Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/B1l-QLQBcABJMrGVkt4RsAVkA_E.roa
File: B1l-QLQBcABJMrGVkt4RsAVkA_E.roa (raw, json)
Hash identifier: VNAg7hkGxvRcIjC9KCBHAMc51fLJ79nQH+8byuV6Oes=
Subject key identifier: 07:59:7E:40:B4:01:70:00:49:32:B1:95:92:DE:11:B0:05:64:03:F1
Certificate issuer: /CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Certificate serial: 01A1662BC5962C9AE654AC5D314F5E871FA0
Authority key identifier: 4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/B1l-QLQBcABJMrGVkt4RsAVkA_E.roa
Signing time: Fri 23 Oct 2026 00:31:46 +0000
ROA not before: Fri 23 Oct 2026 00:31:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44932
IP address blocks: 91.228.132.0/23 maxlen: 24
91.228.132.0/24 maxlen: 24
91.228.133.0/24 maxlen: 24
91.229.46.0/23 maxlen: 24
91.229.46.0/24 maxlen: 24
91.229.47.0/24 maxlen: 24
185.49.105.0/24 maxlen: 24
185.80.198.0/23 maxlen: 24
185.80.198.0/24 maxlen: 24
185.80.199.0/24 maxlen: 24
185.147.176.0/22 maxlen: 24
185.147.176.0/24 maxlen: 24
185.147.177.0/24 maxlen: 24
185.147.178.0/24 maxlen: 24
185.147.179.0/24 maxlen: 24
188.209.116.0/22 maxlen: 24
188.209.116.0/24 maxlen: 24
188.209.117.0/24 maxlen: 24
188.209.118.0/24 maxlen: 24
188.209.119.0/24 maxlen: 24
2a0b:1fc0::/29 maxlen: 48
2a0b:1fc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:66:2b:c5:96:2c:9a:e6:54:ac:5d:31:4f:5e:87:1f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Validity
Not Before: Oct 23 00:31:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=07597e40b40170004932b19592de11b0056403f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c2:a4:28:9b:f4:1b:38:ea:bc:2b:be:e6:3a:
7b:6a:a5:5f:4d:4e:b0:86:0d:52:23:44:70:8a:7d:
1f:c1:c5:c8:dd:38:fa:0c:65:71:96:08:ac:9b:e2:
e8:f0:fa:a0:4f:63:59:5e:75:4f:e9:a4:c9:53:cd:
00:6d:2b:21:3d:53:d6:ab:45:48:85:b3:92:78:de:
2b:03:ca:35:c9:6e:4a:de:b6:9a:95:02:7a:32:09:
63:f2:36:4d:21:9c:79:ef:98:88:1b:b6:dc:52:5a:
8d:aa:dc:6f:1e:d0:40:8e:3b:1b:a3:07:62:80:4b:
dc:50:f9:72:2c:01:98:72:f5:4f:65:ed:11:f8:54:
65:5e:e9:c0:f6:b6:ff:66:e5:5d:90:43:07:68:92:
20:ea:55:cb:ca:73:dd:22:0c:fa:e7:2a:d7:f1:83:
53:c4:4d:6f:77:8d:39:f3:f7:97:b2:0f:f3:a4:be:
eb:da:16:56:4c:9f:60:31:d1:80:01:91:4e:5b:c5:
56:2c:cb:a7:11:cb:a8:48:e8:37:ee:c0:17:ea:3b:
9f:0a:1d:c8:5c:f4:95:a9:d3:23:cd:42:54:27:3a:
23:92:a6:8b:62:d7:59:23:fa:e8:09:4a:e5:1a:41:
de:73:88:31:b0:6d:d2:4c:b1:68:e0:4f:d9:fa:a2:
d0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:59:7E:40:B4:01:70:00:49:32:B1:95:92:DE:11:B0:05:64:03:F1
X509v3 Authority Key Identifier:
keyid:4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/B1l-QLQBcABJMrGVkt4RsAVkA_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.132.0/23
91.229.46.0/23
185.49.105.0/24
185.80.198.0/23
185.147.176.0/22
188.209.116.0/22
IPv6:
2a0b:1fc0::/29
Signature Algorithm: sha256WithRSAEncryption
49:94:12:ce:b0:9d:ca:4f:4b:b4:69:16:91:64:83:94:a9:e5:
6c:87:6d:56:78:7e:09:96:4f:7f:49:83:a8:9c:b5:7d:d4:07:
a0:3e:de:80:b8:ae:86:68:96:a8:95:9c:b8:0f:87:5d:70:94:
af:9e:9c:33:21:2c:76:50:2a:22:2f:9f:84:d3:a6:c3:2f:75:
df:39:a4:c8:c7:56:68:48:f8:ab:9b:07:68:13:8d:7a:b5:ae:
9b:6d:1a:94:bc:7a:1b:9a:82:2d:c8:00:97:9e:7f:e3:3c:43:
c1:a3:fc:f3:e2:e7:a4:6c:8d:65:87:fd:86:5e:66:f3:36:21:
52:26:80:0d:4e:c7:b6:9d:47:cb:18:bf:9d:6d:7f:12:6b:50:
33:e9:54:14:18:62:a8:41:99:c1:83:14:a7:fb:96:2e:0c:49:
2b:bd:ba:78:5c:85:c1:e0:67:ae:42:fe:c4:31:54:82:dc:86:
9f:ff:69:ae:a1:79:c3:4c:fc:22:a7:5c:29:3e:0c:1f:00:50:
c6:9c:28:f9:8d:46:09:c7:7e:63:1f:a5:a7:ad:13:8d:da:fe:
69:b5:94:83:2b:c7:ef:2b:9b:08:81:92:c4:2a:a4:eb:2f:1a:
55:ab:76:20:7d:44:fb:1b:ad:97:0a:73:67:94:03:86:83:52:
6a:c5:7f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:38:38 2026 by rpki-client