Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/Mi6RCW6IACmMTBiLvpaxvFb847g.roa
File: Mi6RCW6IACmMTBiLvpaxvFb847g.roa (raw, json)
Hash identifier: GYQ8YLi49umTxS3Mp8PSu3d1D1eFBRP7it3u8bMdpqA=
Subject key identifier: 32:2E:91:09:6E:88:00:29:8C:4C:18:8B:BE:96:B1:BC:56:FC:E3:B8
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A12ED7793F7FCA237CFD2170AF64362D58
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/Mi6RCW6IACmMTBiLvpaxvFb847g.roa
Signing time: Mon 12 Oct 2026 06:40:35 +0000
ROA not before: Mon 12 Oct 2026 06:40:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209737
IP address blocks: 31.40.205.0/24 maxlen: 24
85.235.73.0/24 maxlen: 24
85.235.74.0/24 maxlen: 24
92.249.60.0/24 maxlen: 24
92.249.62.0/24 maxlen: 24
176.96.128.0/24 maxlen: 24
193.32.184.0/24 maxlen: 24
193.32.185.0/24 maxlen: 24
193.111.79.0/24 maxlen: 24
217.18.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2e:d7:79:3f:7f:ca:23:7c:fd:21:70:af:64:36:2d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Oct 12 06:40:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=322e91096e8800298c4c188bbe96b1bc56fce3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:de:03:04:a1:bf:68:49:91:19:60:d8:68:d7:
60:10:3b:31:3e:eb:3b:65:6e:f5:28:51:62:5a:c5:
02:9e:f5:fa:0d:ea:20:86:39:53:a6:7b:72:8d:a9:
a1:73:56:28:ac:ac:02:aa:77:56:32:2f:e7:94:2e:
43:80:db:d5:57:cb:2f:1d:95:28:6c:c4:36:4a:f7:
ee:d3:3a:55:31:e8:c5:5a:41:0f:37:d8:35:79:5a:
20:b1:b7:37:d9:23:45:98:f0:37:78:47:a5:03:bd:
ab:66:77:c1:5a:d3:0d:27:3f:f3:f9:0a:54:48:3e:
07:26:79:d0:e5:dd:bc:dd:04:68:d5:50:e6:77:aa:
c8:9b:83:6d:85:d1:be:6b:d2:38:33:e5:83:a5:e5:
19:d2:df:d8:44:f6:f2:73:f1:ed:95:38:b4:1a:7b:
21:6d:fc:e1:c4:ba:a3:59:43:e2:82:bc:26:67:e5:
55:9e:00:e0:b1:29:fd:d4:84:60:84:72:54:9d:ce:
ae:f4:25:7b:c1:81:86:79:a8:cf:c4:0f:e6:78:2e:
0d:f9:f2:8c:ca:e4:43:26:84:54:f7:d4:a0:97:86:
1c:12:4e:49:83:4e:64:e7:9c:50:8c:ba:9e:4e:e2:
fa:9d:83:d2:b6:b2:69:cf:ff:6b:7b:d3:dc:82:6a:
70:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:2E:91:09:6E:88:00:29:8C:4C:18:8B:BE:96:B1:BC:56:FC:E3:B8
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/Mi6RCW6IACmMTBiLvpaxvFb847g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.40.205.0/24
85.235.73.0-85.235.74.255
92.249.60.0/24
92.249.62.0/24
176.96.128.0/24
193.32.184.0/23
193.111.79.0/24
217.18.208.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:78:5d:5c:4c:74:25:6d:0b:9e:12:0d:24:0a:73:f4:e9:d9:
e8:34:2a:f7:af:17:bc:c6:db:bb:96:d6:7a:65:b8:86:55:bb:
df:c6:82:89:a3:7a:0b:9b:0d:28:67:9e:6c:2b:c2:8f:5e:d1:
69:fe:9b:e8:8b:c4:b7:ad:bc:2b:30:52:c8:4f:f0:93:41:9f:
47:b6:bf:78:e6:06:44:25:4a:2a:cd:e9:36:73:d1:c1:aa:e6:
6c:37:61:dc:05:4f:f4:6e:67:f1:ed:52:26:9b:4d:f6:ea:3d:
bf:84:e9:06:53:20:69:26:50:d1:2e:f4:5d:09:2e:4d:59:d7:
57:41:97:93:76:1d:1c:28:84:66:b9:19:5a:9c:de:66:ba:28:
fd:ca:ab:e0:66:15:8e:b8:ad:f0:18:57:41:d3:47:55:b2:2c:
6c:6b:fb:a6:81:7f:b9:76:2e:61:2a:9a:c5:49:2c:ce:30:0b:
90:e2:6f:f6:31:49:f8:61:8c:9e:dc:bf:8f:72:1a:0e:59:a7:
a8:98:2e:bd:44:1d:02:ec:28:28:b0:c5:89:3a:91:9e:dd:f0:
8e:e0:f1:8e:e5:c9:a6:bf:cd:71:fe:5f:02:65:d8:6f:6d:07:
f5:c1:48:79:0c:20:bb:93:e7:37:68:93:08:14:c0:a4:8a:06:
49:5e:5b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:47:04 2026 by rpki-client