Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/bCw6rwmGAAUTk4IZ0O6HvtJjwvM.roa
File: bCw6rwmGAAUTk4IZ0O6HvtJjwvM.roa (raw, json)
Hash identifier: FDlGkcVlmejEfNFS3ZvQ0Mc60HZcw5sOsFMf1FP7mKs=
Subject key identifier: 6C:2C:3A:AF:09:86:00:05:13:93:82:19:D0:EE:87:BE:D2:63:C2:F3
Certificate issuer: /CN=9f85d14760f98662b989893d8a1e5e05cd3a13e4
Certificate serial: 01A159DC546778483F0782DB50884F81D72D
Authority key identifier: 9F:85:D1:47:60:F9:86:62:B9:89:89:3D:8A:1E:5E:05:CD:3A:13:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4XRR2D5hmK5iYk9ih5eBc06E-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/bCw6rwmGAAUTk4IZ0O6HvtJjwvM.roa
Signing time: Tue 20 Oct 2026 15:09:34 +0000
ROA not before: Tue 20 Oct 2026 15:09:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 28709
IP address blocks: 87.240.166.0/23 maxlen: 23
87.240.166.0/24 maxlen: 24
87.240.167.0/24 maxlen: 24
95.142.201.0/24 maxlen: 24
95.142.202.0/24 maxlen: 24
95.142.203.0/24 maxlen: 24
95.213.44.0/23 maxlen: 23
95.213.44.0/24 maxlen: 24
95.213.45.0/24 maxlen: 24
185.32.249.0/24 maxlen: 24
185.32.250.0/24 maxlen: 24
185.32.251.0/24 maxlen: 24
2a00:bdc0:e002::/48 maxlen: 48
2a00:bdc0:e003::/48 maxlen: 48
2a00:bdc0:e004::/48 maxlen: 48
2a00:bdc0:e005::/48 maxlen: 48
2a00:bdc0:e007::/48 maxlen: 48
2a00:bdc0:e008::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4XRR2D5hmK5iYk9ih5eBc06E-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 21:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:dc:54:67:78:48:3f:07:82:db:50:88:4f:81:d7:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f85d14760f98662b989893d8a1e5e05cd3a13e4
Validity
Not Before: Oct 20 15:09:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c2c3aaf0986000513938219d0ee87bed263c2f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1e:b4:81:eb:77:45:2b:b6:38:ff:5f:5f:5a:
d6:be:fe:ce:07:5d:83:a2:03:d5:ff:03:95:f1:66:
34:3a:34:a0:d9:a8:9f:ed:c1:e8:3c:34:a6:d8:67:
74:60:a3:07:f9:77:42:ca:b2:de:22:9b:7f:10:45:
89:1d:32:19:7a:f9:24:63:d2:1a:79:4f:ff:f9:73:
e0:b5:e5:04:47:e9:80:68:a9:90:0b:b6:de:cb:13:
b8:47:2b:11:37:55:b7:0f:9e:d8:88:59:26:d8:4e:
39:fb:63:ec:58:b1:12:76:ea:41:f3:44:cb:17:f4:
0b:dd:f4:52:71:a0:df:ec:d4:17:4f:69:ed:b0:c7:
a9:e1:9f:54:e8:84:3c:26:11:31:d4:87:1b:ec:ec:
25:d1:d6:68:bb:13:7a:10:75:08:6f:ac:a0:f5:ed:
6a:f9:7d:cb:1a:03:4e:bb:84:7e:1f:2b:16:ce:bb:
13:b8:b7:f9:fb:a0:cd:0c:2d:ba:54:a1:07:bc:d7:
56:6b:1d:eb:a9:6f:31:f8:d5:cd:c1:aa:57:3c:37:
4f:56:e7:1d:9e:a6:c6:8d:a1:83:35:73:d5:88:a8:
72:76:22:12:8f:05:5c:61:f0:19:29:27:62:ac:d8:
ac:55:56:e9:78:96:70:e3:4f:5d:a8:e4:f2:22:a2:
7b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2C:3A:AF:09:86:00:05:13:93:82:19:D0:EE:87:BE:D2:63:C2:F3
X509v3 Authority Key Identifier:
keyid:9F:85:D1:47:60:F9:86:62:B9:89:89:3D:8A:1E:5E:05:CD:3A:13:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4XRR2D5hmK5iYk9ih5eBc06E-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/bCw6rwmGAAUTk4IZ0O6HvtJjwvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.240.166.0/23
95.142.201.0-95.142.203.255
95.213.44.0/23
185.32.249.0-185.32.251.255
IPv6:
2a00:bdc0:e002::-2a00:bdc0:e005:ffff:ffff:ffff:ffff:ffff
2a00:bdc0:e007::-2a00:bdc0:e008:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
6d:73:1f:d5:e0:8c:8f:b7:2c:30:37:78:a5:e2:d8:6f:85:ef:
1c:75:25:9e:ba:8c:ab:a5:cb:75:db:4b:9d:ea:20:c5:fa:ef:
87:7f:ea:29:9a:2b:d7:aa:ce:9f:e8:2e:4f:42:69:b7:18:09:
a4:c8:71:69:c7:3a:91:19:6d:f8:a3:8e:38:9e:8b:cf:5a:27:
30:07:e4:07:f1:ac:3f:ea:f4:75:17:3a:38:b5:6b:09:93:b6:
79:1c:11:17:da:0f:33:0a:05:5b:dd:f0:c9:b1:d0:39:48:f5:
f1:d1:c8:c3:b0:12:e0:6d:f8:ae:e0:18:5b:9f:8e:51:bd:f7:
18:8c:c2:f8:38:b1:f8:6c:88:15:02:91:fc:a2:7a:84:0b:43:
99:e0:79:99:28:ee:de:ee:d8:fa:b2:36:0f:b1:97:91:9e:14:
8e:c8:a2:74:8f:86:9d:e9:bb:1a:9a:93:20:a9:2f:0c:db:49:
ff:8c:e3:31:78:67:2b:ca:b1:6d:52:f3:ac:78:76:d6:ce:1d:
84:83:3c:0a:bf:3c:71:33:57:d0:8a:f1:f9:6f:12:d5:98:dc:
5a:5c:29:dd:c0:ef:61:ef:2f:04:85:4d:f9:be:8e:69:07:c4:
1e:15:9b:97:9d:e2:c4:7b:48:30:da:30:12:31:d4:22:d6:01:
bb:3f:61:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 06:23:04 2026 by rpki-client