Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/_Nt_jMCM0syV3YOypgtEhyWfleQ.roa
File: _Nt_jMCM0syV3YOypgtEhyWfleQ.roa (raw, json)
Hash identifier: WuW0pRT2Ay9tultoDSE8mYtKuVTzSPy9auWEqcscWzI=
Subject key identifier: FC:DB:7F:8C:C0:8C:D2:CC:95:DD:83:B2:A6:0B:44:87:25:9F:95:E4
Certificate issuer: /CN=05ca2317669a468d509a8aa1906befa75bf9c201
Certificate serial: 01A13CCF2F2C7716A2AB15A818ED635F825A
Authority key identifier: 05:CA:23:17:66:9A:46:8D:50:9A:8A:A1:90:6B:EF:A7:5B:F9:C2:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BcojF2aaRo1QmoqhkGvvp1v5wgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/_Nt_jMCM0syV3YOypgtEhyWfleQ.roa
Signing time: Wed 14 Oct 2026 23:46:13 +0000
ROA not before: Wed 14 Oct 2026 23:46:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39232
IP address blocks: 46.22.224.0/24 maxlen: 24
91.191.192.0/23 maxlen: 24
91.191.206.0/23 maxlen: 24
130.0.8.0/23 maxlen: 24
130.0.10.0/24 maxlen: 24
185.12.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/BcojF2aaRo1QmoqhkGvvp1v5wgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:cf:2f:2c:77:16:a2:ab:15:a8:18:ed:63:5f:82:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ca2317669a468d509a8aa1906befa75bf9c201
Validity
Not Before: Oct 14 23:46:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fcdb7f8cc08cd2cc95dd83b2a60b4487259f95e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ee:00:40:ac:2a:af:38:d3:ef:fa:1a:d7:33:
33:33:de:00:fd:52:aa:f0:f0:6a:d2:d8:e5:00:88:
3d:d7:c7:e0:48:79:a6:52:dc:a7:35:80:69:96:40:
d1:87:d4:a4:42:05:87:39:21:8c:d3:eb:b1:24:0c:
65:0a:ad:59:82:54:99:9a:83:c9:0e:22:e9:2f:e4:
43:89:0d:6a:b4:88:cb:55:8f:cf:f7:94:d3:2b:c9:
da:11:cb:85:04:e6:91:84:97:f7:81:b3:9b:20:57:
36:98:4a:92:f8:c4:eb:95:a3:44:29:67:98:3f:2e:
6a:1e:30:14:4e:f3:a5:36:87:44:2e:58:df:eb:9b:
54:1d:fc:bd:a4:16:37:cc:99:a6:b9:f2:3d:cd:20:
4c:91:b6:5a:d6:51:16:fc:81:f1:78:76:93:a9:f9:
62:96:df:f8:c2:45:b5:17:00:ed:9b:e5:df:de:b0:
85:96:32:69:45:74:7e:42:dc:a2:f6:39:57:da:f8:
0a:b4:4b:63:5f:8c:20:cb:0c:c2:90:c7:bb:8d:c1:
53:f1:24:ab:d1:9a:21:68:12:f8:ac:69:28:5f:33:
19:5d:6e:1a:f5:95:c0:35:a6:46:8d:47:28:b6:1a:
86:d5:60:37:b0:c9:62:b7:73:80:9d:d9:85:86:b9:
4b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:DB:7F:8C:C0:8C:D2:CC:95:DD:83:B2:A6:0B:44:87:25:9F:95:E4
X509v3 Authority Key Identifier:
keyid:05:CA:23:17:66:9A:46:8D:50:9A:8A:A1:90:6B:EF:A7:5B:F9:C2:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BcojF2aaRo1QmoqhkGvvp1v5wgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/_Nt_jMCM0syV3YOypgtEhyWfleQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bdecaa-d141-46b2-9d40-1331e651c79f/1/BcojF2aaRo1QmoqhkGvvp1v5wgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.22.224.0/24
91.191.192.0/23
91.191.206.0/23
130.0.8.0-130.0.10.255
185.12.16.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:9f:27:37:ab:1f:fb:3b:93:41:ff:ca:47:ec:77:de:36:c1:
d6:45:09:7a:b3:eb:90:7b:90:2d:43:f6:9f:bc:34:0f:51:fb:
62:6a:94:e0:76:55:ce:29:7e:90:86:3e:cc:b0:f6:eb:f9:d1:
4f:7b:70:d0:23:13:86:aa:d1:fd:1d:bc:82:09:e4:78:4e:b2:
66:78:06:2f:67:04:6f:21:1d:1b:a9:d3:47:47:67:0c:50:ba:
a5:c0:27:5c:0b:f9:5a:b3:ac:bf:c1:8c:23:b2:95:c6:46:78:
58:58:04:07:6a:29:27:07:e1:b2:8b:17:5e:3f:9b:47:6d:58:
a5:69:97:08:1b:01:98:13:d9:88:4b:c3:14:c4:65:d7:17:61:
8e:a7:91:76:91:73:91:66:1d:5b:2c:c6:51:b0:76:97:01:33:
ae:5d:6b:f9:cd:b8:d6:ec:c1:00:7f:72:ef:dc:54:98:3d:46:
68:51:71:96:35:41:72:45:91:64:d3:a7:56:b7:d7:7d:cc:6d:
86:80:dd:4d:2d:a9:e6:c8:17:60:c7:60:49:44:ca:02:39:fa:
05:8c:9d:e1:a3:86:91:46:fc:ec:1c:97:49:38:d9:b0:32:c4:
8e:4d:f8:2d:c7:98:a0:d2:3e:de:eb:99:69:61:0e:88:91:66:
b5:8d:d2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 16:33:20 2026 by rpki-client