Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/DsbHtEcqU3PS3p9q1gisL2Hcjp0.roa
File: DsbHtEcqU3PS3p9q1gisL2Hcjp0.roa (raw, json)
Hash identifier: OlwiCj4gxUNj19rZKoZ1B3evvTyWNLzwiB1WvnSMcAI=
Subject key identifier: 0E:C6:C7:B4:47:2A:53:73:D2:DE:9F:6A:D6:08:AC:2F:61:DC:8E:9D
Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Certificate serial: 01A1111B05EB4FD751DA60ACFF14CBA0CC01
Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/DsbHtEcqU3PS3p9q1gisL2Hcjp0.roa
Signing time: Tue 06 Oct 2026 12:05:46 +0000
ROA not before: Tue 06 Oct 2026 12:05:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209641
IP address blocks: 92.63.197.0/24 maxlen: 24
185.156.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:1b:05:eb:4f:d7:51:da:60:ac:ff:14:cb:a0:cc:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Validity
Not Before: Oct 6 12:05:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0ec6c7b4472a5373d2de9f6ad608ac2f61dc8e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e5:c7:b9:4d:02:36:97:8a:4e:95:df:c1:27:
1b:d2:77:82:2d:b0:17:e1:02:bc:1d:3c:9f:a8:ff:
d3:9c:69:e9:fa:61:ba:50:b6:50:ec:73:c3:cd:2f:
24:41:70:56:7a:ac:6c:88:ed:34:58:33:77:b7:f2:
3b:5d:49:c4:6c:36:1e:ef:a8:73:39:97:69:7e:b6:
47:4f:e4:fd:27:4f:0c:a6:1c:08:6a:80:00:9b:06:
53:22:b1:9f:f2:29:2a:af:81:1c:78:43:11:76:80:
e0:b7:fc:fd:77:c3:4a:fa:41:15:28:f4:7f:8f:44:
35:34:0e:ee:68:3c:10:5c:5e:8a:59:64:b2:81:0a:
b4:b1:1b:0c:59:a7:62:b8:e2:36:e7:21:3f:93:dc:
7d:dc:7b:70:b5:2e:e5:73:f1:93:24:c1:9b:55:34:
f2:6e:f4:a3:b0:32:bb:fd:b9:98:b8:a0:12:08:bc:
be:5f:c7:83:a9:66:50:d8:ba:61:29:78:e7:d4:49:
63:df:34:a5:fd:db:0b:d9:e6:02:86:01:58:f8:f8:
49:84:14:10:27:88:97:69:9f:4a:16:fb:fc:3b:04:
c4:5f:09:66:1b:67:cd:4b:31:f4:ee:ce:b4:5e:b6:
90:9d:4d:9e:27:0e:7b:02:4e:99:10:7c:95:ec:02:
c0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:C6:C7:B4:47:2A:53:73:D2:DE:9F:6A:D6:08:AC:2F:61:DC:8E:9D
X509v3 Authority Key Identifier:
keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/DsbHtEcqU3PS3p9q1gisL2Hcjp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.63.197.0/24
185.156.73.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:6d:99:be:f0:ad:a7:49:b3:61:0b:90:81:d9:93:d2:50:aa:
b8:7d:27:05:f5:fa:ba:71:18:33:f8:8f:23:60:32:fb:54:37:
ad:9a:69:6d:7c:25:0b:8e:bd:a2:98:82:08:33:ed:87:15:a2:
c3:b5:f7:da:41:50:34:2e:96:aa:a4:f5:38:a4:04:b5:81:25:
85:d1:88:e8:b0:b9:61:ad:f6:46:b0:b7:04:d7:f7:43:6c:a7:
20:48:d9:e4:fe:e8:c0:20:59:bc:b1:df:de:77:90:7f:d1:54:
77:a3:e1:be:1a:b0:4b:87:f9:8a:9d:d7:a6:0e:70:f5:29:87:
24:8f:ba:ba:a5:d4:6d:c3:e9:e1:64:21:4e:f1:2e:92:bc:3e:
71:8c:c9:c3:4f:ef:1d:fa:a5:14:bb:c2:62:62:cd:ab:eb:53:
6c:6c:e3:1e:1c:f3:ee:6b:9f:da:f9:f2:73:d1:19:eb:eb:57:
ec:36:e8:04:16:54:6e:98:ea:49:74:e0:27:35:57:01:44:45:
6b:7e:8a:1f:d1:06:27:f1:c6:a7:92:1c:de:d2:26:8b:c4:ee:
4e:1c:36:09:20:09:12:0b:87:d9:2a:bc:8f:61:3e:ff:39:fd:
e6:d4:e3:51:18:ec:d5:4a:ea:b8:ba:cd:43:31:8b:9d:95:3e:
34:44:7f:46
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaERGwXrT9dR2mCs/xTLoMwBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYWYxMmY1Y2E3NWM5MjJhNGFhNWRhY2I0OWMwNGE5MzIz
N2Y0ZWQwHhcNMjYxMDA2MTIwNTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZWM2YzdiNDQ3MmE1MzczZDJkZTlmNmFkNjA4YWMyZjYxZGM4ZTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOXHuU0CNpeKTpXfwScb0neCLbAX
4QK8HTyfqP/TnGnp+mG6ULZQ7HPDzS8kQXBWeqxsiO00WDN3t/I7XUnEbDYe76hz
OZdpfrZHT+T9J08MphwIaoAAmwZTIrGf8ikqr4EceEMRdoDgt/z9d8NK+kEVKPR/
j0Q1NA7uaDwQXF6KWWSygQq0sRsMWadiuOI25yE/k9x93HtwtS7lc/GTJMGbVTTy
bvSjsDK7/bmYuKASCLy+X8eDqWZQ2LphKXjn1Elj3zSl/dsL2eYChgFY+PhJhBQQ
J4iXaZ9KFvv8OwTEXwlmG2fNSzH07s60XraQnU2eJw57Ak6ZEHyV7ALA7wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFA7Gx7RHKlNz0t6fatYIrC9h3I6dMB8GA1UdIwQY
MBaAFLGvEvXKdckipKpdrLScBKkyN/TtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUt
NTc2MGVmYmNjNjU0LzEvRHNiSHRFY3FVM1BTM3A5cTFnaXNMMkhjanAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUtNTc2MGVmYmNjNjU0
LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXD/FAwQA
uZxJMA0GCSqGSIb3DQEBCwUAA4IBAQBrbZm+8K2nSbNhC5CB2ZPSUKq4fScF9fq6
cRgz+I8jYDL7VDetmmltfCULjr2imIIIM+2HFaLDtffaQVA0LpaqpPU4pAS1gSWF
0YjosLlhrfZGsLcE1/dDbKcgSNnk/ujAIFm8sd/ed5B/0VR3o+G+GrBLh/mKndem
DnD1KYckj7q6pdRtw+nhZCFO8S6SvD5xjMnDT+8d+qUUu8JiYs2r61NsbOMeHPPu
a5/a+fJz0Rnr61fsNugEFlRumOpJdOAnNVcBREVrfoof0QYn8cankhze0iaLxO5O
HDYJIAkSC4fZKryPYT7/Of3m1ONRGOzVSuq4us1DMYudlT40RH9G
-----END CERTIFICATE-----
Generated at Mon Oct 26 23:46:44 2026 by rpki-client