Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/BePdx7tW2bWhJEz6O-vr9wb816o.roa
File: BePdx7tW2bWhJEz6O-vr9wb816o.roa (raw, json)
Hash identifier: WtiKq/G5c/T330aTMkwOcuzFkmqOu1D2W5QDdcZGU2g=
Subject key identifier: 05:E3:DD:C7:BB:56:D9:B5:A1:24:4C:FA:3B:EB:EB:F7:06:FC:D7:AA
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019F4C33B0BC16C64D0F356AAB5FA01C03B9
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/BePdx7tW2bWhJEz6O-vr9wb816o.roa
Signing time: Fri 10 Jul 2026 13:24:43 +0000
ROA not before: Fri 10 Jul 2026 13:24:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34346
IP address blocks: 87.232.112.0/24 maxlen: 24
87.232.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4c:33:b0:bc:16:c6:4d:0f:35:6a:ab:5f:a0:1c:03:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Jul 10 13:24:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05e3ddc7bb56d9b5a1244cfa3bebebf706fcd7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d2:25:38:cc:b2:27:b7:23:2f:a7:4b:92:fd:
9e:15:c1:79:97:2c:61:05:a5:46:ac:c1:09:ba:f6:
67:2d:1f:ca:86:4a:f8:58:b6:33:e7:a9:97:f2:7f:
86:4e:71:23:94:ba:c1:88:fd:de:29:0e:ce:c8:45:
9e:2a:3b:7f:c9:0a:b9:ac:bd:5f:92:e1:c3:f1:3e:
53:20:eb:ec:75:0e:68:ea:ba:11:a6:1a:aa:2d:88:
55:91:06:df:06:5f:8b:b5:57:5d:92:58:c2:d0:13:
21:d0:6d:26:8b:8b:9e:03:9b:52:69:1c:f7:e7:82:
b5:a0:61:23:05:df:09:6a:e0:69:b4:7f:57:69:a6:
86:ff:c6:41:da:4c:fb:35:6f:48:20:2e:0d:4b:f7:
10:82:53:fd:ff:1d:3a:ea:08:80:d3:26:ad:f4:03:
46:fd:c2:96:6b:be:54:23:60:7c:ce:ba:7e:47:ae:
ac:de:84:d3:5d:f7:df:3e:a4:dd:7c:d8:7c:68:d6:
f8:f3:fb:2b:b1:f0:b7:a7:44:6a:56:96:3f:35:4d:
55:40:03:c1:fc:57:0a:94:55:f0:91:d8:7b:34:27:
34:21:8d:1b:2c:53:b3:75:34:4f:a7:ef:b8:a4:f2:
55:0e:d3:6f:04:a9:da:f6:a5:6f:af:12:17:be:83:
32:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E3:DD:C7:BB:56:D9:B5:A1:24:4C:FA:3B:EB:EB:F7:06:FC:D7:AA
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/BePdx7tW2bWhJEz6O-vr9wb816o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.112.0/24
87.232.116.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:a9:73:ec:35:ca:aa:6b:ee:b7:f2:92:21:3c:9f:52:a6:13:
c3:af:fb:0a:a3:31:56:b6:34:51:8f:2a:41:7f:5a:a2:10:8d:
4e:d6:5f:e4:48:31:38:42:d2:a3:bc:46:da:14:b3:ff:3a:d0:
38:8a:b4:29:a1:e1:6e:0e:6e:33:fc:48:6a:43:56:cc:0f:43:
e8:f2:91:43:24:c2:62:00:fc:b0:88:9a:05:41:4d:53:8f:cd:
09:c9:d2:80:04:72:d9:5e:a1:8b:ac:6f:6e:e7:93:2e:24:80:
6a:c9:e5:67:21:c6:a0:a5:82:f7:fd:77:31:55:9d:43:45:2f:
6d:30:83:85:ea:8e:0d:7d:ea:74:11:58:05:46:59:1a:24:20:
97:d6:d2:23:7d:2f:e3:c3:d4:1a:9c:a2:89:0e:76:d2:0a:b2:
9d:a1:3a:7b:0f:29:13:19:46:5c:e5:50:77:6f:c8:2a:22:46:
83:33:a6:34:0d:08:20:89:ff:9a:22:d6:dd:cc:5e:31:d5:5e:
93:e9:7a:d3:10:8b:c0:c8:70:94:37:28:46:26:74:ff:b6:2a:
a7:81:46:10:88:a0:f8:7a:08:93:9b:9d:85:80:2c:e0:fd:87:
01:bc:6e:50:38:dc:5a:78:24:13:bf:dd:36:97:4e:93:48:c9:
26:48:75:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 13:22:09 2026 by rpki-client