Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/BESps96jjbkbKoxMkgbttn11fjs.roa
File: BESps96jjbkbKoxMkgbttn11fjs.roa (raw, json)
Hash identifier: Ih2mIe3IsmSy+biaTdhN0Z4GQBVTDEaUyAg+Cld5GOg=
Subject key identifier: 04:44:A9:B3:DE:A3:8D:B9:1B:2A:8C:4C:92:06:ED:B6:7D:75:7E:3B
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 01A1C6BA3F40DF49081861F308E54A62A030
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/BESps96jjbkbKoxMkgbttn11fjs.roa
Signing time: Tue 10 Nov 2026 18:30:56 +0000
ROA not before: Tue 10 Nov 2026 18:30:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211422
IP address blocks: 94.154.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c6:ba:3f:40:df:49:08:18:61:f3:08:e5:4a:62:a0:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Nov 10 18:30:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0444a9b3dea38db91b2a8c4c9206edb67d757e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:97:e6:a8:ea:bc:90:f4:b6:e9:78:be:80:9b:
35:11:12:8c:b8:7c:c3:40:8e:65:d4:59:b8:c9:10:
83:91:fc:03:2d:c5:d8:68:74:4c:68:22:94:f7:de:
bc:26:95:0c:60:70:d2:d6:68:12:9d:3e:2c:67:d8:
44:2e:d1:ce:31:79:df:19:d3:af:35:f5:e6:5e:5d:
b1:20:f1:4d:cb:f2:f0:10:43:2b:1a:8e:3c:21:a8:
b7:63:22:05:4f:9d:06:c4:6d:91:41:78:ad:3f:03:
3e:c2:fe:fb:ee:7d:3d:b1:5e:ad:3a:00:f9:0e:8f:
5e:4b:b0:42:ea:48:55:b6:2d:72:13:2c:9f:2a:57:
d4:a5:8e:94:9c:ef:fe:c2:8e:27:50:f8:ad:33:38:
08:ef:f0:41:0a:73:ca:c0:70:9e:67:d0:39:4f:c3:
09:c3:90:b7:39:43:78:35:03:20:68:dc:5d:c3:64:
a7:ea:d3:bf:0a:7b:c5:48:3e:71:bc:f3:3b:7a:af:
2b:3f:75:a7:04:33:10:bf:dc:78:ff:06:a4:ae:9e:
a1:7d:0a:aa:00:ab:be:5e:a0:fc:29:87:29:4e:fe:
9c:25:3c:13:2a:d4:f8:69:14:33:59:7e:81:ef:76:
c5:85:79:c4:f0:6b:5f:90:10:bc:5f:dc:eb:66:86:
02:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:44:A9:B3:DE:A3:8D:B9:1B:2A:8C:4C:92:06:ED:B6:7D:75:7E:3B
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/BESps96jjbkbKoxMkgbttn11fjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.36.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:24:1c:37:61:38:a8:39:24:46:b7:bd:fa:32:92:d3:6d:98:
29:9b:35:72:69:ec:e9:4a:c4:16:72:04:45:73:a0:9f:a4:10:
39:3b:9d:fe:a1:34:7b:ad:0e:27:47:5f:2f:28:69:3d:0b:3a:
f9:ed:72:81:15:bc:c3:2c:8c:12:22:c5:67:4e:af:1e:f1:7f:
2a:2e:75:ac:de:f6:eb:4d:39:35:e9:6f:39:59:44:23:73:5c:
23:64:21:23:75:7a:c2:d2:ad:f9:1c:63:65:c7:3e:b2:6b:48:
45:2e:9a:33:e0:f5:85:2b:5b:9e:9e:86:c1:9d:00:4a:87:a4:
e3:00:53:df:f8:87:9e:b7:6e:93:df:fa:cd:96:6b:ff:37:21:
1d:a1:e3:c3:25:4f:c3:3e:22:04:3d:f3:e1:62:fb:64:bb:29:
43:0f:c3:1b:ca:7c:28:72:bb:2d:28:6c:53:f7:ac:0f:c6:e2:
3d:9c:0e:2f:ad:73:95:1b:92:59:79:8c:26:2b:a3:fe:86:f3:
5d:79:1b:22:e7:8c:a6:86:b0:22:29:f4:9d:19:89:33:55:87:
08:62:a6:e2:9c:e8:9c:4a:db:c8:c6:f9:84:c2:b9:e2:a5:8f:
de:e8:a3:10:48:a0:b5:69:99:a1:63:48:f7:8f:01:b6:16:cc:
57:a2:13:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:49:46 2026 by rpki-client