Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/BMNzg6EYr5M8zE4GFwahQLKFDj8.roa
File: BMNzg6EYr5M8zE4GFwahQLKFDj8.roa (raw, json)
Hash identifier: 8/w5/sefdEDU7vsG2GXfOV5wF3VjDyOddeHrv8h3r8c=
Subject key identifier: 04:C3:73:83:A1:18:AF:93:3C:CC:4E:06:17:06:A1:40:B2:85:0E:3F
Certificate issuer: /CN=3ae7132ce68254b8b1fe5dcbfbd2322eb92a72d6
Certificate serial: 019F2368DDC22CAAB6CD76CD1A9C698E5A82
Authority key identifier: 3A:E7:13:2C:E6:82:54:B8:B1:FE:5D:CB:FB:D2:32:2E:B9:2A:72:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OucTLOaCVLix_l3L-9IyLrkqctY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/BMNzg6EYr5M8zE4GFwahQLKFDj8.roa
Signing time: Thu 02 Jul 2026 15:18:22 +0000
ROA not before: Thu 02 Jul 2026 15:18:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199849
IP address blocks: 185.44.112.0/24 maxlen: 24
185.44.113.0/24 maxlen: 24
185.44.114.0/24 maxlen: 24
185.44.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/OucTLOaCVLix_l3L-9IyLrkqctY.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/OucTLOaCVLix_l3L-9IyLrkqctY.mft
rsync://rpki.ripe.net/repository/DEFAULT/OucTLOaCVLix_l3L-9IyLrkqctY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:dd:c2:2c:aa:b6:cd:76:cd:1a:9c:69:8e:5a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ae7132ce68254b8b1fe5dcbfbd2322eb92a72d6
Validity
Not Before: Jul 2 15:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04c37383a118af933ccc4e061706a140b2850e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b4:60:3e:68:6d:03:02:db:03:2b:1e:8c:ae:
ef:e4:7e:71:3c:09:2f:03:bc:d3:e9:b0:bc:9d:96:
67:76:b9:95:6e:c6:97:ad:0c:9c:8e:72:9b:07:36:
97:8a:1e:bd:bb:50:0f:4f:a6:64:cb:e8:3b:a5:38:
d5:15:14:27:f2:d5:be:d0:c9:3a:1f:73:9e:4a:d0:
6d:44:63:28:c7:db:9b:d4:01:40:75:dc:86:44:7d:
3e:60:45:18:59:e5:0b:6c:c3:97:49:91:b3:99:16:
07:e7:29:ad:fd:f0:71:bd:25:8f:af:8f:4d:84:00:
45:9e:c9:b7:3e:21:57:af:f0:d3:43:bb:33:85:d5:
99:48:17:b2:b6:6b:54:37:63:d8:45:6a:1e:48:66:
7a:d9:70:ef:e7:93:fe:03:01:e6:2f:83:36:5a:6b:
60:6a:9e:66:22:68:b8:66:a3:c4:15:e8:32:0a:c3:
7d:96:b0:95:00:61:39:5f:f3:38:61:1a:3a:ab:bb:
5b:65:91:9c:c5:11:3a:2b:92:32:3b:74:91:bc:db:
46:bf:38:fc:66:8f:a0:a8:46:cd:a6:1a:79:f5:cb:
a7:a8:89:55:53:73:a6:0c:bb:9d:79:04:8c:1f:ee:
31:8c:19:1d:5c:f3:64:61:9f:69:6c:14:c9:53:fd:
15:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:C3:73:83:A1:18:AF:93:3C:CC:4E:06:17:06:A1:40:B2:85:0E:3F
X509v3 Authority Key Identifier:
keyid:3A:E7:13:2C:E6:82:54:B8:B1:FE:5D:CB:FB:D2:32:2E:B9:2A:72:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OucTLOaCVLix_l3L-9IyLrkqctY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/BMNzg6EYr5M8zE4GFwahQLKFDj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2cb0dc-f7c0-4b68-9391-ea740ec1d1f6/1/OucTLOaCVLix_l3L-9IyLrkqctY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.44.112.0/22
Signature Algorithm: sha256WithRSAEncryption
57:9e:a5:35:0b:fd:78:be:09:57:85:3b:c4:50:30:57:80:cb:
e4:f7:b8:a4:78:5c:5a:c6:3d:12:e3:57:5f:6b:cc:cf:13:6b:
5d:be:db:84:85:ff:35:09:18:03:4d:96:e2:26:97:f1:b8:bd:
81:9a:0c:f6:a7:89:be:35:74:22:60:78:53:1d:05:c5:b5:3e:
68:0a:a6:62:d8:c1:a6:44:c0:36:d4:ac:05:71:35:d1:40:ca:
d8:8d:c8:77:4f:dd:2d:e5:bc:44:97:5f:ce:8c:3c:09:b3:8a:
c1:89:19:96:71:8d:cb:7e:3a:27:24:29:fb:3f:e1:2d:68:b0:
c8:ff:d1:b7:76:bc:da:60:c5:84:07:a3:0a:13:42:ea:6e:54:
6a:bd:39:7f:56:20:74:88:62:29:e4:7c:54:45:f1:0e:bf:03:
34:a9:d5:8f:0d:5b:4e:a9:04:b5:72:eb:54:87:a8:8c:62:26:
ee:82:7a:67:f5:b6:e5:ef:95:0f:3c:8a:e5:2e:1b:62:54:ed:
21:ee:dc:88:25:f9:51:90:2a:16:12:d5:cd:4f:a1:dc:f6:a5:
e2:8e:44:29:2b:fc:54:e4:44:6a:0e:82:59:15:37:3a:2c:d5:
dc:50:ca:2e:b2:66:00:65:92:a1:9e:f9:02:40:f9:c1:e8:80:
67:ee:13:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:28:29 2026 by rpki-client