Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/bKdMR401CRjb4M0J6gvCiwndHoI.roa
File: bKdMR401CRjb4M0J6gvCiwndHoI.roa (raw, json)
Hash identifier: KC6rA7htj/7haveJkp7XVKse7Ha5Oeaf/6LakeucdaU=
Subject key identifier: 6C:A7:4C:47:8D:35:09:18:DB:E0:CD:09:EA:0B:C2:8B:09:DD:1E:82
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 01A1342BFB22B1BDF0694B9D17B128E9D9F0
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/bKdMR401CRjb4M0J6gvCiwndHoI.roa
Signing time: Tue 13 Oct 2026 07:30:59 +0000
ROA not before: Tue 13 Oct 2026 07:30:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198969
IP address blocks: 45.6.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:2b:fb:22:b1:bd:f0:69:4b:9d:17:b1:28:e9:d9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: Oct 13 07:30:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ca74c478d350918dbe0cd09ea0bc28b09dd1e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1d:80:b7:41:15:97:40:bb:dc:6b:88:5a:fc:
e0:5a:45:a5:8c:e6:53:a9:0a:f1:03:48:55:8f:8b:
fa:e1:1f:2a:b7:80:59:8b:fd:98:aa:a7:08:75:4d:
13:65:0b:a1:6c:7a:a0:cd:57:55:0d:39:f7:9e:17:
1e:31:44:73:df:78:b8:5e:f1:d0:87:5c:99:38:d2:
1b:44:ef:9b:08:d7:4d:c8:51:41:e2:cc:f4:9f:d3:
0c:c1:e7:5d:1b:af:4c:e0:e7:ae:19:6c:2f:de:b6:
a0:70:f1:fd:b6:28:81:a4:ef:cc:43:8b:f7:60:77:
ea:62:03:d8:86:a1:8b:cc:d5:e2:56:f0:4b:99:9b:
35:70:c4:46:ce:06:ed:fd:c0:06:ba:e3:2d:f3:3d:
73:cc:67:12:a7:e3:30:3e:b4:18:da:ca:c6:0f:13:
23:49:b0:9c:bc:a4:ea:b4:7e:5a:07:9d:bf:af:29:
66:b4:f3:da:5d:57:24:80:05:cd:bb:79:61:17:a1:
fb:b5:4d:3a:2a:3e:f9:c1:72:a2:5f:1b:c4:dc:c9:
eb:7f:92:d1:c7:a6:92:d9:ff:61:7b:3a:c0:af:ba:
2d:0a:13:51:2e:08:22:72:16:fc:e3:60:82:ca:24:
98:9e:29:3d:ce:c9:fc:81:fe:ff:c8:41:b2:cb:c0:
4e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A7:4C:47:8D:35:09:18:DB:E0:CD:09:EA:0B:C2:8B:09:DD:1E:82
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/bKdMR401CRjb4M0J6gvCiwndHoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.46.0/24
Signature Algorithm: sha256WithRSAEncryption
46:24:e2:34:94:2e:d0:28:19:3c:27:b6:7c:b8:22:8e:a3:e0:
7f:15:91:f5:2e:72:14:f4:91:ab:06:0e:c3:2e:ef:d2:e3:dd:
af:95:80:43:f7:af:c6:5f:9c:ab:9c:dd:26:b9:df:23:69:b7:
de:d7:4e:56:e6:28:80:cf:6c:8a:8c:f6:4b:34:bc:bf:e1:01:
9c:1b:ba:cc:55:23:e3:9f:8f:30:a4:10:4c:56:36:7c:a8:03:
e5:1a:91:fb:2f:75:04:1b:96:2a:bd:f2:73:bc:61:f9:04:4e:
ca:04:88:c1:03:bc:41:31:18:0c:da:c3:cc:44:dc:52:db:98:
6d:83:a6:0e:98:63:da:85:6a:1e:58:df:05:eb:06:bf:17:cc:
6f:9e:ac:82:3d:90:4f:19:c3:c1:d0:a1:d4:99:5b:1c:97:a8:
bc:5b:b6:55:11:e3:f2:05:ac:cb:44:02:99:44:e6:b5:d9:fe:
b6:af:ce:a8:95:cf:fe:36:eb:8b:54:53:6e:8e:46:c1:4e:45:
c6:ce:4c:a3:cc:70:4e:ca:63:35:3f:63:9a:27:50:d3:c4:dd:
b2:25:19:a5:4c:24:fa:1b:eb:68:a8:c7:ae:ec:bf:ed:98:2b:
58:74:1e:60:59:12:06:59:4e:a1:1d:a7:99:46:27:5d:8d:a0:
a1:2e:31:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:34:09 2026 by rpki-client