Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/BeUkNQO_cdnu48sHYfC1elyCSio.roa
File: BeUkNQO_cdnu48sHYfC1elyCSio.roa (raw, json)
Hash identifier: 7sVPqLHSA4D6PHeDMrPSpWYC/Sl6UbP3BldX4qcJ3Cc=
Subject key identifier: 05:E5:24:35:03:BF:71:D9:EE:E3:CB:07:61:F0:B5:7A:5C:82:4A:2A
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 01A1CF60BC3786A324122116FD97105DE6F3
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/BeUkNQO_cdnu48sHYfC1elyCSio.roa
Signing time: Thu 12 Nov 2026 10:49:45 +0000
ROA not before: Thu 12 Nov 2026 10:49:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218261
IP address blocks: 46.38.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cf:60:bc:37:86:a3:24:12:21:16:fd:97:10:5d:e6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Nov 12 10:49:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05e5243503bf71d9eee3cb0761f0b57a5c824a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:18:21:dd:e7:a4:b8:8d:c8:61:b8:aa:f4:e4:
73:83:0f:13:a7:ab:bf:f5:03:a9:2b:c8:32:72:7b:
90:27:53:65:1f:10:8d:3b:29:8e:00:93:28:f6:bb:
8c:51:a1:80:6a:3c:cf:de:d6:33:77:59:02:5e:1b:
ab:e4:1c:b6:2a:21:25:97:7e:10:ea:6e:43:26:eb:
46:e9:82:31:d6:da:69:f3:35:b6:e7:cf:cd:94:56:
4b:a5:b1:e5:db:b7:65:2f:b9:19:28:80:f1:35:ec:
53:02:8a:4a:39:7e:cb:c7:b1:a4:1e:43:05:65:f4:
5c:b2:5c:6b:d3:63:b4:46:67:4a:59:8d:4e:41:2f:
0b:1b:f5:93:60:6a:41:32:a2:8f:45:56:34:68:a4:
e8:f8:45:51:f1:64:2e:9c:79:c3:87:f4:bc:b7:1f:
70:fc:ca:a2:85:dd:59:2a:b3:3b:32:32:44:77:2c:
a7:43:0d:97:b7:7c:25:79:ef:a9:2f:9e:16:70:aa:
5c:c1:c7:c5:b6:bc:25:3a:a8:41:8f:55:c0:12:8e:
b2:0c:a5:3f:a1:57:e0:4f:7b:f0:07:25:9b:cf:37:
81:c9:11:c4:53:99:41:07:df:2f:d6:32:5b:af:9b:
1f:8b:08:ef:06:58:64:8a:f4:0f:c0:49:6c:19:88:
77:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E5:24:35:03:BF:71:D9:EE:E3:CB:07:61:F0:B5:7A:5C:82:4A:2A
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/BeUkNQO_cdnu48sHYfC1elyCSio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.128.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:c5:37:ad:87:81:1d:01:64:0d:28:59:c3:7e:fa:5b:34:10:
e6:25:ea:09:41:2a:02:be:9a:a0:ff:b1:79:b6:8a:18:f1:b6:
8d:dc:fb:13:eb:62:ad:ba:74:77:99:36:a3:86:21:a5:ea:e2:
71:5a:92:40:f4:6c:f3:af:2d:1e:28:67:9d:1f:6a:19:cf:bd:
a3:2b:2f:7f:37:e5:0d:d2:74:07:14:07:3e:a7:06:30:66:2f:
01:a4:bc:d3:7f:d4:af:d9:38:9f:ba:32:4a:0e:a8:27:c2:1c:
c5:ca:df:b2:62:2f:67:cc:e4:d0:0b:8c:49:8a:99:87:a2:a0:
c6:f2:7e:fd:ff:00:e2:7f:cd:21:4a:70:eb:d4:ed:e1:98:a7:
89:2f:28:60:14:e9:f9:75:de:d9:c6:bc:3f:21:13:d5:e2:b2:
79:9e:47:f2:3a:11:0b:f4:8d:ad:fe:4a:1e:ef:b4:7d:6d:f7:
43:b0:da:40:bc:21:ba:92:86:ad:6b:4b:32:97:b6:e5:9b:b2:
fd:5d:23:3f:1e:a7:bd:09:00:32:c1:77:b9:64:2e:1b:0f:aa:
6a:82:1e:28:f9:a8:e2:85:12:59:b4:12:df:19:c5:02:1b:78:
17:11:a7:4d:99:83:9b:9c:28:36:20:0c:58:2d:ce:d7:c9:56:
d7:2b:18:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:19:45 2026 by rpki-client