Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/rBifEteMiJ25R5DQDU12NebJRS4.roa
File: rBifEteMiJ25R5DQDU12NebJRS4.roa (raw, json)
Hash identifier: zud/trrJppI6pE83KUPt6r47Ql1iRfoDUPjneuGZTLY=
Subject key identifier: AC:18:9F:12:D7:8C:88:9D:B9:47:90:D0:0D:4D:76:35:E6:C9:45:2E
Certificate issuer: /CN=ec06b56061457ff5c0838af1d2535ee0d1f2b43c
Certificate serial: 019D1F3A7972EE45DF29303FB8D664748A94
Authority key identifier: EC:06:B5:60:61:45:7F:F5:C0:83:8A:F1:D2:53:5E:E0:D1:F2:B4:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Aa1YGFFf_XAg4rx0lNe4NHytDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/rBifEteMiJ25R5DQDU12NebJRS4.roa
Signing time: Tue 24 Mar 2026 09:43:39 +0000
ROA not before: Tue 24 Mar 2026 09:43:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39686
IP address blocks: 193.41.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Aa1YGFFf_XAg4rx0lNe4NHytDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1f:3a:79:72:ee:45:df:29:30:3f:b8:d6:64:74:8a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec06b56061457ff5c0838af1d2535ee0d1f2b43c
Validity
Not Before: Mar 24 09:43:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac189f12d78c889db94790d00d4d7635e6c9452e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:62:08:27:af:fc:5b:50:08:ad:21:11:c8:06:
77:bf:fd:54:f7:1f:11:0f:92:dc:31:9c:d9:1b:53:
83:c2:fc:a3:4e:ea:52:45:04:8a:af:59:12:7c:7d:
9e:d4:12:db:e6:10:ce:d9:60:97:76:1b:52:e6:ed:
c7:4f:17:4c:c7:90:29:d3:5f:c9:80:aa:16:96:c2:
51:14:a2:ca:e3:ac:16:0a:77:df:91:2b:8c:a6:41:
bd:08:d7:a1:99:70:12:28:9f:2d:cb:22:2a:11:0c:
5d:16:ac:92:e2:fb:1a:3e:2d:fe:63:14:d8:82:c3:
88:23:3f:71:b2:56:f5:63:d7:16:91:a2:05:27:ef:
6a:f0:2a:4e:3a:a9:bc:27:84:d8:24:c9:d7:e9:6b:
cc:eb:78:fd:5a:22:9d:06:09:b8:f5:68:37:8d:e3:
9d:d3:de:b5:21:66:7e:ac:e1:53:09:4f:5e:28:8b:
f6:bf:a2:5a:a4:dc:7b:8d:b0:d1:1e:20:7a:df:6f:
4e:c4:c8:29:f1:52:6a:38:9a:6b:ac:21:2d:25:73:
bc:d0:d9:b7:0b:41:05:26:71:5f:e0:7b:3c:70:75:
15:64:c7:02:0e:09:ba:81:cc:69:4f:3a:18:01:68:
6a:e5:cf:b0:64:d8:42:b3:59:72:ca:8b:bb:50:75:
33:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:18:9F:12:D7:8C:88:9D:B9:47:90:D0:0D:4D:76:35:E6:C9:45:2E
X509v3 Authority Key Identifier:
keyid:EC:06:B5:60:61:45:7F:F5:C0:83:8A:F1:D2:53:5E:E0:D1:F2:B4:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Aa1YGFFf_XAg4rx0lNe4NHytDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/rBifEteMiJ25R5DQDU12NebJRS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.42.0/24
Signature Algorithm: sha256WithRSAEncryption
81:4c:a9:dd:92:94:ed:cc:80:fb:a3:e4:8e:26:ab:dd:a5:55:
c5:c8:f9:3a:e5:64:30:06:81:a9:5b:5d:b8:4c:83:7b:7b:12:
10:38:e9:ed:51:c9:e2:fd:42:ce:4a:13:b5:b0:e4:59:3d:38:
20:11:84:1a:0d:78:c7:2c:79:d3:94:13:49:c3:3e:e9:2a:60:
db:3c:2d:79:92:87:68:74:45:4d:08:8f:f1:61:18:aa:0e:9a:
db:5c:03:aa:c3:18:c4:c5:6c:33:21:54:4a:6b:9d:dd:c2:e7:
95:57:5a:59:4b:e7:91:b6:79:dc:60:f4:eb:57:0f:7b:d5:76:
8c:45:48:8d:b1:32:94:5d:39:53:e9:69:52:d2:68:79:85:18:
47:78:ec:2c:2b:7b:b2:e1:a2:35:68:6f:16:2f:7c:25:77:7b:
15:db:ba:7a:b0:62:75:ea:04:5e:58:a0:d5:e9:cf:e8:5d:01:
90:3d:6c:50:6c:e4:d8:dc:54:49:b3:5c:82:9b:ad:af:ad:16:
c7:c4:ef:75:2c:06:04:c3:86:39:f2:7e:a4:fd:5e:2f:76:79:
ec:04:f0:07:45:eb:62:e7:0c:ae:cd:2f:a0:69:89:e6:db:06:
d5:90:29:26:33:e0:5c:c2:09:a7:ff:87:ef:4b:49:8d:a7:30:
e6:90:25:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:24:52 2026 by rpki-client