Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/bVMAJxgCCY41-bMNJGxkMP_zK8Q.roa
File: bVMAJxgCCY41-bMNJGxkMP_zK8Q.roa (raw, json)
Hash identifier: MyD2KvEBFXRQiu4BFiBKjZI4Q2af6YWWceKAjMolm2U=
Subject key identifier: 6D:53:00:27:18:02:09:8E:35:F9:B3:0D:24:6C:64:30:FF:F3:2B:C4
Certificate issuer: /CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Certificate serial: 01A111DC32AED5FAB96509EABEB0D29E2010
Authority key identifier: DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/bVMAJxgCCY41-bMNJGxkMP_zK8Q.roa
Signing time: Tue 06 Oct 2026 15:36:45 +0000
ROA not before: Tue 06 Oct 2026 15:36:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197177
IP address blocks: 81.161.100.0/24 maxlen: 24
91.223.52.0/24 maxlen: 24
109.106.4.0/22 maxlen: 23
185.174.12.0/22 maxlen: 23
2a0a:6340::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 18:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:dc:32:ae:d5:fa:b9:65:09:ea:be:b0:d2:9e:20:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd4670c2a6fd7223327f68badbe6d08322b78058
Validity
Not Before: Oct 6 15:36:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d5300271802098e35f9b30d246c6430fff32bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:08:9d:d0:b2:01:1a:1c:a9:b8:b4:15:d1:93:
4d:b5:3b:9e:f5:87:f6:f3:b1:87:61:31:20:d3:8d:
9b:16:44:55:0e:ee:71:77:d3:14:6d:a7:29:36:f0:
dd:40:e0:6e:55:e9:03:ce:5b:33:06:49:5b:3f:2a:
51:9e:bc:fb:d8:64:7e:9d:8b:23:75:9e:c7:96:d6:
1f:c8:e7:ec:ec:c2:c6:d4:23:18:f0:84:56:78:f0:
2e:4d:22:69:12:55:4c:a8:08:9c:a5:21:07:c0:61:
c2:ec:ad:11:9b:f1:0d:f5:d1:a8:f3:a1:fa:f0:5c:
9e:a0:4d:4f:b6:b7:3c:53:ad:3b:5b:bf:7c:32:b1:
84:0e:34:74:50:a3:ec:2b:05:6e:93:17:59:18:c9:
d9:b4:f2:70:89:12:2e:81:b6:c4:c9:32:9d:0c:5d:
f2:05:9a:9a:6d:98:40:a2:ec:9d:3a:98:23:99:f7:
78:68:76:2e:96:55:ad:ff:06:2c:f0:0a:26:0e:c9:
1d:cc:e6:2d:76:d5:7f:7c:c6:7c:89:ef:c0:c6:a6:
bf:17:a3:da:2c:3d:2d:0f:af:f3:74:67:09:59:59:
1b:f5:14:90:5f:01:98:35:4c:c2:ad:1f:61:43:39:
26:0f:71:0b:d3:aa:b5:7e:e5:a0:89:d3:26:82:76:
ce:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:53:00:27:18:02:09:8E:35:F9:B3:0D:24:6C:64:30:FF:F3:2B:C4
X509v3 Authority Key Identifier:
keyid:DD:46:70:C2:A6:FD:72:23:32:7F:68:BA:DB:E6:D0:83:22:B7:80:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3UZwwqb9ciMyf2i62-bQgyK3gFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/bVMAJxgCCY41-bMNJGxkMP_zK8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/7a7781-9b4c-482b-b295-9cd3c6a18866/1/3UZwwqb9ciMyf2i62-bQgyK3gFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.100.0/24
91.223.52.0/24
109.106.4.0/22
185.174.12.0/22
