Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/B3bav0t0hDiX1W337kB25C5HGY4.roa
File: B3bav0t0hDiX1W337kB25C5HGY4.roa (raw, json)
Hash identifier: qbQKkq3fonzHSYx+gIqNbMAHU+K4oKU4ecnvT3bxWu8=
Subject key identifier: 07:76:DA:BF:4B:74:84:38:97:D5:6D:F7:EE:40:76:E4:2E:47:19:8E
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01A155C9EC4667C302BA50BDB67405EA0BCD
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/B3bav0t0hDiX1W337kB25C5HGY4.roa
Signing time: Mon 19 Oct 2026 20:10:58 +0000
ROA not before: Mon 19 Oct 2026 20:10:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34346
IP address blocks: 45.149.26.0/24 maxlen: 24
89.21.85.0/24 maxlen: 24
89.21.87.0/24 maxlen: 24
89.251.24.0/24 maxlen: 24
91.200.223.0/24 maxlen: 24
109.122.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:c9:ec:46:67:c3:02:ba:50:bd:b6:74:05:ea:0b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Oct 19 20:10:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0776dabf4b74843897d56df7ee4076e42e47198e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:01:af:35:8f:74:93:79:79:67:46:89:9b:ed:
16:6d:63:d7:55:8d:ef:4e:fc:cb:39:f2:a6:3c:b5:
af:b3:a2:f5:a4:3c:0c:f0:68:58:d9:87:f9:c8:ed:
97:ab:0e:52:bd:31:c5:05:6d:52:0d:0b:9a:2e:50:
99:54:8a:1e:90:9b:a4:eb:00:7a:ee:12:55:71:3b:
27:49:94:65:dd:41:a6:1b:89:67:9a:a3:6d:42:f0:
4d:16:ca:85:eb:58:74:51:2c:90:50:3a:df:18:5a:
0b:4e:d0:4a:d1:cf:01:d3:63:15:23:fb:ec:3b:a9:
9b:8c:23:2c:c7:45:f1:0f:23:fa:99:f9:6b:c1:c2:
3b:71:aa:f4:9c:9d:ce:44:98:ef:bc:44:55:62:91:
dd:da:d2:5f:91:56:36:93:43:ae:89:ad:d5:6c:f4:
e1:f0:75:46:58:c4:91:db:07:fb:21:9e:9d:b3:93:
8f:94:3c:fa:09:fa:50:f0:9b:42:0e:67:a8:a6:ad:
f8:83:78:b6:27:2c:82:18:d9:c7:f2:9f:ac:3b:e9:
03:b6:93:5d:ab:1a:1c:2d:63:ea:02:a8:6c:26:87:
b9:7f:c5:4f:30:0e:67:07:a9:a6:57:fb:83:c9:99:
14:af:f2:6a:90:f2:f0:ec:f8:84:a9:7a:4f:1e:18:
dc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:76:DA:BF:4B:74:84:38:97:D5:6D:F7:EE:40:76:E4:2E:47:19:8E
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/B3bav0t0hDiX1W337kB25C5HGY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.26.0/24
89.21.85.0/24
89.21.87.0/24
89.251.24.0/24
91.200.223.0/24
109.122.40.0/24
Signature Algorithm: sha256WithRSAEncryption
51:31:41:b8:2b:48:11:8a:65:dc:4b:89:e7:c3:aa:b6:c1:51:
b0:28:b2:12:39:51:74:ae:df:be:5a:35:57:f3:7c:71:b5:d3:
a5:06:01:cb:b3:d1:44:5e:2b:ed:d9:91:57:5e:72:72:83:d5:
db:76:f9:d6:dd:e1:19:5f:3a:94:cf:fe:5d:12:b5:5d:14:35:
55:b4:e1:10:da:c6:d1:1b:75:6e:08:db:cd:2a:35:03:cd:ea:
d4:25:45:d8:a1:44:db:9d:0c:11:a4:29:b2:38:7b:38:d5:ae:
8c:5d:2a:0c:ec:05:ea:c3:ea:68:88:fa:02:87:ea:cb:cb:24:
ef:d5:91:07:82:80:22:c3:f8:32:71:43:10:b2:81:fa:61:40:
8b:73:b0:aa:bc:97:33:f0:ad:be:bd:3b:ab:c1:cb:20:fa:1f:
0c:ce:a1:31:e5:e6:5e:ec:29:27:05:96:ab:f3:71:d0:c8:8d:
ea:2d:34:08:30:60:7b:b2:07:ca:ee:11:50:23:d3:16:3d:d7:
ea:18:6a:d2:ff:5a:df:b2:69:b0:b8:d1:11:0f:1c:1b:40:64:
f1:2a:81:af:87:b7:e9:46:1d:07:cc:8e:22:85:81:9b:d8:72:
d9:6d:1c:47:f7:3e:a3:5a:2f:96:b3:56:34:da:14:fe:2b:0f:
4d:c6:5f:b5
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAaFVyexGZ8MCulC9tnQF6gvNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjYxMDE5MjAxMDU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzc2ZGFiZjRiNzQ4NDM4OTdkNTZkZjdlZTQwNzZlNDJlNDcxOThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwGvNY90k3l5Z0aJm+0WbWPXVY3v
TvzLOfKmPLWvs6L1pDwM8GhY2Yf5yO2Xqw5SvTHFBW1SDQuaLlCZVIoekJuk6wB6
7hJVcTsnSZRl3UGmG4lnmqNtQvBNFsqF61h0USyQUDrfGFoLTtBK0c8B02MVI/vs
O6mbjCMsx0XxDyP6mflrwcI7car0nJ3ORJjvvERVYpHd2tJfkVY2k0Ouia3VbPTh
8HVGWMSR2wf7IZ6ds5OPlDz6CfpQ8JtCDmeopq34g3i2JyyCGNnH8p+sO+kDtpNd
qxocLWPqAqhsJoe5f8VPMA5nB6mmV/uDyZkUr/JqkPLw7PiEqXpPHhjciwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFAd22r9LdIQ4l9Vt9+5AduQuRxmOMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvQjNiYXYwdDBoRGlYMVczMzdrQjI1QzVIR1k0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQALZUaAwQA
WRVVAwQAWRVXAwQAWfsYAwQAW8jfAwQAbXooMA0GCSqGSIb3DQEBCwUAA4IBAQBR
MUG4K0gRimXcS4nnw6q2wVGwKLISOVF0rt++WjVX83xxtdOlBgHLs9FEXivt2ZFX
XnJyg9XbdvnW3eEZXzqUz/5dErVdFDVVtOEQ2sbRG3VuCNvNKjUDzerUJUXYoUTb
nQwRpCmyOHs41a6MXSoM7AXqw+poiPoCh+rLyyTv1ZEHgoAiw/gycUMQsoH6YUCL
c7CqvJcz8K2+vTurwcsg+h8MzqEx5eZe7CknBZar83HQyI3qLTQIMGB7sgfK7hFQ
I9MWPdfqGGrS/1rfsmmwuNERDxwbQGTxKoGvh7fpRh0HzI4ihYGb2HLZbRxH9z6j
Wi+Ws1Y02hT+Kw9Nxl+1
-----END CERTIFICATE-----
Generated at Sat Oct 24 01:58:19 2026 by rpki-client