1:75:1b:0b:37:22:7d:75:df:16:3b:cd:a4:88:
19:3f:ca:2c:6c:24:71:55:48:52:d7:07:d0:7e:b2:d6:c6:ff:
7f:38:3a:38:7a:9e:71:59:77:29:05:05:da:4d:b3:da:1e:7f:
06:c2:fe:07:32:cd:11:65:76:a3:1b:ca:ab:81:df:9b:e5:bf:
f0:fa:ec:22:da:12:57:44:ef:ff:21:eb:6a:b4:67:d7:e3:a1:
c0:c5:f8:1e:be:ba:b1:8d:b3:e3:8d:4d:e5:7e:75:1f:a6:3f:
4f:09:31:8d:6b:a6:6e:44:14:03:a5:6e:3c:04:b9:85:c7:c2:
53:65:29:78:2a:d0:1b:71:17:e9:99:4d:d0:6e:e4:60:20:7a:
49:6d:04:cd:e5:61:8e:6e:a5:b7:02:8f:f4:40:4d:64:3a:a9:
c2:c6:37:13:a1:73:ed:9d:86:bf:a7:c0:14:ac:63:e7:30:5a:
db:aa:6d:46:1a:18:71:96:22:89:15:9b:b9:a9:47:04:93:3e:
7c:1a:2d:71:e2:61:88:b5:83:b3:25:37:38:97:16:9b:f6:95:
eb:74:eb:61:69:99:4e:3d:29:5a:af:20:2c:03:57:10:f3:b2:
8d:e6:b4:11:95:d8:02:7c:51:94:ae:0e:f9:8e:be:90:bb:be:
fa:02:28:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:58:00 2026 by rpki-client