Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/BdSuQVDQN0VvLBhw0-t0KDo8T2w.roa
File: BdSuQVDQN0VvLBhw0-t0KDo8T2w.roa (raw, json)
Hash identifier: Adx+9mj7hvvMFLBS193scbpgC/haFVM6A5WGrKZ0rkc=
Subject key identifier: 05:D4:AE:41:50:D0:37:45:6F:2C:18:70:D3:EB:74:28:3A:3C:4F:6C
Certificate issuer: /CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Certificate serial: 019D24B6E38A8A4DDC820A93FE48A31D9D09
Authority key identifier: 80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/BdSuQVDQN0VvLBhw0-t0KDo8T2w.roa
Signing time: Wed 25 Mar 2026 11:17:38 +0000
ROA not before: Wed 25 Mar 2026 11:17:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25446
IP address blocks: 93.183.104.0/24 maxlen: 24
93.183.105.0/24 maxlen: 24
93.183.106.0/24 maxlen: 24
93.183.107.0/24 maxlen: 24
185.71.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:b6:e3:8a:8a:4d:dc:82:0a:93:fe:48:a3:1d:9d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80615315dc750c03e60fc36a750c5e3ff66eac94
Validity
Not Before: Mar 25 11:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05d4ae4150d037456f2c1870d3eb74283a3c4f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f2:f1:03:bc:68:10:33:05:98:36:4a:42:4a:
3d:f8:63:d2:38:c2:1f:40:5c:ce:41:ae:8b:81:15:
10:22:15:51:e4:48:09:a4:8e:59:06:30:bf:de:d7:
08:5e:7e:2c:73:ed:13:52:de:57:de:86:83:89:4e:
f6:af:b9:05:ad:16:e1:ce:0c:d9:d1:a4:58:b4:a0:
a2:0e:89:f3:4a:99:3d:41:db:71:e0:f4:c7:1c:f5:
53:19:74:10:50:7f:56:03:25:a6:16:4e:96:d2:97:
09:d2:bc:43:94:4e:2f:7b:64:dc:08:f2:30:6c:f6:
5b:c1:b6:dd:8e:06:c2:f9:16:2f:e0:10:27:b6:f0:
b7:f5:c3:6b:73:95:c8:5d:88:92:fe:1a:b6:11:38:
fa:28:ee:e8:f5:5b:bc:4a:ff:d8:84:fa:fe:d4:0b:
5d:b2:f2:9a:a3:2e:b1:b2:d1:c0:02:c2:60:93:98:
c2:24:1f:ba:22:b6:3a:53:22:54:b5:31:a6:72:4e:
c4:ad:29:4a:54:b8:6c:61:25:d6:40:58:1d:f7:bd:
60:77:52:8a:5a:f1:36:a8:c4:79:f8:6c:85:1c:f2:
a0:f8:d3:5f:24:c0:0b:5c:1f:72:67:af:64:87:c8:
7b:a1:d7:f3:51:3a:58:42:1e:49:25:ec:2f:ba:75:
a4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D4:AE:41:50:D0:37:45:6F:2C:18:70:D3:EB:74:28:3A:3C:4F:6C
X509v3 Authority Key Identifier:
keyid:80:61:53:15:DC:75:0C:03:E6:0F:C3:6A:75:0C:5E:3F:F6:6E:AC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/BdSuQVDQN0VvLBhw0-t0KDo8T2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/de84ce-d704-4766-a388-f8e5b2d8680c/1/gGFTFdx1DAPmD8NqdQxeP_ZurJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.183.104.0/22
185.71.196.0/24
Signature Algorithm: sha256WithRSAEncryption
43:77:aa:63:8a:22:ed:b2:e1:a7:41:a1:f1:ab:f2:32:a0:a6:
f3:74:33:95:af:31:66:fa:f0:c3:2d:64:29:75:40:22:96:ba:
aa:ad:56:19:35:d6:ac:2a:47:af:e3:81:c0:85:5e:10:39:24:
39:8f:82:9c:b4:47:da:c8:c2:e7:1f:22:3c:a3:77:c5:6f:a0:
bc:da:70:b1:eb:10:38:93:a7:2c:56:53:bf:c6:6f:9c:3e:cc:
b5:1f:27:7a:60:96:83:3a:2a:df:dd:d1:09:f0:df:2a:c8:bb:
4b:6b:cb:93:57:d9:c0:c8:35:af:6f:c5:51:c0:9b:19:52:2c:
12:d5:b7:0f:31:f4:01:91:2b:e8:16:7a:35:50:4f:d1:4f:72:
c2:71:67:af:85:96:ac:6a:b6:9a:56:e3:ea:bf:fb:a4:86:a7:
bc:7b:6d:c4:1d:6e:8e:d5:66:89:f4:7f:85:c3:60:99:8f:61:
33:0e:54:79:fa:93:ce:10:de:99:ca:00:b0:b3:4a:52:af:c0:
c4:d0:93:eb:3f:1d:d2:f9:2d:78:d9:82:87:ca:2c:06:f0:ad:
04:e0:bd:c4:bd:e4:b7:52:dd:b7:77:53:4a:4e:5f:57:cd:52:
22:75:cf:9e:8a:f3:0a:e4:79:53:08:ea:d0:11:8c:1c:52:d3:
53:98:02:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:33:56 2026 by rpki-client