Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/BaOM7EQowAQp3mVPiVLG92UAT5o.roa
File: BaOM7EQowAQp3mVPiVLG92UAT5o.roa (raw, json)
Hash identifier: Vir9bCNKr3xiAR3YQztvr+gFcAXrFl1bsNs/wks4Tw0=
Subject key identifier: 05:A3:8C:EC:44:28:C0:04:29:DE:65:4F:89:52:C6:F7:65:00:4F:9A
Certificate issuer: /CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Certificate serial: 019B7C80461115B7E9A4A2AAEAE1FAA64F7E
Authority key identifier: 43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/BaOM7EQowAQp3mVPiVLG92UAT5o.roa
Signing time: Fri 02 Jan 2026 02:18:59 +0000
ROA not before: Fri 02 Jan 2026 02:18:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197564
IP address blocks: 45.155.96.0/22 maxlen: 22
91.226.36.0/23 maxlen: 23
213.108.24.0/23 maxlen: 23
213.108.24.0/24 maxlen: 24
213.108.25.0/24 maxlen: 24
2001:67c:124c::/48 maxlen: 48
2a10:ba00:bee0::/48 maxlen: 48
2a10:ba00:bee1::/48 maxlen: 48
2a10:ba00:bee2::/48 maxlen: 48
2a10:ba00:bee3::/48 maxlen: 48
2a10:ba00:bee4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Feb 2026 00:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:80:46:11:15:b7:e9:a4:a2:aa:ea:e1:fa:a6:4f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Validity
Not Before: Jan 2 02:18:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05a38cec4428c00429de654f8952c6f765004f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:02:1d:67:23:a5:41:67:47:a4:5c:44:2f:8c:
e0:ad:73:bb:e4:23:46:12:df:d4:cd:20:43:3d:e6:
f9:76:22:50:3f:4a:a3:f9:bf:14:65:50:43:11:ac:
3c:d1:5f:c2:79:5d:17:98:28:6f:1f:42:de:53:b0:
49:4b:c8:25:ca:88:3c:39:bd:69:5d:56:74:9b:14:
e8:17:5e:fa:02:53:4a:7e:35:71:e9:95:9b:80:14:
0e:3b:c3:3d:e6:c7:88:d2:65:15:5c:0b:7f:0f:72:
1e:50:4e:d9:cd:54:fd:b6:e0:10:f2:00:af:d7:3b:
8e:10:e3:89:37:b7:49:e0:a8:8a:d8:f7:5e:42:71:
6f:8c:a7:0a:d1:3e:da:f6:27:8b:4c:a4:03:4e:f7:
6b:60:17:0b:ed:b7:b9:bc:1a:c0:26:9c:ad:7f:6f:
e1:14:19:ef:f8:66:8d:f8:5a:5e:d9:b2:98:1d:72:
b0:96:26:55:b4:1f:40:03:f7:96:44:6a:97:8c:51:
95:eb:a8:ac:34:19:e6:a2:4a:03:12:3e:38:54:d2:
83:24:c8:bb:07:4a:7d:af:0d:8d:35:7b:40:13:24:
22:f8:9f:18:6b:71:70:b1:eb:8a:62:a1:ad:a6:a9:
fa:02:78:7c:7d:a1:75:45:e3:2e:2e:2f:28:43:90:
5a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A3:8C:EC:44:28:C0:04:29:DE:65:4F:89:52:C6:F7:65:00:4F:9A
X509v3 Authority Key Identifier:
keyid:43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/BaOM7EQowAQp3mVPiVLG92UAT5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.96.0/22
91.226.36.0/23
213.108.24.0/23
IPv6:
2001:67c:124c::/48
2a10:ba00:bee0::-2a10:ba00:bee4:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
43:df:f1:af:3b:2f:81:e7:24:de:7b:4b:d4:95:3a:33:5e:85:
60:bf:13:d5:57:90:a7:c4:f3:1d:8c:5d:09:31:25:3a:2f:ca:
da:e3:7a:12:28:de:fe:63:5e:f3:63:d7:d4:cc:2b:93:1f:a9:
75:a3:34:dd:90:da:3c:76:4b:94:af:81:de:9f:a2:e2:3a:88:
3b:68:90:7a:a3:3a:c8:61:02:f1:ed:40:a9:c6:9f:d8:2f:81:
8f:89:37:a9:4a:72:cf:34:e6:73:29:96:a5:60:fa:e0:a2:ea:
ee:39:ac:38:45:2a:2d:8b:80:ca:a8:d9:b8:b3:9c:6e:22:0f:
3d:94:9c:36:3e:8e:fa:f6:63:6a:f2:24:62:24:a2:0b:3d:64:
55:b9:84:32:e2:f9:0c:df:1c:3d:85:1c:dd:a4:d6:a6:fa:cc:
a9:62:fa:9c:94:ec:25:95:41:09:25:58:0d:ba:15:16:7a:e4:
6a:c4:96:fd:69:64:47:7b:e8:c3:62:23:58:7c:9c:aa:f2:a9:
b0:c1:7a:a4:2a:c4:de:57:9d:ad:cd:f0:7a:fb:21:7c:ad:97:
bf:7c:30:b9:d8:cb:60:32:ab:93:f1:b0:72:b6:77:31:40:32:
d7:8d:e0:20:c7:f9:ba:b4:bf:70:5f:62:bf:12:67:14:1b:d8:
ab:73:c5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 07:24:31 2026 by rpki-client