IPv6:
2a0a:6340::/29
Signature Algorithm: sha256WithRSAEncryption
06:6a:61:31:c3:7d:50:e2:37:e8:bf:4a:41:d5:13:98:d3:0f:
95:c9:a5:99:df:9c:c4:a4:2e:c9:9d:c1:aa:20:0f:29:97:34:
0f:da:21:19:5f:7b:a6:50:45:c7:8a:0d:7e:a6:25:70:f3:f7:
05:06:4d:cf:57:70:04:fd:32:12:cc:9d:fd:a6:59:1c:52:48:
e5:77:07:7a:8f:41:b5:1d:66:a8:06:b8:b8:f1:de:97:f9:59:
49:39:90:d4:aa:12:7b:e1:97:42:d1:0e:eb:a2:f0:d4:7f:a8:
ec:21:a8:d8:45:42:8c:e8:fa:a4:3a:7a:cc:54:63:a4:c2:3c:
30:b3:63:d9:72:60:03:74:c2:e3:04:ce:ac:e6:c3:d8:28:21:
bb:d5:ee:4b:92:73:d3:8e:92:cb:35:87:99:4f:6d:c2:7b:36:
0d:4f:d8:10:3f:ef:0a:0b:d7:b5:81:8a:46:ca:5a:c4:97:68:
f5:fc:0c:a8:6c:51:c1:a9:63:c6:f8:f1:8d:43:4e:58:92:58:
f9:44:c7:77:d9:34:82:b0:0c:34:79:c5:fa:de:6f:10:c4:76:
7f:8e:ae:fc:9a:f6:31:af:f2:8b:19:48:8f:f0:3d:c6:9d:af:
0f:07:82:b4:ac:8d:6d:7c:5f:1c:c0:db:36:8f:a5:dd:52:0e:
b0:f9:c9:d7
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAaER3DKu1fq5ZQnqvrDSniAQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkNDY3MGMyYTZmZDcyMjMzMjdmNjhiYWRiZTZkMDgzMjJi
NzgwNTgwHhcNMjYxMDA2MTUzNjQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDUzMDAyNzE4MDIwOThlMzVmOWIzMGQyNDZjNjQzMGZmZjMyYmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgid0LIBGhypuLQV0ZNNtTue9Yf2
87GHYTEg042bFkRVDu5xd9MUbacpNvDdQOBuVekDzlszBklbPypRnrz72GR+nYsj
dZ7HltYfyOfs7MLG1CMY8IRWePAuTSJpElVMqAicpSEHwGHC7K0Rm/EN9dGo86H6
8FyeoE1Ptrc8U607W798MrGEDjR0UKPsKwVukxdZGMnZtPJwiRIugbbEyTKdDF3y
BZqabZhAouydOpgjmfd4aHYullWt/wYs8AomDskdzOYtdtV/fMZ8ie/Axqa/F6Pa
LD0tD6/zdGcJWVkb9RSQXwGYNUzCrR9hQzkmD3EL06q1fuWgidMmgnbOPwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFG1TACcYAgmONfmzDSRsZDD/8yvEMB8GA1UdIwQY
MBaAFN1GcMKm/XIjMn9outvm0IMit4BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1Vad3dxYjljaU15ZjJpNjItYlFneUszZ0ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi83YTc3ODEtOWI0Yy00ODJiLWIyOTUt
OWNkM2M2YTE4ODY2LzEvYlZNQUp4Z0NDWTQxLWJNTkpHeGtNUF96SzhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi83YTc3ODEtOWI0Yy00ODJiLWIyOTUtOWNkM2M2YTE4ODY2
LzEvM1Vad3dxYjljaU15ZjJpNjItYlFneUszZ0ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAUaFkAwQA
W980AwQCbWoEAwQCua4MMA0EAgACMAcDBQMqCmNAMA0GCSqGSIb3DQEBCwUAA4IB
AQAGamExw31Q4jfov0pB1ROY0w+VyaWZ35zEpC7JncGqIA8plzQP2iEZX3umUEXH
ig1+piVw8/cFBk3PV3AE/TISzJ39plkcUkjldwd6j0G1HWaoBri48d6X+VlJOZDU
qhJ74ZdC0Q7rovDUf6jsIajYRUKM6PqkOnrMVGOkwjwws2PZcmADdMLjBM6s5sPY
KCG71e5LknPTjpLLNYeZT23CezYNT9gQP+8KC9e1gYpGylrEl2j1/AyobFHBqWPG
+PGNQ05Yklj5RMd32TSCsAw0ecX63m8QxHZ/jq78mvYxr/KLGUiP8D3Gna8PB4K0
rI1tfF8cwNs2j6XdUg6w+cnX
-----END CERTIFICATE-----
Generated at Thu Oct 29 01:47:33 2026 by rpki-client