Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/P1TIIWKnTolq8pRBzgGiHbOaqgQ.roa
File: P1TIIWKnTolq8pRBzgGiHbOaqgQ.roa (raw, json)
Hash identifier: gL2/PVEx/BkWJ9c7qys5mfYr8ijPQCI4jEJ/mb5fIUI=
Subject key identifier: 3F:54:C8:21:62:A7:4E:89:6A:F2:94:41:CE:01:A2:1D:B3:9A:AA:04
Certificate issuer: /CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
Certificate serial: 019F22393A4933420A5D3430D5DB5923B02F
Authority key identifier: 6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/P1TIIWKnTolq8pRBzgGiHbOaqgQ.roa
Signing time: Thu 02 Jul 2026 09:46:43 +0000
ROA not before: Thu 02 Jul 2026 09:46:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198949
IP address blocks: 145.219.6.0/24 maxlen: 24
145.219.8.0/24 maxlen: 24
145.219.9.0/24 maxlen: 24
145.219.10.0/24 maxlen: 24
145.219.11.0/24 maxlen: 24
145.219.12.0/24 maxlen: 24
145.219.13.0/24 maxlen: 24
145.219.14.0/24 maxlen: 24
145.219.15.0/24 maxlen: 24
145.219.16.0/24 maxlen: 24
145.219.17.0/24 maxlen: 24
2a04:b0c0:30::/48 maxlen: 48
2a04:b0c0:31::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:39:3a:49:33:42:0a:5d:34:30:d5:db:59:23:b0:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30
Validity
Not Before: Jul 2 09:46:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f54c82162a74e896af29441ce01a21db39aaa04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:31:4c:f9:73:bd:e2:7e:bb:3c:aa:70:49:1a:
07:90:a8:c5:0b:9a:8c:b9:7d:9b:7e:e2:c7:97:ac:
0e:85:5e:05:cb:dd:1d:f4:6b:ce:94:a2:c6:fa:b0:
26:c9:68:53:01:05:7d:5f:6b:98:92:99:ae:81:3a:
67:8d:f5:97:13:f3:82:34:37:cc:cb:71:99:01:55:
ff:da:fc:29:d0:f9:62:07:5d:ee:84:2c:e5:46:31:
20:20:92:3e:63:20:61:bc:df:20:86:4e:ea:c1:9b:
52:a9:f1:80:e1:c0:2f:29:9f:bf:5d:09:77:37:60:
bb:d6:90:eb:c7:72:a9:3d:be:3e:48:c8:d5:fa:fc:
27:8c:bb:7a:12:f4:41:ff:88:1a:5e:4a:20:b2:21:
19:14:a9:fc:39:45:c0:4c:2e:33:45:09:a1:b9:a6:
b3:f6:d8:0a:e3:ee:86:1e:85:76:78:a8:f7:7d:ad:
1b:47:f5:f3:01:2d:da:fb:26:cd:e8:89:02:3b:92:
f2:ad:83:08:86:6e:ee:21:f7:94:29:d2:fe:44:04:
fd:e4:ba:6b:da:da:a9:72:9d:e1:fb:c9:1f:8e:ca:
5f:5a:f0:30:ab:fc:13:d1:69:54:c5:f6:60:26:21:
55:8f:6d:5e:dc:a2:56:8e:c7:b5:f4:1f:b3:65:bf:
b1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:54:C8:21:62:A7:4E:89:6A:F2:94:41:CE:01:A2:1D:B3:9A:AA:04
X509v3 Authority Key Identifier:
keyid:6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/P1TIIWKnTolq8pRBzgGiHbOaqgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.219.6.0/24
145.219.8.0-145.219.17.255
IPv6:
2a04:b0c0:30::/47
Signature Algorithm: sha256WithRSAEncryption
24:85:9f:ab:56:96:f7:cd:24:fb:fc:90:88:a9:06:0e:84:4b:
dc:bb:f8:eb:f8:6b:8a:1d:6e:5f:4a:a8:88:78:66:b5:ea:b5:
0c:41:cb:61:92:b0:b7:39:d5:0e:60:f8:cd:97:39:e3:d2:57:
67:00:07:4f:ba:0d:fc:5a:50:64:85:b6:89:52:2f:2a:9f:4d:
bb:d8:b8:99:9f:30:19:98:00:41:f2:0d:e6:cf:bb:98:e9:a5:
d8:43:db:98:57:bf:23:d0:8e:8d:12:0c:53:d4:ad:93:c1:7d:
c8:8d:83:bc:07:53:6b:7e:82:3d:d1:c7:2b:30:08:13:a8:8b:
bb:93:76:67:00:45:89:5d:f6:cb:a4:8a:73:52:f8:de:b2:62:
12:47:b9:10:42:a0:b5:e4:f1:11:3e:e6:2f:01:b3:b4:19:7f:
f2:9e:2f:da:1a:31:7a:3c:f6:f6:18:d7:c7:d4:4b:73:fd:09:
a8:68:0c:01:45:1c:8b:3d:bb:62:b7:8b:36:b2:cb:26:52:ab:
f8:b3:19:ef:b3:89:c4:3e:fa:1a:52:3f:2e:a0:5d:11:fb:a4:
d4:34:ce:5c:97:10:e0:cd:61:74:84:f2:c1:24:2d:7e:6c:96:
2e:fb:6e:dd:25:35:1e:1e:a2:db:73:5c:42:30:44:c6:01:1d:
d4:e6:99:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:58:54 2026 by rpki-client