Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/bm-8a1_TiCKa5b3e0Zftu4ms5Gg.roa
File: bm-8a1_TiCKa5b3e0Zftu4ms5Gg.roa (raw, json)
Hash identifier: x2DSM12ecv3yxEoQ59gdvczqMgt0gHx1Ntihy4Ft9wE=
Subject key identifier: 6E:6F:BC:6B:5F:D3:88:22:9A:E5:BD:DE:D1:97:ED:BB:89:AC:E4:68
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 01A06AD37F579F907BACB451C10E69237578
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/bm-8a1_TiCKa5b3e0Zftu4ms5Gg.roa
Signing time: Fri 04 Sep 2026 05:10:40 +0000
ROA not before: Fri 04 Sep 2026 05:10:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204339
IP address blocks: 45.134.12.0/24 maxlen: 24
45.134.13.0/24 maxlen: 24
95.81.93.0/24 maxlen: 24
95.81.119.0/24 maxlen: 24
95.81.120.0/24 maxlen: 24
103.85.112.0/24 maxlen: 24
103.85.113.0/24 maxlen: 24
104.128.131.0/24 maxlen: 24
104.128.142.0/24 maxlen: 24
104.128.143.0/24 maxlen: 24
109.69.61.0/24 maxlen: 24
132.243.20.0/24 maxlen: 24
132.243.21.0/24 maxlen: 24
132.243.22.0/24 maxlen: 24
132.243.23.0/24 maxlen: 24
135.136.181.0/24 maxlen: 24
135.136.182.0/24 maxlen: 24
135.136.183.0/24 maxlen: 24
135.136.189.0/24 maxlen: 24
157.228.128.0/23 maxlen: 23
157.228.128.0/24 maxlen: 24
157.228.129.0/24 maxlen: 24
157.228.152.0/23 maxlen: 23
157.228.152.0/24 maxlen: 24
157.228.153.0/24 maxlen: 24
157.228.188.0/23 maxlen: 23
157.228.188.0/24 maxlen: 24
157.228.189.0/24 maxlen: 24
2a0c:5d00:ff06::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6a:d3:7f:57:9f:90:7b:ac:b4:51:c1:0e:69:23:75:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Sep 4 05:10:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e6fbc6b5fd388229ae5bdded197edbb89ace468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:41:8c:a7:39:33:b1:06:41:43:1b:6b:eb:95:
b3:b9:24:25:88:c1:19:eb:f7:e9:2d:e0:5d:da:b5:
e0:cc:5e:49:61:50:40:5b:76:b0:3c:ef:e8:20:94:
37:82:52:9c:2d:29:d7:95:1d:c2:02:de:a2:19:b6:
01:73:fd:9a:65:c7:28:3b:de:ca:d8:18:32:8b:ee:
6e:67:5e:41:73:5b:5a:f5:83:a7:1f:24:3b:17:d8:
25:66:cf:3e:0e:68:35:b0:a8:e3:dc:ca:45:63:e7:
8b:a8:36:86:86:7f:ae:4c:73:1a:c2:ee:98:ec:3f:
f4:12:df:83:c9:5a:51:2a:2d:9b:79:b1:82:9e:23:
d9:15:c0:80:6e:27:f0:4a:27:bf:bf:8a:fe:9e:51:
44:e7:69:78:0d:cc:88:f4:5d:82:08:de:cf:98:d9:
99:0b:47:b6:de:ba:7f:28:f1:44:1b:3b:9c:19:86:
73:86:2a:a7:09:b9:87:df:f3:ba:c6:9d:f9:92:1a:
5d:53:da:bb:2c:33:1f:6e:f6:84:f7:bd:bc:92:a8:
a2:6c:b6:88:ab:30:0b:5f:a1:5f:7e:e7:98:fe:b3:
38:b0:1a:60:a4:71:4e:1b:45:06:0f:59:de:35:ce:
d8:a8:01:20:d9:04:03:b8:75:b1:8c:ea:29:74:d6:
fd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:6F:BC:6B:5F:D3:88:22:9A:E5:BD:DE:D1:97:ED:BB:89:AC:E4:68
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/bm-8a1_TiCKa5b3e0Zftu4ms5Gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.12.0/23
95.81.93.0/24
95.81.119.0-95.81.120.255
103.85.112.0/23
104.128.131.0/24
104.128.142.0/23
109.69.61.0/24
132.243.20.0/22
135.136.181.0-135.136.183.255
135.136.189.0/24
157.228.128.0/23
157.228.152.0/23
157.228.188.0/23
IPv6:
2a0c:5d00:ff06::/48
Signature Algorithm: sha256WithRSAEncryption
91:03:bb:be:c9:dd:c4:25:cd:c5:c2:08:89:9c:ab:7c:ae:4f:
95:92:5a:90:b8:8a:bd:50:6e:e5:16:d4:8d:6b:13:a5:82:8d:
5d:2b:f2:16:f7:ba:10:64:8d:91:2e:d9:ae:c8:9b:36:f8:69:
30:65:40:32:4c:58:59:70:87:91:8c:2c:da:8c:bb:ea:4d:05:
20:a4:1e:c3:b8:3f:14:3a:3b:e0:cd:54:58:34:8c:e4:5d:4a:
c4:e1:c4:83:67:0f:37:b2:a2:db:b4:41:55:da:70:1d:96:6a:
77:b8:cb:48:8c:9e:b8:a7:fe:2e:2b:cd:ee:43:2e:75:6e:5b:
08:52:00:6d:32:ed:ed:b9:9e:16:cb:48:0b:f6:c0:b0:a4:20:
1c:a0:ec:67:25:9b:78:9b:81:a0:56:a2:b2:72:09:a2:f6:e1:
a0:52:f1:06:37:82:af:40:59:4e:21:3c:9c:77:70:30:ef:41:
76:e7:24:6c:77:98:d8:c4:8c:47:a8:e7:8c:30:60:f7:82:b0:
05:f4:0a:69:2d:96:e1:b5:c4:40:bc:80:42:1d:49:e5:75:a5:
7b:91:86:88:19:bf:10:79:9b:66:ba:7a:28:96:53:ab:83:de:
eb:03:c1:a5:df:c1:7d:7f:8a:68:40:52:fb:57:96:17:6c:4a:
6f:a8:84:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:21:11 2026 by rpki-client