Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/e05343-401b-4bf9-abdd-6ecd3226a2c5/1/be_gkUlk9308BGLed9e-cdXDJwc.roa
File: be_gkUlk9308BGLed9e-cdXDJwc.roa (raw, json)
Hash identifier: KnE/equmjlrwzaYmtyOj+kmh0gRoZ+9TcyDh0b0mqM0=
Subject key identifier: 6D:EF:E0:91:49:64:F7:7D:3C:04:62:DE:77:D7:BE:71:D5:C3:27:07
Certificate issuer: /CN=98e6850c429e4ed52d7680ba9999c0055959f5cb
Certificate serial: 01A0C7E5D24FAC0A43F2845FACC6AB8C6477
Authority key identifier: 98:E6:85:0C:42:9E:4E:D5:2D:76:80:BA:99:99:C0:05:59:59:F5:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOaFDEKeTtUtdoC6mZnABVlZ9cs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/e05343-401b-4bf9-abdd-6ecd3226a2c5/1/be_gkUlk9308BGLed9e-cdXDJwc.roa
Signing time: Tue 22 Sep 2026 06:55:22 +0000
ROA not before: Tue 22 Sep 2026 06:55:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 193.38.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/e05343-401b-4bf9-abdd-6ecd3226a2c5/1/mOaFDEKeTtUtdoC6mZnABVlZ9cs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/e05343-401b-4bf9-abdd-6ecd3226a2c5/1/mOaFDEKeTtUtdoC6mZnABVlZ9cs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mOaFDEKeTtUtdoC6mZnABVlZ9cs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 03:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:e5:d2:4f:ac:0a:43:f2:84:5f:ac:c6:ab:8c:64:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98e6850c429e4ed52d7680ba9999c0055959f5cb
Validity
Not Before: Sep 22 06:55:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6defe0914964f77d3c0462de77d7be71d5c32707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:77:de:47:59:44:59:02:42:6b:63:fc:5c:71:
2d:e7:4c:23:e4:83:51:90:5c:30:0f:54:f9:22:ae:
22:c9:30:74:97:8b:a8:ba:c4:6f:fa:9e:38:9c:df:
37:49:e7:a2:a6:2c:68:f6:88:2b:6f:1c:87:af:8a:
f2:bb:3b:7b:cd:ff:58:72:e6:9d:01:5d:99:4a:09:
a8:b9:39:ea:7d:0c:a1:0d:54:6f:f7:c0:61:68:3f:
9a:20:5c:76:f4:c2:43:d4:fe:54:af:2d:51:02:e9:
70:d9:11:b2:91:95:3b:21:ba:34:8f:4c:bf:6b:cf:
6d:ba:bd:61:3c:ac:db:50:99:8b:25:0d:c0:cd:38:
b0:05:8d:ce:c8:66:f9:9d:5b:73:23:39:61:af:fd:
72:42:89:0f:33:f3:b4:c4:ec:b0:ad:ba:ff:55:6e:
e1:11:ce:6a:df:ea:99:8b:87:58:14:ba:cf:92:c2:
2b:ff:11:7f:34:a6:48:42:08:07:3e:03:7c:21:ca:
b7:15:b0:4d:20:f3:b6:13:98:59:60:44:34:c3:6e:
33:a0:5f:74:be:bd:6f:68:a6:2b:e1:2f:5b:89:04:
41:84:c4:02:36:ff:45:b9:12:c1:db:f4:fe:a4:7b:
33:41:38:56:36:21:4e:56:34:09:0f:7a:f3:f9:d8:
42:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:EF:E0:91:49:64:F7:7D:3C:04:62:DE:77:D7:BE:71:D5:C3:27:07
X509v3 Authority Key Identifier:
keyid:98:E6:85:0C:42:9E:4E:D5:2D:76:80:BA:99:99:C0:05:59:59:F5:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOaFDEKeTtUtdoC6mZnABVlZ9cs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e05343-401b-4bf9-abdd-6ecd3226a2c5/1/be_gkUlk9308BGLed9e-cdXDJwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e05343-401b-4bf9-abdd-6ecd3226a2c5/1/mOaFDEKeTtUtdoC6mZnABVlZ9cs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.143.0/24
Signature Algorithm: sha256WithRSAEncryption
00:62:0e:d0:c0:b1:3e:b6:16:ab:4a:0d:dc:7f:56:9a:e0:54:
a0:e0:2b:10:84:51:e7:60:2f:58:29:7f:19:72:1f:42:9b:3d:
1d:60:bc:2b:49:ae:e2:d5:62:fd:ee:a6:49:b9:ab:50:81:b6:
70:ef:9e:6d:db:ae:31:a3:cc:b6:30:f9:89:46:cd:08:20:ed:
3b:99:38:c7:36:c9:20:b8:7f:51:c9:cc:d0:58:93:23:c9:fa:
70:93:7c:a8:f8:59:89:48:94:2f:33:17:95:11:c9:4a:e5:92:
43:ad:21:1a:3f:12:ca:54:a9:96:56:a0:67:21:e7:8b:cf:56:
de:2b:37:f9:b8:0e:2e:95:25:4a:3f:3d:0a:aa:97:d0:4f:ca:
de:f3:b3:3f:9c:19:d4:17:17:ac:19:9f:31:d1:ef:84:cf:ff:
67:2c:4e:b1:69:ba:5a:05:96:81:20:e5:c7:aa:0f:73:f6:4a:
e3:98:65:37:ca:a9:e3:cc:3a:40:b6:13:91:b1:7e:45:c8:62:
f5:70:9a:0d:36:f1:7d:3f:b7:2d:d7:5b:66:dd:10:3b:bb:1a:
f5:6c:f2:e4:5b:a7:39:60:54:03:d4:38:60:da:5d:7f:6b:35:
c1:69:d0:b0:2e:ea:b5:1a:ed:50:57:86:c6:87:ea:12:c3:1b:
f0:d2:dc:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:40:20 2026 by rpki-client