Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/BeW6fNTmqXgR5pM9jh3vGj3b64A.roa
File: BeW6fNTmqXgR5pM9jh3vGj3b64A.roa (raw, json)
Hash identifier: IkKehMA98jcUqaZ277fk0SXWhXVAaXeBHuf7iTvYGmU=
Subject key identifier: 05:E5:BA:7C:D4:E6:A9:78:11:E6:93:3D:8E:1D:EF:1A:3D:DB:EB:80
Certificate issuer: /CN=d242e3037b6088ee6de94862596893e6eba94fbf
Certificate serial: 019F23686E1BFDA6CE772E2C297A2A03A24A
Authority key identifier: D2:42:E3:03:7B:60:88:EE:6D:E9:48:62:59:68:93:E6:EB:A9:4F:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kLjA3tgiO5t6UhiWWiT5uupT78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/BeW6fNTmqXgR5pM9jh3vGj3b64A.roa
Signing time: Thu 02 Jul 2026 15:17:54 +0000
ROA not before: Thu 02 Jul 2026 15:17:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35271
IP address blocks: 31.10.64.0/18 maxlen: 18
93.185.192.0/20 maxlen: 20
2a03:700::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/0kLjA3tgiO5t6UhiWWiT5uupT78.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/0kLjA3tgiO5t6UhiWWiT5uupT78.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kLjA3tgiO5t6UhiWWiT5uupT78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 15:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:6e:1b:fd:a6:ce:77:2e:2c:29:7a:2a:03:a2:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d242e3037b6088ee6de94862596893e6eba94fbf
Validity
Not Before: Jul 2 15:17:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05e5ba7cd4e6a97811e6933d8e1def1a3ddbeb80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f6:c2:05:66:10:2d:fc:c3:60:64:15:39:8e:
ff:ef:bb:70:59:de:b1:b0:35:60:11:c5:54:cc:c5:
05:e2:22:7b:32:b2:96:a2:08:4b:c9:cd:8a:15:89:
97:49:df:13:8c:e1:e9:df:14:d4:40:44:26:ed:87:
90:d6:0a:f9:7b:7d:e5:d1:8e:ee:e4:45:91:48:bc:
19:3a:09:ba:aa:ec:4a:ea:0d:32:05:23:d9:19:3e:
1f:05:df:57:6e:d0:73:b7:b0:cb:a3:94:9d:0d:09:
4c:93:2f:3a:59:df:10:19:07:44:4c:a1:3f:d4:8b:
7e:82:dc:60:23:35:4a:6a:d1:eb:00:4f:4c:c1:67:
61:29:51:b4:f3:19:fa:bd:65:b6:68:9a:17:4d:fe:
ea:b0:c2:50:5f:e3:9b:a6:b9:1b:bc:54:cd:e0:bb:
18:f7:ce:3f:7c:ea:23:8a:6e:7f:dd:54:8c:8a:78:
13:e0:82:46:4c:4f:46:ca:9d:88:26:0b:d3:97:97:
18:2f:7e:84:1f:fa:17:8d:13:b5:56:ee:78:75:be:
61:c4:72:ff:70:e3:5b:9e:b4:7c:b6:5d:7a:ec:26:
4e:3c:45:80:a9:c0:2c:8f:58:6d:05:5f:f6:b9:d6:
72:08:77:5c:a5:f5:ab:70:d4:fd:e3:f3:27:fd:bd:
28:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E5:BA:7C:D4:E6:A9:78:11:E6:93:3D:8E:1D:EF:1A:3D:DB:EB:80
X509v3 Authority Key Identifier:
keyid:D2:42:E3:03:7B:60:88:EE:6D:E9:48:62:59:68:93:E6:EB:A9:4F:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kLjA3tgiO5t6UhiWWiT5uupT78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/BeW6fNTmqXgR5pM9jh3vGj3b64A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7e9867-c534-468c-8d5e-e4f64b0de36a/1/0kLjA3tgiO5t6UhiWWiT5uupT78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.10.64.0/18
93.185.192.0/20
IPv6:
2a03:700::/32
Signature Algorithm: sha256WithRSAEncryption
18:72:ae:f1:71:cb:ce:b4:a5:10:fe:08:5d:91:5b:67:be:b8:
76:24:7c:d4:c2:62:c5:03:6e:73:26:37:25:3c:5d:da:b6:6f:
5d:b8:18:ae:4f:a7:a5:31:8f:bf:0c:d3:b2:9d:c5:3f:fd:52:
81:0b:1b:01:60:83:3b:1f:8f:c9:9f:8e:ff:cb:39:06:9e:6c:
33:8d:fb:1a:eb:ef:32:b1:86:9a:ec:99:87:ae:66:a5:a5:5a:
60:38:90:be:c7:3d:c8:66:03:e3:fe:fc:96:c9:d6:26:b1:cc:
73:a4:50:65:72:e6:48:e2:08:a4:f4:b4:ec:1d:72:7d:cd:43:
fc:bd:06:1b:0f:03:ec:5a:dd:98:97:46:5b:9a:16:a4:38:fa:
13:d1:ca:ae:07:fd:3f:6c:88:38:01:db:ff:63:f4:2c:2b:4e:
69:9f:7c:50:c5:42:0a:e9:ae:53:05:59:82:fa:9c:74:f5:74:
5f:aa:92:27:a6:e6:77:38:1b:4e:93:8c:eb:a1:40:62:53:60:
da:bd:a9:fd:a2:5a:a4:00:ed:26:44:aa:ad:c4:c3:db:7a:06:
b2:17:a0:1c:9b:32:80:b9:55:85:68:58:eb:90:bb:74:ee:11:
3b:27:44:70:7b:a6:e0:d9:4e:f9:fe:19:bc:c2:47:b0:61:27:
2e:97:42:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:02:44 2026 by rpki-client