Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/493dae-94a4-41f9-8b48-39bf939dd6c1/1/V8848orWoNZ861bWFiiKE5uLR7A.roa
File: V8848orWoNZ861bWFiiKE5uLR7A.roa (raw, json)
Hash identifier: aNdgzSdWI8rxikXWOQLnhOQhv1LiTm79AXNaaikPcp8=
Subject key identifier: 57:CF:38:F2:8A:D6:A0:D6:7C:EB:56:D6:16:28:8A:13:9B:8B:47:B0
Certificate issuer: /CN=bdc0453cd3966264f5b3a2fc4e8d3174ac11dfd8
Certificate serial: 01A12E6D44F665791516FAE0761166672D0E
Authority key identifier: BD:C0:45:3C:D3:96:62:64:F5:B3:A2:FC:4E:8D:31:74:AC:11:DF:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vcBFPNOWYmT1s6L8To0xdKwR39g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/493dae-94a4-41f9-8b48-39bf939dd6c1/1/V8848orWoNZ861bWFiiKE5uLR7A.roa
Signing time: Mon 12 Oct 2026 04:44:35 +0000
ROA not before: Mon 12 Oct 2026 04:44:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50475
IP address blocks: 193.105.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/493dae-94a4-41f9-8b48-39bf939dd6c1/1/vcBFPNOWYmT1s6L8To0xdKwR39g.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/493dae-94a4-41f9-8b48-39bf939dd6c1/1/vcBFPNOWYmT1s6L8To0xdKwR39g.mft
rsync://rpki.ripe.net/repository/DEFAULT/vcBFPNOWYmT1s6L8To0xdKwR39g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2e:6d:44:f6:65:79:15:16:fa:e0:76:11:66:67:2d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdc0453cd3966264f5b3a2fc4e8d3174ac11dfd8
Validity
Not Before: Oct 12 04:44:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57cf38f28ad6a0d67ceb56d616288a139b8b47b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:39:38:77:dd:12:dc:ea:f8:20:ac:7d:86:34:
c4:48:94:87:5b:f6:66:e9:e6:b1:a7:c3:ea:19:11:
67:c8:0f:3d:a0:d4:82:2f:50:a9:6d:03:2c:b0:02:
20:ee:db:a9:f1:01:d6:e7:83:bc:a1:fb:e2:17:4b:
e3:d2:22:5d:16:55:dc:18:6d:86:57:4b:d4:d6:51:
1e:26:b3:17:56:6d:8c:9b:1e:45:85:dd:e8:bb:93:
88:fe:37:df:b2:43:6f:c0:62:a7:ac:88:08:63:cf:
df:13:e3:ae:37:4d:7e:31:30:fc:71:ca:72:3f:e1:
56:b3:d6:f2:4a:6b:be:f0:bc:14:10:b1:e7:19:e2:
7e:d8:0b:ed:76:a1:bb:b5:c6:3a:56:81:92:00:11:
60:ff:cb:ce:0c:0a:c1:e9:7e:b4:60:a5:9c:1e:7a:
44:7e:fb:24:c2:9a:fe:f6:73:44:ff:b1:e0:11:a6:
4a:04:af:65:be:a5:c1:11:30:1e:cb:86:d3:53:1a:
01:98:20:38:ad:9d:01:d1:42:39:f4:41:0d:05:f6:
fb:ed:34:b2:67:18:ab:6f:d7:3e:1b:c1:dd:cc:3f:
98:fe:e9:16:0a:cb:36:10:22:f8:95:a3:2e:d1:90:
4f:ee:43:ef:f9:c9:3a:9c:b4:a6:2b:53:81:0f:0a:
1d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:CF:38:F2:8A:D6:A0:D6:7C:EB:56:D6:16:28:8A:13:9B:8B:47:B0
X509v3 Authority Key Identifier:
keyid:BD:C0:45:3C:D3:96:62:64:F5:B3:A2:FC:4E:8D:31:74:AC:11:DF:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vcBFPNOWYmT1s6L8To0xdKwR39g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/493dae-94a4-41f9-8b48-39bf939dd6c1/1/V8848orWoNZ861bWFiiKE5uLR7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/493dae-94a4-41f9-8b48-39bf939dd6c1/1/vcBFPNOWYmT1s6L8To0xdKwR39g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.56.0/24
Signature Algorithm: sha256WithRSAEncryption
37:19:88:42:ae:86:01:fc:e3:cf:d3:6c:10:e5:f2:39:ad:6a:
8b:39:1f:f4:33:72:46:f2:6d:9d:bb:30:ba:28:14:b8:07:36:
c0:f7:e8:a3:fe:a8:20:d8:40:05:84:67:36:61:98:5a:66:a6:
35:ff:bd:1c:9f:98:43:02:2c:b3:99:f9:73:1a:02:d1:61:50:
63:ad:eb:b8:a8:63:f8:d0:b4:d1:9f:eb:2f:c2:d8:df:3b:f8:
e9:c8:21:e6:98:1a:81:68:da:1b:48:ae:67:9e:00:13:78:55:
99:ab:92:37:01:43:27:4a:44:27:ba:43:a9:f3:6e:c7:bb:b0:
80:d5:66:6e:a4:52:14:12:b0:13:d4:fd:73:8b:b7:20:0d:dd:
7a:ea:f4:21:4a:6b:99:8d:17:08:68:fa:40:34:91:30:8f:01:
a8:6b:fc:8d:24:ed:e0:34:de:28:5a:0c:7f:e2:c6:73:4b:70:
72:4d:1e:fe:a0:11:de:a3:6a:65:11:bd:86:6f:5d:9b:82:a8:
a5:01:4c:3f:30:d8:2b:b6:6c:63:e3:45:23:b6:66:0c:9c:f3:
f6:5b:cf:f5:45:5b:27:c2:4b:c7:24:ea:37:ab:6f:f8:a4:d6:
b5:45:f9:77:09:d5:88:ac:39:59:cc:55:95:00:10:6f:43:ed:
75:c8:3d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:18:24 2026 by rpki-client