Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/t-bE_B73TZI8Uz45szkrBPUfW0U.roa
File: t-bE_B73TZI8Uz45szkrBPUfW0U.roa (raw, json)
Hash identifier: bLaAjOBStycFvJPWVLG9k9JQVtpgKc6yKcaCHAaF3WQ=
Subject key identifier: B7:E6:C4:FC:1E:F7:4D:92:3C:53:3E:39:B3:39:2B:04:F5:1F:5B:45
Certificate issuer: /CN=d6108a485dfaf06a931f543c085a009c6aea2d9c
Certificate serial: 01A085E4EBD8E0FE09766AF86C5D5E40F836
Authority key identifier: D6:10:8A:48:5D:FA:F0:6A:93:1F:54:3C:08:5A:00:9C:6A:EA:2D:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/t-bE_B73TZI8Uz45szkrBPUfW0U.roa
Signing time: Wed 09 Sep 2026 11:19:27 +0000
ROA not before: Wed 09 Sep 2026 11:19:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46636
IP address blocks: 88.214.193.0/24 maxlen: 24
88.214.195.0/24 maxlen: 24
88.214.201.0/24 maxlen: 24
88.214.206.0/24 maxlen: 24
88.214.207.0/24 maxlen: 24
88.214.208.0/24 maxlen: 24
88.214.250.0/24 maxlen: 24
88.214.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 05:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:85:e4:eb:d8:e0:fe:09:76:6a:f8:6c:5d:5e:40:f8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6108a485dfaf06a931f543c085a009c6aea2d9c
Validity
Not Before: Sep 9 11:19:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7e6c4fc1ef74d923c533e39b3392b04f51f5b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9d:64:e5:62:3b:4a:f6:0e:b8:81:4d:a0:b2:
c9:2a:f9:ef:d6:05:6f:40:c9:3a:bc:83:66:4c:b3:
fa:97:3c:d5:85:56:59:98:66:6b:79:98:12:57:b2:
5b:c5:0b:e8:99:a1:49:44:10:ba:d2:b4:88:f2:5d:
2f:98:10:fc:02:b8:37:ed:57:e0:76:02:3f:13:f0:
06:57:86:07:fe:52:ad:5b:9b:fa:b0:13:a0:73:f3:
09:af:d3:bd:98:e0:19:a0:27:56:a8:11:b3:0b:0d:
a7:7b:3f:21:ce:83:7b:8a:19:36:c4:bc:b1:b4:32:
ba:6e:1f:00:e7:56:34:0a:de:d8:f0:bb:f8:99:b4:
70:82:85:9f:fb:0d:a4:d5:d8:34:6b:5e:18:1c:f8:
2c:45:a1:96:43:fd:33:44:a7:6f:1b:07:2d:49:4c:
8f:ca:55:3a:5f:e8:26:ab:e2:72:bb:8d:d1:82:2e:
fd:ad:8f:94:91:c3:6a:f0:79:2d:fc:32:13:79:0e:
f4:ee:3f:a0:d1:ec:7e:29:ba:18:fd:b0:52:5f:38:
41:aa:42:80:67:ff:8c:d9:fb:a1:0d:9d:d4:81:91:
da:26:70:bd:b5:9d:ef:c0:13:d7:62:ea:70:6a:09:
86:17:84:39:8b:07:45:40:d1:0c:cf:b2:11:a4:51:
01:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E6:C4:FC:1E:F7:4D:92:3C:53:3E:39:B3:39:2B:04:F5:1F:5B:45
X509v3 Authority Key Identifier:
keyid:D6:10:8A:48:5D:FA:F0:6A:93:1F:54:3C:08:5A:00:9C:6A:EA:2D:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hCKSF368GqTH1Q8CFoAnGrqLZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/t-bE_B73TZI8Uz45szkrBPUfW0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7588ca-5677-4795-8a81-b6f9df455249/1/1hCKSF368GqTH1Q8CFoAnGrqLZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.214.193.0/24
88.214.195.0/24
88.214.201.0/24
88.214.206.0-88.214.208.255
88.214.250.0/24
88.214.255.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:e7:1e:b3:99:3b:41:51:18:80:53:22:5c:64:29:b2:75:ae:
3e:ab:7d:17:77:59:02:1a:ea:91:61:25:ff:09:ce:74:db:91:
c4:ba:49:8e:37:18:1d:93:52:bd:b1:c1:ee:bf:c1:47:43:8c:
d2:5f:6d:cd:77:fb:6c:d6:67:98:d6:c7:ec:5f:a2:3c:a9:26:
77:28:4b:91:b4:7a:5b:a0:39:39:96:83:ef:b5:6d:77:5c:6f:
4a:9a:fa:18:7b:dd:9f:da:c9:9d:2b:f5:f7:0a:97:60:89:16:
4e:5d:af:24:d7:53:22:c8:79:04:71:ee:a4:60:44:50:81:cf:
74:8e:22:d7:36:01:de:49:6e:14:ee:f7:21:79:b6:82:8f:49:
15:de:ca:fd:98:70:88:b6:46:47:cd:ca:77:64:0e:40:1a:53:
9f:44:9d:bf:9b:c5:b6:b2:4c:bd:28:a3:8d:e4:c7:e0:ce:95:
74:11:af:e8:b3:44:de:49:21:b0:15:e4:c1:50:d3:33:af:f3:
8d:4b:92:2e:ef:a8:1d:38:5f:87:39:07:0e:6b:a9:36:d8:90:
8a:33:51:4f:81:75:af:66:90:cf:8f:1a:72:2a:28:0f:93:cb:
6d:97:74:6f:55:90:79:af:9a:94:7a:ba:27:dc:4c:85:af:87:
dc:fe:c6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 14:46:53 2026 by rpki-client