Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/blCm_VY-L-Ayb__tLUtnX8aLCCM.roa
File: blCm_VY-L-Ayb__tLUtnX8aLCCM.roa (raw, json)
Hash identifier: 2TXN5mXAseG1VAZlSQFr+L8jTvtN8UO+Mp/UJNjb+iw=
Subject key identifier: 6E:50:A6:FD:56:3E:2F:E0:32:6F:FF:ED:2D:4B:67:5F:C6:8B:08:23
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 01A133C60984F1AC097D3190CD47CAD9915F
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/blCm_VY-L-Ayb__tLUtnX8aLCCM.roa
Signing time: Tue 13 Oct 2026 05:39:38 +0000
ROA not before: Tue 13 Oct 2026 05:39:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 91.190.187.0/24 maxlen: 24
92.61.103.0/24 maxlen: 24
185.112.241.0/24 maxlen: 24
185.112.242.0/24 maxlen: 24
185.112.243.0/24 maxlen: 24
194.152.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 23:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:33:c6:09:84:f1:ac:09:7d:31:90:cd:47:ca:d9:91:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Oct 13 05:39:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e50a6fd563e2fe0326fffed2d4b675fc68b0823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d6:91:b1:df:b6:c3:92:be:6b:a5:8c:e9:ca:
ac:bc:4b:f8:07:33:75:6b:86:ac:4b:d0:b1:d4:ab:
8f:68:92:3e:3f:22:cc:50:7d:40:e4:b4:b3:4c:26:
69:ae:20:cb:43:55:da:93:2a:7a:cd:58:f7:e5:3c:
c0:ec:f4:ce:36:35:31:80:e7:db:4f:a1:7d:11:bd:
c7:ae:09:45:3c:b9:d7:0b:03:64:a4:23:2e:63:bb:
0a:88:52:2a:74:5e:c9:4a:10:ab:96:8d:09:d4:13:
d7:ac:3c:6a:8f:92:de:bc:03:c8:7b:d9:4b:9e:79:
e6:0f:52:37:c7:83:ec:bf:1a:2c:70:dd:06:71:04:
12:c8:3c:11:8b:06:f2:5b:e8:b6:23:0f:d6:73:6b:
40:07:90:2d:26:24:db:ed:53:0c:b1:6f:e9:17:f3:
d6:44:c4:ca:4f:45:c7:ff:6c:b3:0c:29:33:e2:c8:
7e:33:f9:fd:71:dd:8b:ce:0a:05:e7:13:2f:29:87:
cc:c6:28:49:fe:4a:eb:42:76:b1:1e:26:0a:b7:87:
ae:79:6b:12:ba:73:4b:2a:56:84:db:e0:7f:f5:43:
e4:f4:7f:77:f4:9f:37:6a:d7:d3:84:ee:c9:65:c2:
28:14:e3:59:34:41:16:e7:0c:f1:ac:3f:b2:c9:d1:
84:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:50:A6:FD:56:3E:2F:E0:32:6F:FF:ED:2D:4B:67:5F:C6:8B:08:23
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/blCm_VY-L-Ayb__tLUtnX8aLCCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.190.187.0/24
92.61.103.0/24
185.112.241.0-185.112.243.255
194.152.136.0/24
Signature Algorithm: sha256WithRSAEncryption
68:6a:ae:9c:87:02:db:21:75:3e:ca:84:44:0e:f2:fc:1c:e7:
96:60:ef:6c:99:e5:75:f2:5c:95:33:1a:94:7e:b1:65:7f:11:
3e:33:2b:43:53:cb:a6:2b:e2:df:99:84:7e:89:b4:0c:ed:eb:
9b:ae:31:3c:b4:81:12:c6:b9:e7:b7:06:26:73:c5:4a:43:1d:
a2:53:82:7a:00:71:47:92:8c:0f:62:33:eb:38:01:e1:17:39:
cd:47:bf:3c:c8:9c:96:3d:dd:49:95:09:fd:95:8c:64:6a:d8:
7f:dd:8a:93:a4:a1:9c:ba:12:cd:c2:5a:a1:2e:ed:0f:cb:2c:
15:fe:b4:f5:7d:c0:12:ab:6f:5f:3c:d6:5d:f0:2c:4b:96:41:
4d:6a:c7:cf:c6:53:28:e3:c6:16:12:ee:a7:28:ed:2c:bb:98:
3b:d7:f7:6b:51:1a:2a:7a:4b:a9:b1:4a:60:e2:5d:87:47:1d:
7a:98:39:d2:15:ed:68:75:00:f4:f4:d7:db:15:f8:78:26:aa:
e6:66:90:d1:39:9d:61:f5:04:1f:b6:28:52:32:12:1c:2d:8d:
b3:a0:20:32:c5:55:3f:02:ef:10:d4:39:1d:e8:d0:5e:95:41:
c6:13:7e:ad:85:2c:20:36:09:02:1a:d6:a9:52:db:24:83:17:
fc:08:8c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 07:12:12 2026 by rpki-client