Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/1Bms_WNk3vwzXpPRT-7VXh5Irwg.roa
File: 1Bms_WNk3vwzXpPRT-7VXh5Irwg.roa (raw, json)
Hash identifier: yiXJq9pUOtLiZ41QQpdsxC7lS72NBLht5bqLZADW2Qo=
Subject key identifier: D4:19:AC:FD:63:64:DE:FC:33:5E:93:D1:4F:EE:D5:5E:1E:48:AF:08
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 019EF93EFACB3A3AE2FD8B0978384FB939E3
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/1Bms_WNk3vwzXpPRT-7VXh5Irwg.roa
Signing time: Wed 24 Jun 2026 10:48:34 +0000
ROA not before: Wed 24 Jun 2026 10:48:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205090
IP address blocks: 89.44.86.0/24 maxlen: 24
89.44.87.0/24 maxlen: 24
91.200.12.0/24 maxlen: 24
91.200.13.0/24 maxlen: 24
95.81.121.0/24 maxlen: 24
95.81.122.0/24 maxlen: 24
103.71.20.0/24 maxlen: 24
103.71.21.0/24 maxlen: 24
104.128.130.0/24 maxlen: 24
104.128.133.0/24 maxlen: 24
104.128.134.0/24 maxlen: 24
104.128.135.0/24 maxlen: 24
109.69.62.0/24 maxlen: 24
109.69.63.0/24 maxlen: 24
132.243.16.0/24 maxlen: 24
132.243.17.0/24 maxlen: 24
132.243.18.0/24 maxlen: 24
132.243.19.0/24 maxlen: 24
135.136.178.0/24 maxlen: 24
135.136.179.0/24 maxlen: 24
135.136.190.0/24 maxlen: 24
185.105.88.0/24 maxlen: 24
185.105.89.0/24 maxlen: 24
185.105.90.0/24 maxlen: 24
185.105.91.0/24 maxlen: 24
185.128.104.0/24 maxlen: 24
185.128.105.0/24 maxlen: 24
185.128.106.0/24 maxlen: 24
185.128.107.0/24 maxlen: 24
2a0c:5d00:ff04::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:3e:fa:cb:3a:3a:e2:fd:8b:09:78:38:4f:b9:39:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Jun 24 10:48:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d419acfd6364defc335e93d14feed55e1e48af08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8c:af:78:ff:6e:52:0f:0f:ed:48:2b:69:c7:
2e:02:c4:a1:e0:94:e7:a9:ea:fd:9f:2d:1f:ca:36:
cd:d0:7a:e9:6d:4f:70:40:8d:d7:02:bd:f4:a1:99:
a6:2e:fa:4b:90:b5:c1:22:86:e6:cf:9b:f9:b6:8a:
74:33:45:38:45:64:29:f7:02:66:fd:6a:40:38:b0:
db:eb:ea:2e:ef:31:9f:dc:87:9f:be:06:4d:05:eb:
84:94:2c:7c:a3:3f:2e:9c:fb:03:cb:c4:9f:11:47:
f3:c6:9a:db:9c:ee:9a:2c:39:2a:03:db:0c:4e:71:
19:12:05:df:42:65:9e:d0:f7:ea:2e:bd:03:5b:52:
64:a5:a1:19:78:26:2f:c4:9f:39:29:4d:c9:3f:46:
b2:ef:55:5d:32:89:0c:97:6a:db:d0:b2:05:e2:ab:
9b:29:58:21:99:38:2f:fe:c2:e2:24:32:76:8b:ca:
3b:29:a7:47:46:20:93:a3:8c:c7:cf:23:75:1e:a7:
07:67:df:f4:1f:b2:3b:1b:d9:87:f6:00:a3:be:c0:
5b:b8:1f:af:ad:a5:7d:8f:6a:b2:f4:56:26:82:eb:
c3:09:9a:86:81:80:5c:fb:13:23:da:2e:0d:54:d9:
b1:c9:0d:86:e6:93:f2:08:68:4a:2a:53:c9:f9:02:
32:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:19:AC:FD:63:64:DE:FC:33:5E:93:D1:4F:EE:D5:5E:1E:48:AF:08
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/1Bms_WNk3vwzXpPRT-7VXh5Irwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.44.86.0/23
91.200.12.0/23
95.81.121.0-95.81.122.255
103.71.20.0/23
104.128.130.0/24
104.128.133.0-104.128.135.255
109.69.62.0/23
132.243.16.0/22
135.136.178.0/23
135.136.190.0/24
185.105.88.0/22
185.128.104.0/22
IPv6:
2a0c:5d00:ff04::/48
Signature Algorithm: sha256WithRSAEncryption
1f:64:18:75:03:71:a2:a1:09:09:2d:ee:59:10:29:5b:66:a7:
26:5b:33:0a:44:e7:93:b9:b9:74:c0:57:7d:c3:58:c3:18:90:
b2:d2:a0:f2:3d:7a:d2:34:fd:49:90:8d:79:e2:f3:1e:c7:40:
56:62:53:2c:25:55:8a:44:56:31:53:cd:56:9a:5b:ae:3e:d9:
4e:3a:8d:0a:84:82:52:34:7e:ab:b7:17:04:a1:05:ac:09:60:
87:cb:66:d9:73:21:85:70:88:48:ac:ae:db:3c:6b:df:06:16:
eb:ca:01:20:86:3f:fd:7d:fb:4e:f8:5e:51:dc:ce:f4:a7:91:
d4:4c:8b:3e:09:0c:2b:de:a5:9e:c4:b6:90:e9:86:ff:1e:6d:
dc:6a:5e:dd:bc:13:85:e7:31:78:a2:d6:03:9d:c5:3c:4b:3f:
b8:d6:51:b2:2d:4f:52:76:fa:c7:c4:df:f8:a9:c9:14:fe:83:
ca:b2:aa:1e:76:8a:03:94:95:6e:ae:dd:15:a3:43:66:e9:2b:
6c:3e:b3:c6:5e:7b:9c:f4:81:a3:56:77:7b:83:be:32:c5:25:
7a:44:72:98:68:7b:64:e1:9f:05:4c:f7:be:18:36:88:3d:62:
72:20:8f:ff:50:ef:95:07:bb:73:d4:2b:3a:36:8d:a7:88:20:
1d:26:7f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:29:33 2026 by rpki-client