Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/pbbZSyuDgAeoximCj040wJam1Qk.roa
File: pbbZSyuDgAeoximCj040wJam1Qk.roa (raw, json)
Hash identifier: ET96HN+OtQ8rO4EjCPaoMOdmugeeb07O1N+oNg3aCsg=
Subject key identifier: A5:B6:D9:4B:2B:83:80:07:A8:C6:29:82:8F:4E:34:C0:96:A6:D5:09
Certificate issuer: /CN=4166c06ff49e0534809e234005baa5cca7e146a8
Certificate serial: 01A12F6A39F1957F49D39C078E8C7DDE0838
Authority key identifier: 41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/pbbZSyuDgAeoximCj040wJam1Qk.roa
Signing time: Mon 12 Oct 2026 09:20:53 +0000
ROA not before: Mon 12 Oct 2026 09:20:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208570
IP address blocks: 87.236.149.0/24 maxlen: 24
91.217.133.0/24 maxlen: 24
171.33.160.0/21 maxlen: 24
171.33.160.0/22 maxlen: 24
171.33.160.0/24 maxlen: 24
195.69.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:6a:39:f1:95:7f:49:d3:9c:07:8e:8c:7d:de:08:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4166c06ff49e0534809e234005baa5cca7e146a8
Validity
Not Before: Oct 12 09:20:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a5b6d94b2b838007a8c629828f4e34c096a6d509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:00:59:64:65:1f:d3:d4:e6:e9:97:46:24:6b:
7e:d1:e5:c8:6c:97:5b:90:21:1b:15:1f:b4:0f:9a:
bd:d7:f6:6e:f7:0d:c0:47:52:f6:41:13:52:f2:37:
e5:cd:f5:12:72:03:5f:21:98:59:be:d3:d1:bb:a7:
87:0d:d9:04:5e:55:4c:b2:0c:80:99:5a:c2:fc:db:
c6:a3:1a:4f:d0:a5:96:db:7b:52:4a:35:f6:cb:96:
f6:99:c8:47:96:c0:99:56:28:7b:a8:4f:8c:a3:e2:
10:a5:f7:49:88:03:6a:45:cb:98:65:87:da:93:7d:
ed:f5:0f:fa:4d:86:60:9a:35:ff:e3:6c:fa:92:cc:
48:c4:f8:cc:08:91:73:5a:ed:a4:de:f3:9a:cb:de:
22:75:17:f7:ed:8e:b9:26:19:a5:9b:a1:64:68:fe:
68:dc:77:df:e9:55:9a:e0:5a:a4:1b:06:84:b3:26:
81:5f:c7:1f:80:5f:52:cd:e3:0a:75:24:1e:dd:57:
fc:06:5e:ff:a2:db:f6:da:7b:ab:4d:ac:3b:39:09:
2d:be:5c:ef:e1:a2:98:63:b1:65:6b:47:5c:4d:2e:
0e:d4:a0:94:93:fc:5f:fb:82:79:6c:7f:59:e2:96:
b9:60:62:fc:e3:3f:42:29:d4:0a:a9:71:e7:6d:c2:
0d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B6:D9:4B:2B:83:80:07:A8:C6:29:82:8F:4E:34:C0:96:A6:D5:09
X509v3 Authority Key Identifier:
keyid:41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/pbbZSyuDgAeoximCj040wJam1Qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.149.0/24
91.217.133.0/24
171.33.160.0/21
195.69.228.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:46:f4:b0:b5:13:d8:96:77:22:d6:32:16:94:dd:54:33:77:
45:d8:dc:70:ea:76:a8:ca:0e:eb:57:9e:26:ca:7e:6d:6d:fa:
05:93:dc:30:98:0d:a7:7d:b0:79:7c:63:ab:ba:68:1d:5a:56:
3f:b2:03:4e:e9:e4:e0:58:ae:4c:4e:44:44:b9:22:ce:42:92:
71:02:22:68:ef:37:0c:45:87:f8:17:14:43:b7:ba:c8:1f:0b:
48:20:c0:bf:08:9c:35:a0:65:87:0f:bc:b0:62:72:bf:a5:b9:
f2:47:4b:99:78:34:e9:a0:95:2c:72:8a:91:06:6b:59:99:94:
78:64:90:f7:8a:8b:14:69:40:8b:b3:3b:66:ab:2a:06:ed:6c:
64:8a:82:0b:02:30:70:00:8d:b5:fd:ff:ac:32:52:d9:3d:70:
3c:52:be:50:51:3b:ff:6b:aa:62:dc:fc:5a:77:b6:c5:03:17:
f7:5c:b3:be:87:64:70:c4:89:5d:37:af:48:a6:c7:9a:94:4f:
be:3f:02:69:59:63:ea:ac:ab:b5:a2:41:b9:88:61:27:c7:b9:
92:77:b9:49:ed:40:2c:d8:9e:6d:85:37:5b:18:4e:d2:4a:3a:
a7:69:33:17:b6:12:c7:cf:a0:be:7b:9a:ad:04:7e:1b:13:f5:
b5:54:56:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 10:15:20 2026 by rpki-client