Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/BAPEwvLWrCymKkuORRd20zN2KRM.roa
File: BAPEwvLWrCymKkuORRd20zN2KRM.roa (raw, json)
Hash identifier: xYjjd2fD6IT/QFAlJG+FXNFTXBwK7Qx9jdl5Cyhg+KE=
Subject key identifier: 04:03:C4:C2:F2:D6:AC:2C:A6:2A:4B:8E:45:17:76:D3:33:76:29:13
Certificate issuer: /CN=78a038f4cc6c21b862bec7aa5c9317e1259d7dac
Certificate serial: 019F23692D3B66C8DF3865E8CFCFF05C7990
Authority key identifier: 78:A0:38:F4:CC:6C:21:B8:62:BE:C7:AA:5C:93:17:E1:25:9D:7D:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eKA49MxsIbhivseqXJMX4SWdfaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/BAPEwvLWrCymKkuORRd20zN2KRM.roa
Signing time: Thu 02 Jul 2026 15:18:43 +0000
ROA not before: Thu 02 Jul 2026 15:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208101
IP address blocks: 194.5.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/eKA49MxsIbhivseqXJMX4SWdfaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/eKA49MxsIbhivseqXJMX4SWdfaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eKA49MxsIbhivseqXJMX4SWdfaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 09:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:2d:3b:66:c8:df:38:65:e8:cf:cf:f0:5c:79:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78a038f4cc6c21b862bec7aa5c9317e1259d7dac
Validity
Not Before: Jul 2 15:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0403c4c2f2d6ac2ca62a4b8e451776d333762913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:94:ae:7c:23:d2:c4:64:ed:e8:23:9d:92:47:
9b:63:de:8a:6e:33:0a:c7:44:92:6c:9c:b8:0b:73:
c4:29:a2:9f:4e:9d:a7:c2:45:93:21:36:88:c6:51:
a7:8c:68:1f:b1:44:74:26:8e:36:e2:a0:9d:26:a6:
c6:99:4d:e6:71:89:a0:3d:40:58:47:c0:fc:35:04:
4f:7c:74:75:dc:44:10:7c:a7:2f:2a:c7:53:e1:57:
4c:cf:75:5e:67:df:82:03:74:de:8d:a7:4a:eb:57:
01:5d:6f:43:fa:16:e0:7e:d0:f3:ca:11:c9:4f:a3:
56:fe:dc:c1:b7:a6:47:5d:50:e7:d6:d5:67:4a:50:
18:c9:e9:30:cc:d5:5a:5e:98:9e:06:d0:1c:88:4c:
ad:00:ce:47:9c:3d:f4:15:31:fe:d0:08:60:4e:01:
4b:12:24:00:de:c1:c6:aa:45:fa:cc:17:4f:97:3d:
30:7b:fb:32:fd:1d:95:43:3a:83:11:89:c0:44:fe:
dc:2b:ce:46:01:25:5f:b3:bb:d7:65:0f:4b:85:a0:
27:63:24:5f:48:51:5d:e0:9b:0d:a5:a3:7d:12:b7:
7f:58:42:d4:59:70:a7:f2:9c:09:2e:1f:cb:29:de:
5a:5f:ba:7c:36:b4:35:a8:b6:61:d4:cb:dd:49:bd:
37:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:03:C4:C2:F2:D6:AC:2C:A6:2A:4B:8E:45:17:76:D3:33:76:29:13
X509v3 Authority Key Identifier:
keyid:78:A0:38:F4:CC:6C:21:B8:62:BE:C7:AA:5C:93:17:E1:25:9D:7D:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eKA49MxsIbhivseqXJMX4SWdfaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/BAPEwvLWrCymKkuORRd20zN2KRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/1f3c4d-59e4-4937-bc14-6c88bfa7b55c/1/eKA49MxsIbhivseqXJMX4SWdfaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.101.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:2b:56:2d:4a:13:c2:8d:1d:63:85:3d:6c:92:05:f5:5a:b6:
6b:e7:8b:87:38:f2:c1:0c:5b:b8:65:76:eb:0b:dc:72:e9:56:
c7:e7:5b:ea:1f:6f:71:20:38:b0:c5:fd:cc:7b:10:93:95:78:
32:37:57:ac:bd:90:c2:61:98:ce:21:4b:ed:d0:a3:53:07:19:
c7:86:ba:a8:3d:3d:ac:b9:d3:5d:69:c8:ab:b6:16:89:71:90:
8c:b7:23:42:e4:66:20:fb:62:cb:bd:2a:dc:60:6e:26:ce:67:
b7:b1:79:b3:28:db:7d:87:3b:fb:19:67:8b:08:f6:8e:b6:06:
3e:1b:0c:ca:da:81:8b:13:3d:32:81:bf:8b:ba:6c:5b:69:b1:
fd:a9:22:33:2a:0d:92:33:80:9b:1f:d1:24:6c:ce:73:a7:19:
67:bd:87:64:32:02:1e:11:a4:bb:91:df:4b:02:a1:5f:22:33:
71:2c:ae:e7:6e:53:af:94:1d:3f:6e:3e:a7:58:b4:5c:27:78:
fa:fd:46:c5:d9:27:fa:46:c8:3d:b7:1f:ae:67:98:7f:bb:b3:
45:c3:e6:d7:7f:9f:2d:15:3f:0b:5f:df:4b:b0:4c:98:be:8b:
c5:8e:13:ae:3d:97:50:00:95:b6:17:c0:9f:ef:49:58:b3:5f:
a0:a0:f5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:15:14 2026 by rpki-client