Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/bS-3WMJ6trSXUQQ2QseYp1ckPmk.roa
File: bS-3WMJ6trSXUQQ2QseYp1ckPmk.roa (raw, json)
Hash identifier: 1o5QP1lg7Qvj3p2KPzx+G8MOKCcn1rBG+1ZUO/A8sgQ=
Subject key identifier: 6D:2F:B7:58:C2:7A:B6:B4:97:51:04:36:42:C7:98:A7:57:24:3E:69
Certificate issuer: /CN=3bd9436d2135c084897b74c6ad36da1700a7a98d
Certificate serial: 019FF644CB472694C1395DEC72E25B740C09
Authority key identifier: 3B:D9:43:6D:21:35:C0:84:89:7B:74:C6:AD:36:DA:17:00:A7:A9:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/bS-3WMJ6trSXUQQ2QseYp1ckPmk.roa
Signing time: Wed 12 Aug 2026 13:58:51 +0000
ROA not before: Wed 12 Aug 2026 13:58:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61287
IP address blocks: 185.12.128.0/22 maxlen: 22
185.12.128.0/23 maxlen: 23
185.12.130.0/23 maxlen: 23
2a03:8d40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f6:44:cb:47:26:94:c1:39:5d:ec:72:e2:5b:74:0c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bd9436d2135c084897b74c6ad36da1700a7a98d
Validity
Not Before: Aug 12 13:58:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d2fb758c27ab6b49751043642c798a757243e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ea:a9:22:a9:90:3a:04:20:31:61:8b:a0:00:
09:c9:64:f7:23:6d:e0:01:8d:94:ff:36:02:f2:0c:
54:09:d3:3a:30:52:d9:42:4a:31:41:03:3d:f8:f1:
2e:b9:c8:5b:50:fc:29:9f:5b:22:b7:59:c0:4d:5f:
f1:4a:79:72:f5:d3:09:2d:04:e1:f8:0d:ed:2e:ba:
56:b2:e8:2a:eb:0c:05:c4:4d:39:0b:04:40:72:f9:
86:da:97:1b:31:4b:86:d5:d7:6e:fc:68:e9:d6:81:
49:78:6d:71:47:16:60:33:ae:69:82:9b:c1:c0:f2:
f9:e6:49:fc:26:aa:3f:78:67:18:a6:9a:43:4a:62:
7c:ac:c7:45:b8:db:e0:d4:76:b9:ad:6d:99:dd:68:
70:97:36:72:69:3c:4c:5a:d9:d3:8a:93:45:1d:df:
62:13:7d:b7:df:6e:77:43:2e:39:3d:20:88:8b:65:
26:e5:f7:de:8c:17:dc:c2:e9:d1:88:d3:3e:b7:96:
2f:be:0a:bc:1a:cc:77:8d:47:45:65:b2:d1:25:ff:
2d:fb:24:ad:3b:b6:b2:f0:0c:7b:ef:b4:b4:19:ee:
35:8b:0f:ed:2d:83:0e:3b:a6:48:bf:f6:11:60:dd:
ad:71:c5:5a:1b:a3:04:a5:88:b5:da:11:48:1c:12:
62:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2F:B7:58:C2:7A:B6:B4:97:51:04:36:42:C7:98:A7:57:24:3E:69
X509v3 Authority Key Identifier:
keyid:3B:D9:43:6D:21:35:C0:84:89:7B:74:C6:AD:36:DA:17:00:A7:A9:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9lDbSE1wISJe3TGrTbaFwCnqY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/bS-3WMJ6trSXUQQ2QseYp1ckPmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/c53c3e-aa2d-41ab-a312-2637d13338f1/1/O9lDbSE1wISJe3TGrTbaFwCnqY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.12.128.0/22
IPv6:
2a03:8d40::/32
