Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/bbCU6TOTRxByXwc3kWh5rB1GfEY.roa
File: bbCU6TOTRxByXwc3kWh5rB1GfEY.roa (raw, json)
Hash identifier: 7HJpbYh37BP9ue7J5T2pyfcSzB89Q6y5Uf/TOsL+Gb4=
Subject key identifier: 6D:B0:94:E9:33:93:47:10:72:5F:07:37:91:68:79:AC:1D:46:7C:46
Certificate issuer: /CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Certificate serial: 01A17824CC8516D0CBDC9AB9AAA0D4447E66
Authority key identifier: 5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/bbCU6TOTRxByXwc3kWh5rB1GfEY.roa
Signing time: Mon 26 Oct 2026 12:17:19 +0000
ROA not before: Mon 26 Oct 2026 12:17:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152606
IP address blocks: 89.187.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:24:cc:85:16:d0:cb:dc:9a:b9:aa:a0:d4:44:7e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b1b922053bc2e6b15f26c5f890a55ebf5ab3cda
Validity
Not Before: Oct 26 12:17:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6db094e933934710725f0737916879ac1d467c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d4:a6:b9:81:0a:6b:42:17:76:63:d9:2b:3b:
c0:b1:c7:14:27:94:35:ca:e7:ed:1e:fe:ef:f6:03:
59:c9:4a:3a:18:86:f8:39:93:9c:e5:e8:88:b8:b1:
5b:e8:15:62:41:d6:ed:eb:fb:da:25:30:30:88:f8:
95:82:e0:61:aa:4c:12:ea:6c:bf:e2:cd:7f:38:7e:
d6:e2:05:89:30:e9:8b:f7:09:1c:ca:af:81:55:59:
16:fa:31:f6:77:95:8f:67:d4:0b:2d:9a:9c:68:68:
8a:61:fa:0d:b8:fd:63:a6:38:79:db:26:c6:53:82:
73:93:4e:32:88:8e:50:5a:a9:c2:be:a6:9a:b6:30:
f7:f3:e1:0d:19:c5:6d:88:fb:92:e7:1a:24:28:61:
8c:dd:d7:c3:63:10:2c:a8:09:95:b6:e9:7b:5b:5d:
11:3f:bd:08:f7:55:9e:54:8d:cb:76:88:11:91:12:
4a:e7:20:a1:b8:0e:f6:96:b3:70:03:5c:d6:0e:4c:
7b:cc:a2:be:49:21:3f:1d:e2:54:61:74:32:93:03:
92:99:ff:37:f1:42:0b:8f:af:67:41:b4:c8:a0:71:
cf:97:04:6e:09:82:44:51:f6:17:2b:70:07:bd:6b:
8a:2d:47:72:19:e4:29:4a:60:3d:0e:a7:41:63:71:
b6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B0:94:E9:33:93:47:10:72:5F:07:37:91:68:79:AC:1D:46:7C:46
X509v3 Authority Key Identifier:
keyid:5B:1B:92:20:53:BC:2E:6B:15:F2:6C:5F:89:0A:55:EB:F5:AB:3C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WxuSIFO8LmsV8mxfiQpV6_WrPNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/bbCU6TOTRxByXwc3kWh5rB1GfEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/WxuSIFO8LmsV8mxfiQpV6_WrPNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.13.0/24
Signature Algorithm: sha256WithRSAEncryption
03:0d:26:4b:77:9b:67:e8:4d:e7:89:8f:ac:d4:4e:03:c1:22:
30:44:f3:ee:d7:70:13:a9:74:5c:67:03:90:e9:55:d5:1e:f2:
aa:e9:7f:f7:c9:b5:85:2b:ff:ca:13:42:33:8e:c2:2b:54:e0:
5b:ee:7e:7a:fa:fe:d6:af:8d:70:f4:06:14:ef:07:0f:5e:45:
5d:55:fc:80:f7:98:29:d1:fb:fc:08:6c:9d:c3:e8:06:ce:cf:
22:06:bd:b2:8e:e1:26:ba:2a:1f:a0:44:16:bc:e5:c5:c5:a8:
a0:6e:79:2d:c4:90:93:d5:92:e9:e5:7d:4c:d8:12:13:a9:b0:
fa:6a:05:cf:f3:64:6d:96:aa:ad:d9:3c:96:80:7b:81:b5:8e:
b3:40:ae:36:f8:6e:b9:76:e9:06:38:c7:db:4b:ad:7f:b0:a0:
01:c5:5f:e3:88:e1:44:8b:5e:8c:40:08:3c:60:52:47:dc:1d:
41:52:04:80:8b:25:50:44:f9:f9:c2:8d:44:00:0e:29:94:bf:
cc:81:d7:a7:74:e2:79:20:02:50:73:ab:f2:51:97:10:7d:ff:
82:5d:0c:47:c2:c2:52:2a:d0:81:f0:32:d9:22:fa:ba:70:64:
77:6f:53:96:aa:9a:a2:82:69:48:a2:b4:43:15:bd:da:25:dd:
9f:8a:4c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:32:20 2026 by rpki-client