Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/bIeZHg3Uhc7PxzDnAJbvoR_eDis.roa
File: bIeZHg3Uhc7PxzDnAJbvoR_eDis.roa (raw, json)
Hash identifier: 0mAuojM4+s3m+PHBAZ0OOPnrAMWk8qmOfpDqg61GYeY=
Subject key identifier: 6C:87:99:1E:0D:D4:85:CE:CF:C7:30:E7:00:96:EF:A1:1F:DE:0E:2B
Certificate issuer: /CN=64d4e8723450d0a710c32d90ffea18529104e538
Certificate serial: 01A0519AC48B00BC169223702B29C860125B
Authority key identifier: 64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/bIeZHg3Uhc7PxzDnAJbvoR_eDis.roa
Signing time: Sun 30 Aug 2026 07:38:12 +0000
ROA not before: Sun 30 Aug 2026 07:38:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48031
IP address blocks: 91.207.60.0/24 maxlen: 24
91.217.91.0/24 maxlen: 24
176.103.48.0/20 maxlen: 20
176.103.48.0/21 maxlen: 21
176.103.56.0/22 maxlen: 22
176.103.60.0/23 maxlen: 23
176.103.62.0/23 maxlen: 23
193.169.86.0/23 maxlen: 23
2001:678:334::/48 maxlen: 48
2a13:f580::/48 maxlen: 48
2a13:f580:1::/48 maxlen: 48
2a13:f580:2::/48 maxlen: 48
2a13:f580:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 13:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:51:9a:c4:8b:00:bc:16:92:23:70:2b:29:c8:60:12:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d4e8723450d0a710c32d90ffea18529104e538
Validity
Not Before: Aug 30 07:38:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c87991e0dd485cecfc730e70096efa11fde0e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:06:34:50:cd:6e:75:55:f9:a8:f1:0c:14:a6:
17:5b:b3:1c:5a:18:4d:b9:20:c5:10:b9:8f:23:f9:
3b:4d:2e:23:91:98:91:63:4e:e2:d4:87:3f:8f:3d:
79:af:59:ff:e1:4b:20:e1:dd:b7:8d:fd:02:61:f0:
a9:a3:f1:9f:90:ec:ed:24:87:70:c3:58:ce:a8:5a:
28:51:14:e4:bb:11:4a:23:28:1b:52:60:3c:79:97:
f7:b3:45:42:5b:98:75:19:d1:f4:0e:c2:94:28:0a:
f5:e0:91:0d:f6:29:d3:74:f9:93:b3:01:3a:bb:0d:
01:4b:60:41:11:51:b3:e1:2a:9e:8a:ad:77:f0:d3:
78:d8:30:77:1d:ea:a7:2f:ae:93:a1:68:4c:2e:91:
5c:58:ff:52:ab:33:34:93:e6:e3:12:43:bf:85:56:
44:cb:e5:92:a2:12:ca:b8:17:c8:b1:c3:2b:ee:bb:
2f:4c:27:57:48:17:bd:8e:f7:19:cb:82:4f:3a:df:
d1:e6:29:e9:89:04:0c:1c:1e:4c:09:73:af:b1:a5:
2c:60:1e:49:5b:47:3b:70:56:1e:c8:56:9b:f1:ca:
4a:68:e7:d9:23:cf:87:74:00:89:b6:26:29:b5:71:
25:f1:f9:25:a0:ef:dc:a2:67:17:11:f1:8d:2c:66:
b1:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:87:99:1E:0D:D4:85:CE:CF:C7:30:E7:00:96:EF:A1:1F:DE:0E:2B
X509v3 Authority Key Identifier:
keyid:64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/bIeZHg3Uhc7PxzDnAJbvoR_eDis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.60.0/24
91.217.91.0/24
176.103.48.0/20
193.169.86.0/23
IPv6:
2001:678:334::/48
2a13:f580::-2a13:f580:2:ffff:ffff:ffff:ffff:ffff
2a13:f580:4::/48