Signature Algorithm: sha256WithRSAEncryption
40:1f:07:72:19:6e:81:f2:30:54:03:82:4f:7e:f5:9e:82:b9:
1d:35:cf:26:96:c3:96:89:dc:0b:c7:0a:f8:1e:55:fe:ae:3d:
38:f0:16:45:47:97:ec:77:88:ac:19:5f:e3:6a:0b:e2:27:b8:
f0:64:a8:82:6f:79:c8:ec:9a:52:05:39:88:aa:06:43:61:a9:
ac:42:52:60:ce:48:6d:ed:86:04:bf:75:37:b5:93:3d:27:11:
17:cb:ff:79:10:8b:85:21:2f:ae:ff:7e:f4:dc:e5:f8:1d:93:
96:23:aa:f0:c9:35:e2:0b:d4:46:92:1c:20:23:dd:29:a8:1e:
35:2f:0f:08:3f:62:67:a9:4d:4e:d4:37:79:19:d0:2f:3d:d3:
6e:71:0d:8c:01:41:0e:2f:02:f3:3c:f6:f1:2a:a4:a8:50:af:
5c:cc:43:86:64:58:de:0e:42:af:db:dd:ca:df:ba:1b:1b:8f:
0c:50:7b:89:ab:0e:65:c4:57:e9:1b:d1:49:8d:76:c7:e0:33:
2f:7b:48:cb:7a:f1:f8:0a:4a:58:f1:1c:ab:e4:9f:e5:6f:a1:
7b:a6:db:7f:8e:d5:82:d9:4e:99:01:ca:4f:24:c1:31:90:c7:
8c:5b:ac:94:1d:47:92:09:a0:83:32:76:d3:02:c6:94:b8:50:
71:44:41:fd
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ/2RMtHJpTBOV3scuJbdAwJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZDk0MzZkMjEzNWMwODQ4OTdiNzRjNmFkMzZkYTE3MDBh
N2E5OGQwHhcNMjYwODEyMTM1ODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDJmYjc1OGMyN2FiNmI0OTc1MTA0MzY0MmM3OThhNzU3MjQzZTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuqpIqmQOgQgMWGLoAAJyWT3I23g
AY2U/zYC8gxUCdM6MFLZQkoxQQM9+PEuuchbUPwpn1sit1nATV/xSnly9dMJLQTh
+A3tLrpWsugq6wwFxE05CwRAcvmG2pcbMUuG1ddu/Gjp1oFJeG1xRxZgM65pgpvB
wPL55kn8Jqo/eGcYpppDSmJ8rMdFuNvg1Ha5rW2Z3WhwlzZyaTxMWtnTipNFHd9i
E3233253Qy45PSCIi2Um5ffejBfcwunRiNM+t5Yvvgq8Gsx3jUdFZbLRJf8t+ySt
O7ay8Ax777S0Ge41iw/tLYMOO6ZIv/YRYN2tccVaG6MEpYi12hFIHBJidQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFG0vt1jCera0l1EENkLHmKdXJD5pMB8GA1UdIwQY
MBaAFDvZQ20hNcCEiXt0xq022hcAp6mNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzlsRGJTRTF3SVNKZTNUR3JUYmFGd0NucVkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9jNTNjM2UtYWEyZC00MWFiLWEzMTIt
MjYzN2QxMzMzOGYxLzEvYlMtM1dNSjZ0clNYVVFRMlFzZVlwMWNrUG1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9jNTNjM2UtYWEyZC00MWFiLWEzMTItMjYzN2QxMzMzOGYx
LzEvTzlsRGJTRTF3SVNKZTNUR3JUYmFGd0NucVkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuQyAMA0E
AgACMAcDBQAqA41AMA0GCSqGSIb3DQEBCwUAA4IBAQBAHwdyGW6B8jBUA4JPfvWe
grkdNc8mlsOWidwLxwr4HlX+rj048BZFR5fsd4isGV/jagviJ7jwZKiCb3nI7JpS
BTmIqgZDYamsQlJgzkht7YYEv3U3tZM9JxEXy/95EIuFIS+u/3703OX4HZOWI6rw
yTXiC9RGkhwgI90pqB41Lw8IP2JnqU1O1Dd5GdAvPdNucQ2MAUEOLwLzPPbxKqSo
UK9czEOGZFjeDkKv293K37obG48MUHuJqw5lxFfpG9FJjXbH4DMve0jLevH4CkpY
8Ryr5J/lb6F7ptt/jtWC2U6ZAcpPJMExkMeMW6yUHUeSCaCDMnbTAsaUuFBxREH9
-----END CERTIFICATE-----
Generated at Thu Sep 10 21:55:22 2026 by rpki-client