Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/bbCeI0gcrdJEbQysLJxjANiohZE.roa
File: bbCeI0gcrdJEbQysLJxjANiohZE.roa (raw, json)
Hash identifier: oG8FmKmodUCgjzGLEM0eyGJW2mVDzSmINHpgvQW+IsE=
Subject key identifier: 6D:B0:9E:23:48:1C:AD:D2:44:6D:0C:AC:2C:9C:63:00:D8:A8:85:91
Certificate issuer: /CN=4017b4c9f01da83469a9851f95106e396fd25e64
Certificate serial: 01A10AC7867A451F81C329144D67C9B82852
Authority key identifier: 40:17:B4:C9:F0:1D:A8:34:69:A9:85:1F:95:10:6E:39:6F:D2:5E:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QBe0yfAdqDRpqYUflRBuOW_SXmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/bbCeI0gcrdJEbQysLJxjANiohZE.roa
Signing time: Mon 05 Oct 2026 06:36:50 +0000
ROA not before: Mon 05 Oct 2026 06:36:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 81.87.0.0/16 maxlen: 16
83.138.32.0/21 maxlen: 21
89.207.208.0/21 maxlen: 21
128.86.0.0/17 maxlen: 17
146.97.0.0/16 maxlen: 16
193.60.0.0/14 maxlen: 14
194.66.0.0/16 maxlen: 16
194.80.0.0/14 maxlen: 14
195.194.0.0/15 maxlen: 15
212.121.0.0/19 maxlen: 19
212.121.192.0/19 maxlen: 19
212.219.0.0/16 maxlen: 16
2001:630::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/QBe0yfAdqDRpqYUflRBuOW_SXmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/QBe0yfAdqDRpqYUflRBuOW_SXmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QBe0yfAdqDRpqYUflRBuOW_SXmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:c7:86:7a:45:1f:81:c3:29:14:4d:67:c9:b8:28:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4017b4c9f01da83469a9851f95106e396fd25e64
Validity
Not Before: Oct 5 06:36:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6db09e23481cadd2446d0cac2c9c6300d8a88591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:29:15:8e:a2:50:1c:9c:59:87:a6:a3:bf:7a:
3a:87:de:68:27:a3:19:aa:a3:6a:2e:8e:10:ac:ec:
ad:75:8c:ae:52:94:0f:1c:3d:d4:8d:53:72:47:a4:
3b:2c:d3:57:7e:de:6f:37:3e:e3:e4:31:cd:a8:6e:
66:7c:26:8a:0c:a6:dd:21:15:91:60:15:eb:f8:d3:
75:91:70:1c:02:6c:16:db:01:29:ef:2c:ee:95:3a:
ce:46:a2:1b:db:de:cf:ac:a2:fc:7e:d7:c6:59:79:
49:40:6c:a4:5e:cd:9f:28:84:de:b7:64:f7:8d:d8:
ec:af:b6:f9:a1:51:3c:23:9c:fd:27:7f:0b:66:e0:
ca:57:7f:ce:c4:ff:58:5e:f2:27:3f:48:00:48:e4:
a5:09:ff:c7:4b:63:c8:33:c3:63:5e:9c:bc:3e:c8:
4c:ae:7e:14:47:c7:5a:50:fb:b7:07:17:cb:b6:d4:
ca:70:63:b7:ec:a4:36:aa:a4:e6:d5:42:9c:00:02:
88:54:67:34:c3:43:b2:1f:76:fe:d5:00:e2:cf:bb:
74:f6:13:8b:76:3f:e9:b3:9b:08:17:cb:52:54:71:
30:14:ed:50:b4:76:23:42:f6:97:61:86:d8:15:50:
25:49:86:e7:6c:cf:ce:31:00:d1:15:eb:ec:95:7d:
cb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B0:9E:23:48:1C:AD:D2:44:6D:0C:AC:2C:9C:63:00:D8:A8:85:91
X509v3 Authority Key Identifier:
keyid:40:17:B4:C9:F0:1D:A8:34:69:A9:85:1F:95:10:6E:39:6F:D2:5E:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBe0yfAdqDRpqYUflRBuOW_SXmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/bbCeI0gcrdJEbQysLJxjANiohZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/QBe0yfAdqDRpqYUflRBuOW_SXmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.87.0.0/16
83.138.32.0/21
89.207.208.0/21
128.86.0.0/17
146.97.0.0/16
193.60.0.0/14
194.66.0.0/16
194.80.0.0/14
195.194.0.0/15
212.121.0.0/19
212.121.192.0/19
212.219.0.0/16
IPv6:
2001:630::/32
Signature Algorithm: sha256WithRSAEncryption
e6:e0:66:d8:eb:df:8a:1a:b1:55:b2:1a:91:2d:d7:b0:4e:a7:
28:12:e0:29:f8:d1:94:8d:af:52:d6:c2:84:fa:ed:d9:83:3b:
1d:2c:54:3a:2b:19:d2:7e:f3:12:c2:b7:ea:89:4f:60:10:2b:
28:43:17:67:97:30:0b:d8:78:c4:aa:5e:40:b4:d1:e9:4c:b5:
b5:4e:5c:ba:04:2a:9c:60:c1:03:13:20:e2:dc:dc:19:bb:d6:
bc:2f:51:a0:81:e4:e5:3f:ba:27:f5:4d:dc:91:c4:28:6c:07:
2b:f2:1d:7e:c7:d4:eb:de:b1:65:fe:ab:06:65:09:f9:6a:c5:
fb:81:67:8a:c4:4a:9c:f9:36:22:82:79:e6:5b:c2:b8:8a:19:
79:48:9c:d7:20:80:90:41:25:9c:46:f8:16:68:38:25:e6:3b:
c4:fe:0b:da:a3:ab:f7:00:f9:8a:00:51:79:cc:1b:1d:44:fe:
70:67:d0:62:57:17:bc:84:76:e5:cd:22:59:49:91:b6:11:b2:
fc:d9:0d:81:24:5d:e6:34:1f:99:ef:d2:20:34:01:5c:61:09:
4c:f6:a8:52:a7:51:c3:a3:e8:7a:f9:3b:27:56:ff:a4:58:f9:
be:eb:27:7e:64:1a:91:9f:d9:be:36:72:b1:15:69:29:ee:bd:
ca:5d:86:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:51:06 2026 by rpki-client