Signature Algorithm: sha256WithRSAEncryption
ae:17:e0:bb:dc:89:36:25:0d:0e:8e:11:cc:69:9e:7e:20:70:
89:20:fb:aa:15:ac:00:13:ad:2c:a6:fd:e9:47:9e:eb:1b:ce:
f5:31:4c:f6:65:ed:16:11:ad:93:92:47:ca:6b:fb:a7:8c:aa:
18:94:4d:93:60:f5:a0:18:81:71:89:be:24:e2:66:eb:89:57:
18:61:33:e6:c7:dc:15:f6:71:07:18:b5:28:b1:0a:c2:f6:e9:
df:53:70:93:67:09:32:57:01:32:6b:1b:79:0d:e1:d2:32:2a:
55:ab:39:f7:6e:5c:6e:29:da:03:1b:51:c1:07:5e:42:5d:67:
00:39:28:5b:b7:ea:e5:17:64:4e:b0:99:f7:1c:01:8b:50:9f:
24:25:4d:2c:c6:05:38:d2:65:22:a4:eb:bb:a9:fc:cc:71:05:
82:a4:f3:11:0e:f7:8d:3d:aa:c3:ad:97:ff:25:a5:8b:d5:90:
70:cf:c2:e1:24:49:08:79:59:dd:45:ca:f3:04:df:78:d6:39:
10:72:3a:e4:a5:70:fd:34:2e:cc:13:19:5e:eb:35:43:fb:8c:
e0:3b:10:3f:cb:cb:1a:b0:de:88:fc:a8:53:8e:53:7d:8e:12:
f4:22:00:7f:79:5c:70:be:cc:87:eb:20:21:05:6c:09:d4:3c:
01:fb:df:f5
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgISAaBRmsSLALwWkiNwKynIYBJbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZDRlODcyMzQ1MGQwYTcxMGMzMmQ5MGZmZWExODUyOTEw
NGU1MzgwHhcNMjYwODMwMDczODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Yzg3OTkxZTBkZDQ4NWNlY2ZjNzMwZTcwMDk2ZWZhMTFmZGUwZTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQY0UM1udVX5qPEMFKYXW7McWhhN
uSDFELmPI/k7TS4jkZiRY07i1Ic/jz15r1n/4Usg4d23jf0CYfCpo/GfkOztJIdw
w1jOqFooURTkuxFKIygbUmA8eZf3s0VCW5h1GdH0DsKUKAr14JEN9inTdPmTswE6
uw0BS2BBEVGz4Sqeiq138NN42DB3HeqnL66ToWhMLpFcWP9SqzM0k+bjEkO/hVZE
y+WSohLKuBfIscMr7rsvTCdXSBe9jvcZy4JPOt/R5inpiQQMHB5MCXOvsaUsYB5J
W0c7cFYeyFab8cpKaOfZI8+HdACJtiYptXEl8fkloO/comcXEfGNLGax/wIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFGyHmR4N1IXOz8cw5wCW76Ef3g4rMB8GA1UdIwQY
MBaAFGTU6HI0UNCnEMMtkP/qGFKRBOU4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk5Ub2NqUlEwS2NRd3kyUV8tb1lVcEVFNVRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8yMzEwYjEtOTZhMS00OGU0LWFhNzIt
NDIyYWVkM2E3NzAyLzEvYkllWkhnM1VoYzdQeHpEbkFKYnZvUl9lRGlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8yMzEwYjEtOTZhMS00OGU0LWFhNzItNDIyYWVkM2E3NzAy
LzEvWk5Ub2NqUlEwS2NRd3kyUV8tb1lVcEVFNVRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDAeBAIAATAYAwQAW888AwQA
W9lbAwQEsGcwAwQBwalWMCoEAgACMCQDBwAgAQZ4AzQwEAMFByoT9YADBwAqE/WA
AAIDBwAqE/WAAAQwDQYJKoZIhvcNAQELBQADggEBAK4X4LvciTYlDQ6OEcxpnn4g
cIkg+6oVrAATrSym/elHnusbzvUxTPZl7RYRrZOSR8pr+6eMqhiUTZNg9aAYgXGJ
viTiZuuJVxhhM+bH3BX2cQcYtSixCsL26d9TcJNnCTJXATJrG3kN4dIyKlWrOfdu
XG4p2gMbUcEHXkJdZwA5KFu36uUXZE6wmfccAYtQnyQlTSzGBTjSZSKk67up/Mxx
BYKk8xEO9409qsOtl/8lpYvVkHDPwuEkSQh5Wd1FyvME33jWORByOuSlcP00LswT
GV7rNUP7jOA7ED/Lyxqw3oj8qFOOU32OEvQiAH95XHC+zIfrICEFbAnUPAH73/U=
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:55:01 2026 by rpki-client