Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/KhXEU0fGbf7pbGhKAaic31wf2eQ.roa
File: KhXEU0fGbf7pbGhKAaic31wf2eQ.roa (raw, json)
Hash identifier: H1YasEH73zbDU9HkoFSXWTyvRA2rX0uMR+WtgTikrE0=
Subject key identifier: 2A:15:C4:53:47:C6:6D:FE:E9:6C:68:4A:01:A8:9C:DF:5C:1F:D9:E4
Certificate issuer: /CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Certificate serial: 01A1C7AEAF82001A7CDF5F41FBBDB0B05667
Authority key identifier: BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/KhXEU0fGbf7pbGhKAaic31wf2eQ.roa
Signing time: Tue 10 Nov 2026 22:57:56 +0000
ROA not before: Tue 10 Nov 2026 22:57:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218366
IP address blocks: 193.31.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 16:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c7:ae:af:82:00:1a:7c:df:5f:41:fb:bd:b0:b0:56:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Validity
Not Before: Nov 10 22:57:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2a15c45347c66dfee96c684a01a89cdf5c1fd9e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f2:8a:15:62:95:49:50:b9:a8:9d:18:57:5c:
0f:e7:12:43:8d:c8:06:be:47:12:dd:59:dd:14:11:
f0:82:4a:a7:4c:d8:ad:36:8d:2f:b6:51:93:d3:6e:
b6:78:90:d4:7f:dc:34:00:a9:fb:74:6e:91:c7:29:
8f:5e:c6:7f:80:29:7a:5f:03:0b:10:92:4d:fb:5f:
2a:6a:45:85:b5:28:6d:30:e3:00:a4:89:57:47:42:
dc:5b:9f:cb:4c:8c:13:e1:98:31:b9:82:01:33:df:
85:a1:bb:08:40:4e:7a:67:e9:38:5c:e8:8c:09:d2:
b4:8d:83:3a:d0:b7:92:c2:07:83:88:f3:72:b9:e6:
d3:69:23:25:20:7f:fd:5e:6b:3f:a7:a7:9f:f5:75:
bd:dd:16:4c:38:45:72:ae:d9:39:97:6b:7e:10:c5:
59:0a:72:14:fe:1c:f1:b0:4f:1f:74:03:55:47:68:
d8:7b:53:8a:dd:5d:96:c9:6f:0e:03:ff:68:28:9f:
21:7f:92:d4:af:ad:06:ab:42:27:6a:e3:99:50:65:
ca:88:dd:38:b4:f5:9a:7e:9b:77:2b:03:1c:33:d2:
bd:64:22:a5:a0:7c:21:bc:3c:51:1c:e9:f1:22:a0:
12:ca:92:17:a4:6d:24:3b:d0:8c:e0:0b:0c:b1:de:
ce:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:15:C4:53:47:C6:6D:FE:E9:6C:68:4A:01:A8:9C:DF:5C:1F:D9:E4
X509v3 Authority Key Identifier:
keyid:BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/KhXEU0fGbf7pbGhKAaic31wf2eQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.15.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:3f:9c:21:6c:26:51:a1:ae:22:f6:61:d9:a6:d1:74:ec:8d:
2e:29:17:96:06:f3:32:69:4d:c8:fc:c1:89:81:5d:31:56:15:
84:ba:ca:2f:d2:0e:eb:58:44:69:7b:e1:bb:3a:a8:d5:62:02:
d3:77:50:fc:70:37:4d:78:aa:c3:ea:2c:51:eb:52:c5:ef:1d:
6e:47:7e:f9:53:3a:63:55:73:92:94:e8:56:7e:b2:a1:29:02:
21:3a:8d:44:83:e8:b8:e5:8f:02:a0:8b:28:c0:a2:e8:90:71:
40:89:bc:29:3a:50:90:d3:f1:63:e3:7a:27:db:92:1d:36:43:
4d:29:6e:6b:f9:89:45:76:27:3d:47:81:74:ad:d4:56:27:59:
54:44:69:a5:17:1b:ea:2c:02:81:7a:3c:bc:40:af:4a:8b:fd:
b3:00:14:b1:9c:a7:2c:61:08:c7:86:50:9d:85:27:27:0f:4b:
15:ea:4a:49:67:71:27:48:04:f1:d9:e7:59:fc:f8:87:04:f0:
f4:51:cf:4c:1f:52:56:1f:43:7f:b7:dd:f5:3f:bb:0c:4a:78:
8c:57:2e:81:f0:53:ab:bc:1f:2b:d5:ca:23:92:ec:5e:a8:e0:
bf:c3:1a:f9:ed:2e:18:81:98:f9:96:4e:36:86:4c:3b:fc:a3:
80:62:7d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:25:20 2026 by rpki-client