Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/bMKVFYdIM0_gtNgAPKfgAaQgoHI.roa
File: bMKVFYdIM0_gtNgAPKfgAaQgoHI.roa (raw, json)
Hash identifier: gbtQk58mXwV4OjnS71gzCTvx3ePqnPPIiihPViEZ0B0=
Subject key identifier: 6C:C2:95:15:87:48:33:4F:E0:B4:D8:00:3C:A7:E0:01:A4:20:A0:72
Certificate issuer: /CN=09dcf1e897e598ec3f1ab60bd443328726dedae4
Certificate serial: 01A14EF5CF95F5AEF72F6DA96059888DE6F2
Authority key identifier: 09:DC:F1:E8:97:E5:98:EC:3F:1A:B6:0B:D4:43:32:87:26:DE:DA:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/bMKVFYdIM0_gtNgAPKfgAaQgoHI.roa
Signing time: Sun 18 Oct 2026 12:21:34 +0000
ROA not before: Sun 18 Oct 2026 12:21:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202914
IP address blocks: 84.246.240.0/22 maxlen: 24
84.246.240.0/24 maxlen: 24
84.246.242.0/24 maxlen: 24
91.210.56.0/22 maxlen: 24
141.98.12.0/22 maxlen: 24
141.98.12.0/24 maxlen: 24
141.98.13.0/24 maxlen: 24
141.98.14.0/23 maxlen: 24
185.121.172.0/22 maxlen: 22
185.121.172.0/23 maxlen: 24
185.121.174.0/23 maxlen: 23
185.121.174.0/24 maxlen: 24
185.121.175.0/24 maxlen: 24
185.150.196.0/22 maxlen: 24
2a0d:3e80::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4e:f5:cf:95:f5:ae:f7:2f:6d:a9:60:59:88:8d:e6:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09dcf1e897e598ec3f1ab60bd443328726dedae4
Validity
Not Before: Oct 18 12:21:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6cc295158748334fe0b4d8003ca7e001a420a072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:34:8f:14:77:96:b9:90:14:b2:27:28:60:c1:
a6:17:9e:24:7c:2c:5c:06:7c:58:01:6f:c1:d2:9d:
eb:42:6c:95:a2:c8:96:72:3b:30:5d:d1:df:9d:00:
60:d5:ed:5b:e0:91:4f:29:79:e6:88:f8:b2:41:82:
a7:77:5b:e5:de:eb:b3:b8:35:50:ef:12:80:6d:47:
f2:d6:e9:8f:b7:e1:56:dd:b6:98:76:24:2e:28:66:
ec:f6:35:3f:ed:cb:e1:d0:98:b3:77:4d:b5:96:68:
df:ec:38:b4:7d:48:e4:75:96:95:09:bf:03:4e:b4:
4f:c1:03:24:29:94:68:70:7c:4e:df:df:45:4c:5c:
17:f6:13:d3:15:34:9c:4d:2e:72:e8:df:4b:60:fb:
f5:be:43:41:9a:52:fb:7d:33:74:8d:34:6d:86:17:
20:a6:ab:36:e8:f8:18:41:d3:89:86:41:35:79:2f:
db:55:5f:99:b7:dd:e1:f7:0d:25:72:02:f2:39:aa:
d4:e2:6b:bd:b0:cf:4f:89:9c:31:65:d6:c8:f8:ba:
cf:7e:6e:00:b9:56:d3:5c:2b:f7:51:97:9d:51:f4:
3f:24:58:8e:18:88:7c:a8:94:23:18:4b:9d:b4:56:
3a:59:61:5e:2e:47:0e:19:b7:38:6d:f3:63:15:45:
4e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C2:95:15:87:48:33:4F:E0:B4:D8:00:3C:A7:E0:01:A4:20:A0:72
X509v3 Authority Key Identifier:
keyid:09:DC:F1:E8:97:E5:98:EC:3F:1A:B6:0B:D4:43:32:87:26:DE:DA:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/bMKVFYdIM0_gtNgAPKfgAaQgoHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.240.0/22
91.210.56.0/22
141.98.12.0/22
185.121.172.0/22
185.150.196.0/22
IPv6:
2a0d:3e80::/29
Signature Algorithm: sha256WithRSAEncryption
9e:0b:90:e2:a3:4e:53:ea:80:89:e1:2a:1d:4e:b1:30:c1:a8:
0f:41:2e:15:c0:5c:c9:61:9d:02:eb:39:d5:5d:87:a5:8e:c0:
be:91:ce:02:02:75:b9:97:b5:29:8c:ce:58:1c:7a:4b:ef:24:
c2:bd:0c:ba:38:ea:04:9e:30:e6:01:32:a7:5e:99:0d:bc:dc:
88:95:8c:54:29:ce:78:40:f3:ab:4f:fa:39:ee:35:0f:b8:33:
7e:32:68:21:cf:3e:f6:2c:ad:86:bd:cd:b2:3e:77:a2:ff:31:
af:5d:32:ca:f3:00:45:7c:cc:af:bc:bf:25:b0:c7:6d:da:3e:
a0:04:6d:30:18:d4:22:67:79:24:34:60:9f:d1:73:ae:9b:f8:
24:ff:0f:5b:4a:49:dd:06:03:2d:de:1e:6d:87:e1:63:6c:8f:
cc:e7:78:5c:2a:5e:81:10:a0:73:87:11:23:5c:68:47:5a:25:
0d:44:86:f5:56:00:e9:0f:6c:72:d8:30:c7:59:3c:c9:d8:a4:
ee:ea:b4:bb:4d:cf:d3:9e:79:b6:91:b1:95:d4:d9:30:ec:5c:
8a:14:c8:17:49:5f:68:db:78:7b:9d:b6:77:41:33:de:af:c1:
a5:67:43:b2:30:32:11:4c:88:2a:03:18:be:6d:5f:55:66:7e:
1e:7a:84:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 13:02:59 2026 by rpki-client