Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/BI1-zWHSCZaUeDLJP8MJRlySvtM.roa
File: BI1-zWHSCZaUeDLJP8MJRlySvtM.roa (raw, json)
Hash identifier: 5+ElqZkJcNh+4wO4k1JaUkv3Q1jNu6LVLW1YBzgcAlc=
Subject key identifier: 04:8D:7E:CD:61:D2:09:96:94:78:32:C9:3F:C3:09:46:5C:92:BE:D3
Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Certificate serial: 01A0EED4D03CB96F4A9D1E7CC7B85658C730
Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/BI1-zWHSCZaUeDLJP8MJRlySvtM.roa
Signing time: Tue 29 Sep 2026 20:21:59 +0000
ROA not before: Tue 29 Sep 2026 20:21:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203596
IP address blocks: 91.213.223.0/24 maxlen: 24
91.216.15.0/24 maxlen: 24
91.216.39.0/24 maxlen: 24
185.14.176.0/24 maxlen: 24
185.14.178.0/24 maxlen: 24
185.122.100.0/22 maxlen: 24
185.122.100.0/24 maxlen: 24
185.122.101.0/24 maxlen: 24
185.122.102.0/24 maxlen: 24
185.122.103.0/24 maxlen: 24
185.222.88.0/22 maxlen: 24
2a06:a400::/29 maxlen: 29
2a06:a400:20::/44 maxlen: 48
2a06:a400:22::/48 maxlen: 48
2a06:a401::/32 maxlen: 48
2a06:a402::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 13:29:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:d4:d0:3c:b9:6f:4a:9d:1e:7c:c7:b8:56:58:c7:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Validity
Not Before: Sep 29 20:21:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=048d7ecd61d20996947832c93fc309465c92bed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:48:16:e5:87:5a:1c:e7:e8:62:ee:67:59:a8:
3e:85:a0:c2:dd:cc:50:5b:83:e6:cf:e4:a5:29:e4:
ee:2f:64:94:43:c0:1f:90:09:64:a2:93:54:06:44:
0f:77:92:8d:15:31:88:22:e4:12:be:af:34:bc:80:
b5:8f:ff:55:ba:9f:33:76:d0:8f:ef:56:54:86:fe:
41:18:cd:1c:cb:08:4c:05:69:c8:ac:27:8a:8c:68:
4a:e3:93:fc:00:8c:c1:45:a7:65:ab:2b:bd:30:be:
09:ea:4a:57:75:db:94:be:31:cd:d3:59:99:98:c2:
2e:27:38:a2:aa:ce:f6:4a:72:4f:12:48:3e:5b:d1:
74:4a:64:70:74:b1:de:9b:92:da:36:7a:b5:86:79:
8f:a0:98:d9:95:9a:28:3a:f5:93:63:f3:75:d2:de:
78:89:a9:3f:c1:fc:e3:19:d8:2c:ad:c8:01:fb:ae:
ab:2b:4d:90:c9:76:2d:74:bd:d5:84:6d:a2:5a:56:
da:60:52:c0:96:24:67:49:f8:cc:0c:ee:41:09:a1:
c6:3d:ba:82:f5:20:7c:3f:ff:01:95:9c:4f:c8:aa:
5b:d5:6e:48:36:a3:86:3b:c8:75:0c:c7:95:04:6f:
59:0b:7f:88:e7:c8:26:52:84:d8:20:c7:d6:68:ef:
17:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8D:7E:CD:61:D2:09:96:94:78:32:C9:3F:C3:09:46:5C:92:BE:D3
X509v3 Authority Key Identifier:
keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/BI1-zWHSCZaUeDLJP8MJRlySvtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.223.0/24
91.216.15.0/24
91.216.39.0/24
185.14.176.0/24
185.14.178.0/24
185.122.100.0/22
185.222.88.0/22
IPv6:
2a06:a400::/29
Signature Algorithm: sha256WithRSAEncryption
41:27:04:d0:82:71:6f:76:bc:02:4a:1f:9d:9f:ad:8c:2c:98:
a2:ff:61:06:be:e0:5f:d2:12:5a:9f:16:c6:76:85:a2:3d:6e:
19:6f:29:7d:61:47:d9:74:cf:f8:aa:8e:5d:51:c9:94:28:03:
52:73:96:22:43:6a:dd:0d:fa:b4:f8:f9:5d:5c:47:43:b1:d1:
0d:36:11:43:b1:17:7c:2a:b7:96:55:01:a8:ac:94:9f:74:49:
41:38:d3:01:e0:b2:ea:fa:1b:3f:47:44:19:50:6e:6b:5f:77:
9f:56:ed:38:3f:0d:35:93:94:52:33:ac:d9:54:88:a7:0b:1e:
92:87:7a:9d:74:df:33:51:e0:d0:fd:07:74:5e:28:70:23:36:
40:8e:c8:a4:66:1f:fc:95:5c:7a:01:3c:2c:27:82:99:9d:e2:
c6:df:54:9b:0d:4e:4d:22:77:c4:f2:06:e8:35:0e:f6:7a:ae:
1e:24:6c:d8:4c:ce:b7:3e:8b:b6:bd:01:17:71:e8:db:20:4f:
77:24:d8:93:41:da:7f:40:12:06:be:30:60:f4:f3:46:fd:7d:
f8:d7:cd:01:2e:eb:e4:c1:e7:7e:24:33:d0:d3:a0:7c:b2:fa:
68:15:1c:3d:3b:d8:e8:c8:60:01:e7:4d:ff:ff:da:5e:93:7c:
4c:74:c6:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:24:37 2026 by rpki-client