Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/su2sRkw-1fdmlKPXK-EYb8t58HY.roa
File: su2sRkw-1fdmlKPXK-EYb8t58HY.roa (raw, json)
Hash identifier: heWmuwOUtxMU1Wu52LXdE0CUtvQEM3UIyfXIUiHadmk=
Subject key identifier: B2:ED:AC:46:4C:3E:D5:F7:66:94:A3:D7:2B:E1:18:6F:CB:79:F0:76
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01A1799BF0E9D9D0A17C6A3879B613674DAA
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/su2sRkw-1fdmlKPXK-EYb8t58HY.roa
Signing time: Mon 26 Oct 2026 19:07:05 +0000
ROA not before: Mon 26 Oct 2026 19:07:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40676
IP address blocks: 193.148.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:9b:f0:e9:d9:d0:a1:7c:6a:38:79:b6:13:67:4d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Oct 26 19:07:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2edac464c3ed5f76694a3d72be1186fcb79f076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e5:81:4d:bf:76:37:06:9c:ff:5f:8f:4c:98:
8e:30:20:98:0e:45:97:78:45:e2:59:a4:68:48:02:
91:0c:fb:7b:89:f6:c9:f6:e7:1c:c7:0c:bf:fb:e8:
54:a4:f1:9d:4a:a4:11:ab:c1:59:cd:e0:ea:fd:47:
17:92:73:6c:91:e3:ea:0d:c1:02:3e:6e:b4:07:70:
f0:43:ea:29:64:8b:fd:23:4a:b6:bb:d6:ef:12:8b:
35:d7:41:bb:64:26:5d:12:d2:87:19:cc:df:fd:e8:
47:b0:38:e5:5a:3d:ef:bc:c8:92:49:d6:8c:c4:55:
7c:5d:f8:41:98:df:db:33:5a:84:66:91:ae:e1:16:
8f:a2:d5:e7:73:11:06:88:4c:b2:7d:1d:0d:cf:81:
01:d4:02:79:b4:71:b6:c1:6e:47:2f:99:d6:1a:de:
93:c5:8e:35:f5:a6:24:3e:2e:77:af:fd:66:94:85:
83:c3:59:99:ed:c8:a2:b6:ec:a8:45:3f:9e:fb:19:
a8:5f:01:70:44:29:ce:81:18:9e:6f:eb:d7:24:88:
e7:7d:8f:cb:8c:b9:d1:71:a7:8d:70:8a:9e:99:6c:
e6:32:25:08:71:82:de:7e:3a:99:df:c4:cd:c1:ce:
8d:aa:2f:8d:93:13:d2:d5:5a:09:c7:fe:9c:be:ab:
0a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:ED:AC:46:4C:3E:D5:F7:66:94:A3:D7:2B:E1:18:6F:CB:79:F0:76
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/su2sRkw-1fdmlKPXK-EYb8t58HY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.63.0/24
Signature Algorithm: sha256WithRSAEncryption
15:ab:e7:44:b4:0b:08:15:a8:23:7b:d1:95:08:14:2e:47:a7:
c5:6a:e3:36:c1:85:87:45:2a:4c:3a:9a:f2:81:d9:33:da:a6:
fa:88:07:fd:03:e6:80:52:1b:f4:13:12:33:c4:e3:a7:7b:97:
01:8e:e9:34:7c:2d:ba:30:b0:f2:da:50:07:b1:c6:39:1e:35:
3f:da:3f:ae:cc:21:fc:76:f9:25:7a:c4:a9:90:b8:b5:24:5b:
df:c0:97:30:b1:89:87:5b:ee:bf:9f:cf:94:2b:67:2e:73:cb:
e8:55:7b:49:95:4e:e7:3d:9e:be:1c:8a:e4:19:ff:ab:0e:9e:
14:8c:07:60:d1:bf:4f:68:0d:0e:50:19:d5:ab:e6:ee:7e:8d:
29:58:38:5f:14:7b:14:03:fd:ce:97:fc:61:36:22:d0:e2:53:
3d:2f:61:9e:75:dd:dc:fd:95:71:c6:ca:25:22:4f:d5:00:fb:
a3:22:18:90:4b:0e:4f:1e:02:be:88:92:89:34:7a:2c:54:64:
46:75:11:ba:27:5a:5d:7e:37:27:a6:9a:04:97:28:52:eb:5e:
a6:82:11:d3:f7:8d:f8:ea:de:d3:a0:f3:60:d5:ed:ed:e9:e6:
28:ff:ad:d0:2f:75:23:cf:5d:e2:57:d9:7e:fa:2e:ae:35:45:
a2:55:60:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:44:26 2026 by rpki-client