Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/bEMAcYwqnC0XTzQ7GH9YHgR7lCQ.roa
File: bEMAcYwqnC0XTzQ7GH9YHgR7lCQ.roa (raw, json)
Hash identifier: HrGo2mOgpY3CRiRNodxntGU32CP3WCctQhW05rgCEfo=
Subject key identifier: 6C:43:00:71:8C:2A:9C:2D:17:4F:34:3B:18:7F:58:1E:04:7B:94:24
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 01A08A5A962E36A3D92BC29427A4A13EFA02
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/bEMAcYwqnC0XTzQ7GH9YHgR7lCQ.roa
Signing time: Thu 10 Sep 2026 08:06:27 +0000
ROA not before: Thu 10 Sep 2026 08:06:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42337
IP address blocks: 94.184.31.0/24 maxlen: 24
94.184.33.0/24 maxlen: 24
94.184.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:5a:96:2e:36:a3:d9:2b:c2:94:27:a4:a1:3e:fa:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Sep 10 08:06:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c4300718c2a9c2d174f343b187f581e047b9424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a5:8f:ea:50:86:be:24:90:fb:df:85:5a:c2:
16:d1:a7:e8:f1:c5:98:d1:b4:e9:b3:93:47:3f:81:
b4:a2:3c:e8:0c:ef:44:fe:15:25:68:9e:1d:3c:d8:
a4:c5:9e:85:e7:1b:c4:04:39:1c:3c:88:60:7a:ce:
c7:e4:c9:4a:af:59:94:9f:4d:c2:0f:0f:88:7b:19:
d8:7b:1a:9c:73:ca:d5:59:6f:7e:ab:4a:03:f9:e2:
b7:32:38:64:83:e7:2d:83:82:f1:83:3f:4a:1b:34:
a2:05:41:dc:84:d0:82:8f:42:72:86:cf:d9:b0:4f:
7c:f7:4a:5f:fc:53:76:90:ee:24:e3:6f:0a:d0:7d:
a9:0b:6e:10:80:b1:7f:c3:15:ca:de:f8:44:ff:6e:
35:7b:b5:3c:56:2f:44:da:3c:1e:86:48:e4:1b:a4:
84:57:8c:ac:b1:86:35:13:7c:1a:29:66:7d:5e:49:
e9:89:dd:8b:18:2c:42:d6:df:dd:26:c9:81:bf:d5:
d9:fe:c5:5a:7c:e7:fe:cc:e5:04:4e:31:fa:23:3e:
ec:54:19:9d:e2:2c:a7:5b:43:23:00:a7:c4:da:d1:
5e:f6:41:ac:8e:c8:bd:26:47:33:04:e2:a6:7a:0a:
36:7c:b0:c5:a1:76:ce:9d:ed:a5:dc:37:65:e7:42:
4a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:43:00:71:8C:2A:9C:2D:17:4F:34:3B:18:7F:58:1E:04:7B:94:24
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/bEMAcYwqnC0XTzQ7GH9YHgR7lCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.31.0/24
94.184.33.0/24
94.184.42.0/24
Signature Algorithm: sha256WithRSAEncryption
46:ca:bc:6e:75:a2:f6:1c:81:cd:72:9d:d3:df:af:73:f5:98:
b2:73:b5:1a:9f:32:d9:04:42:25:6a:e3:1b:4d:21:3c:df:23:
a4:6f:07:b3:05:2a:3e:51:49:cc:54:be:c7:fa:ed:0b:35:eb:
8a:86:3b:d6:46:66:00:86:5c:6b:c7:60:de:a2:14:66:69:33:
7d:f4:58:29:63:dd:5f:52:dc:08:e0:3a:87:99:9c:dd:51:90:
cc:74:0d:dc:28:9c:ae:b7:85:7a:7d:82:fe:54:2e:53:5f:d0:
2b:74:2b:b4:2b:84:8a:f2:5c:25:1b:0b:08:2b:08:8a:b7:88:
11:36:c9:77:ee:89:b4:3b:ba:12:7b:1b:0e:4f:39:c8:28:29:
da:17:bc:fe:96:9e:a3:d4:85:d8:92:c8:45:4a:1d:75:d4:3d:
ed:38:9d:dd:f0:71:37:14:45:52:c8:0b:5b:50:f3:a0:dc:b2:
e7:f0:c9:cb:d5:ca:f1:6d:7d:b3:8c:e1:8d:19:b9:59:71:81:
79:a6:4b:fb:8d:91:d4:c4:6f:10:53:07:f7:cd:36:73:ee:a0:
1a:06:3d:ba:f0:91:6b:b3:5a:81:90:34:6f:9f:9a:b7:4d:3c:
47:e5:0b:58:af:fb:18:60:36:30:b5:ba:e4:87:64:dc:d7:2e:
27:82:87:f4
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaCKWpYuNqPZK8KUJ6ShPvoCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4M2Q3NjA1MTAxN2QwYWZhOTE1ZmNmYjc5MGEwMGY0NjY3
YjBhODgwHhcNMjYwOTEwMDgwNjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzQzMDA3MThjMmE5YzJkMTc0ZjM0M2IxODdmNTgxZTA0N2I5NDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7qWP6lCGviSQ+9+FWsIW0afo8cWY
0bTps5NHP4G0ojzoDO9E/hUlaJ4dPNikxZ6F5xvEBDkcPIhges7H5MlKr1mUn03C
Dw+IexnYexqcc8rVWW9+q0oD+eK3Mjhkg+ctg4Lxgz9KGzSiBUHchNCCj0Jyhs/Z
sE9890pf/FN2kO4k428K0H2pC24QgLF/wxXK3vhE/241e7U8Vi9E2jwehkjkG6SE
V4yssYY1E3waKWZ9Xknpid2LGCxC1t/dJsmBv9XZ/sVafOf+zOUETjH6Iz7sVBmd
4iynW0MjAKfE2tFe9kGsjsi9JkczBOKmego2fLDFoXbOne2l3Ddl50JKSwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGxDAHGMKpwtF080Oxh/WB4Ee5QkMB8GA1UdIwQY
MBaAFFg9dgUQF9CvqRX8+3kKAPRmewqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGIt
ZGE2MTUzODg1ZjNiLzEvYkVNQWNZd3FuQzBYVHpRN0dIOVlIZ1I3bENRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGItZGE2MTUzODg1ZjNi
LzEvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXrgfAwQA
XrghAwQAXrgqMA0GCSqGSIb3DQEBCwUAA4IBAQBGyrxudaL2HIHNcp3T369z9Ziy
c7UanzLZBEIlauMbTSE83yOkbwezBSo+UUnMVL7H+u0LNeuKhjvWRmYAhlxrx2De
ohRmaTN99FgpY91fUtwI4DqHmZzdUZDMdA3cKJyut4V6fYL+VC5TX9ArdCu0K4SK
8lwlGwsIKwiKt4gRNsl37om0O7oSexsOTznIKCnaF7z+lp6j1IXYkshFSh111D3t
OJ3d8HE3FEVSyAtbUPOg3LLn8MnL1crxbX2zjOGNGblZcYF5pkv7jZHUxG8QUwf3
zTZz7qAaBj268JFrs1qBkDRvn5q3TTxH5QtYr/sYYDYwtbrkh2Tc1y4ngof0
-----END CERTIFICATE-----
Generated at Thu Sep 10 16:04:28 2026 by rpki-client