Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/2a488b-f8db-4b78-8a8c-f61486fdc7e0/1/bee1V3DAsL3vmxIGCRqRRw8rRe4.roa
File: bee1V3DAsL3vmxIGCRqRRw8rRe4.roa (raw, json)
Hash identifier: OXTvc3Kqn1zE0kn6NjCTGgCUldoXkwMiJcejV2NhLAg=
Subject key identifier: 6D:E7:B5:57:70:C0:B0:BD:EF:9B:12:06:09:1A:91:47:0F:2B:45:EE
Certificate issuer: /CN=52927f37ed54afece923b5f997b6b14ee83f60e0
Certificate serial: 019D2F96136ECE8DD8D54BD0B313239D6038
Authority key identifier: 52:92:7F:37:ED:54:AF:EC:E9:23:B5:F9:97:B6:B1:4E:E8:3F:60:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpJ_N-1Ur-zpI7X5l7axTug_YOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/2a488b-f8db-4b78-8a8c-f61486fdc7e0/1/bee1V3DAsL3vmxIGCRqRRw8rRe4.roa
Signing time: Fri 27 Mar 2026 13:57:37 +0000
ROA not before: Fri 27 Mar 2026 13:57:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49861
IP address blocks: 91.213.253.0/24 maxlen: 24
91.213.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/2a488b-f8db-4b78-8a8c-f61486fdc7e0/1/UpJ_N-1Ur-zpI7X5l7axTug_YOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/2a488b-f8db-4b78-8a8c-f61486fdc7e0/1/UpJ_N-1Ur-zpI7X5l7axTug_YOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpJ_N-1Ur-zpI7X5l7axTug_YOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2f:96:13:6e:ce:8d:d8:d5:4b:d0:b3:13:23:9d:60:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52927f37ed54afece923b5f997b6b14ee83f60e0
Validity
Not Before: Mar 27 13:57:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6de7b55770c0b0bdef9b1206091a91470f2b45ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e4:66:eb:1a:79:f9:f1:01:d5:d4:3e:50:30:
e9:00:c3:ca:21:91:93:74:71:19:e5:ca:12:da:87:
87:65:93:25:6b:55:16:f0:7a:13:02:b9:f9:22:b8:
6e:fe:e5:6e:68:8f:96:d4:3d:3c:a8:5b:59:0c:67:
49:44:6e:6e:68:10:94:0b:61:96:f5:cc:46:29:4b:
60:a7:36:0e:35:38:bd:cc:c5:74:09:f3:7e:e8:6c:
7a:f3:59:d7:ca:34:71:14:eb:49:10:f0:27:0c:44:
84:0e:b5:90:69:ce:e9:83:c8:73:f7:e2:e1:96:a1:
d1:7b:4b:04:1a:5b:4e:ed:70:79:77:c9:22:8b:27:
97:5d:1f:a5:74:a6:5c:d4:68:97:15:b3:76:01:56:
ba:7a:30:6a:90:75:62:15:73:9b:ab:74:24:17:7d:
81:85:3f:05:04:21:80:43:da:16:10:d6:73:39:5d:
fa:ca:67:4f:40:d6:12:9d:84:41:8e:2f:0f:a2:9d:
7d:d9:ae:e7:ef:96:5f:38:c8:4b:fb:dc:94:9b:28:
22:34:25:2c:09:1b:ec:1a:a4:3d:9c:bb:88:4e:10:
53:d3:6a:67:08:45:7e:b1:87:04:dc:78:95:07:bc:
fc:d2:30:85:c7:6b:dc:4b:f7:70:ab:65:07:58:04:
fc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E7:B5:57:70:C0:B0:BD:EF:9B:12:06:09:1A:91:47:0F:2B:45:EE
X509v3 Authority Key Identifier:
keyid:52:92:7F:37:ED:54:AF:EC:E9:23:B5:F9:97:B6:B1:4E:E8:3F:60:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpJ_N-1Ur-zpI7X5l7axTug_YOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2a488b-f8db-4b78-8a8c-f61486fdc7e0/1/bee1V3DAsL3vmxIGCRqRRw8rRe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/2a488b-f8db-4b78-8a8c-f61486fdc7e0/1/UpJ_N-1Ur-zpI7X5l7axTug_YOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.253.0-91.213.254.255
Signature Algorithm: sha256WithRSAEncryption
42:6a:53:9d:fc:58:a6:95:8e:5f:d4:09:6f:1d:62:45:2d:5b:
16:ff:ab:48:f5:21:bc:de:81:c1:15:d1:0c:d5:ed:4e:d0:f1:
75:3d:2f:35:08:88:de:5c:50:d9:dd:72:e1:4e:50:b7:13:35:
fe:53:86:85:36:41:12:20:5f:16:b2:e0:a4:0c:92:0b:d8:51:
9e:2f:39:e9:07:0c:55:fd:dd:86:53:3b:64:68:cd:12:c2:3d:
3f:b9:d8:dc:0f:41:c6:8a:0b:20:6b:6a:af:31:93:50:ae:7a:
0b:2c:01:1d:87:52:3f:d6:ed:ac:83:dd:a2:a9:41:d2:9d:32:
ce:2d:34:5a:86:74:d4:48:d8:9a:29:78:69:95:75:ee:67:38:
ed:c4:10:21:63:05:7d:cb:18:c2:0f:92:ab:34:b9:88:34:87:
d7:ad:f8:2e:cd:b2:f8:05:aa:fb:47:2a:85:63:cd:9c:cb:93:
7e:0a:c9:d5:3c:3a:29:41:e5:5b:00:75:84:8e:b4:14:d0:7d:
c4:a5:f7:b4:bc:ab:ad:7f:c2:82:9c:5b:1b:a9:8c:53:35:88:
03:1f:e7:0b:5f:a0:61:99:38:a8:29:99:fc:6b:79:89:4b:f6:
0f:cf:e3:e2:ae:ab:f6:a6:9e:8d:20:45:65:1b:64:9b:17:b5:
d6:5b:14:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:38:43 2026 by rpki-client