Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/b-3_s4OPm47G13nSnIa7XR69rcA.roa
File: b-3_s4OPm47G13nSnIa7XR69rcA.roa (raw, json)
Hash identifier: mFgZd4d8zued0wGbLsJXs0gSSRBKDoCC0snAs4/GtZw=
Subject key identifier: 6F:ED:FF:B3:83:8F:9B:8E:C6:D7:79:D2:9C:86:BB:5D:1E:BD:AD:C0
Certificate issuer: /CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Certificate serial: 01A11BAF767C189ACB321294B4ADEF5E2B74
Authority key identifier: BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/b-3_s4OPm47G13nSnIa7XR69rcA.roa
Signing time: Thu 08 Oct 2026 13:24:06 +0000
ROA not before: Thu 08 Oct 2026 13:24:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 193.31.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:af:76:7c:18:9a:cb:32:12:94:b4:ad:ef:5e:2b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Validity
Not Before: Oct 8 13:24:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6fedffb3838f9b8ec6d779d29c86bb5d1ebdadc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0c:ab:c1:43:2d:de:84:d8:af:cd:71:23:21:
3b:1a:93:1f:a8:58:6e:77:f4:29:c9:7b:c4:0f:7e:
b1:40:54:56:3c:cf:23:1b:a5:53:12:06:5b:40:5d:
f8:67:57:2c:5e:f9:f1:70:ec:c2:a8:97:a6:66:58:
6a:9b:44:8d:4d:0f:13:01:c0:d6:54:bd:37:37:9f:
d1:19:52:8b:bf:3c:4e:c4:28:5a:c6:11:dc:e2:64:
fb:58:1f:e9:52:70:58:65:68:f6:2d:c0:bd:f5:88:
68:1a:84:29:49:9d:e9:a0:57:ae:71:a1:ad:24:ec:
91:63:5b:fa:87:48:77:d4:02:72:b3:13:d6:36:b4:
9b:c5:45:9f:24:6b:25:cf:31:4e:74:d1:98:d2:4f:
86:58:6b:96:48:2d:0e:0b:ac:d3:5f:5d:e0:a8:0e:
95:1d:45:2e:f3:5c:ce:6f:ce:53:f7:73:01:70:0a:
0b:8f:22:9d:41:1c:28:33:b6:67:ee:c7:b5:10:09:
5c:b8:76:e7:95:8d:5b:dd:17:32:ba:fb:2d:e0:65:
f0:f9:04:90:04:2f:6a:9a:e9:20:17:7e:08:0e:8f:
84:44:d3:c0:e9:db:50:88:33:17:d1:c0:5b:e7:cc:
42:f9:3f:86:f5:4e:a8:8f:42:44:8b:d5:50:10:ae:
1a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:ED:FF:B3:83:8F:9B:8E:C6:D7:79:D2:9C:86:BB:5D:1E:BD:AD:C0
X509v3 Authority Key Identifier:
keyid:BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/b-3_s4OPm47G13nSnIa7XR69rcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.60.0/24
Signature Algorithm: sha256WithRSAEncryption
81:cc:12:aa:dd:88:7a:d3:c9:d4:67:4e:4b:a5:f6:8c:63:2e:
c3:68:de:4c:1c:8f:e5:25:50:3a:fe:cd:42:60:ac:ba:94:35:
aa:d8:b3:59:15:e4:59:60:3a:0c:1b:db:a2:45:49:a3:da:e2:
7b:95:5a:10:e1:84:07:06:56:21:7f:67:5f:b0:57:62:b8:e2:
b8:79:7d:dd:c7:48:a1:36:8f:7b:ff:76:7d:0b:10:21:be:1f:
41:08:9d:07:b0:9d:6d:3e:bb:21:ea:1a:28:b5:38:bc:7c:5f:
ed:1b:8e:0c:ba:78:0f:cc:4c:29:06:d7:d4:f5:7d:99:42:e5:
c9:04:ce:fc:5e:0f:50:d3:45:27:80:6f:5e:2d:93:33:02:50:
f8:d5:4a:d3:9c:5f:3b:6a:41:3d:d5:cc:64:5c:c2:77:90:57:
f3:f1:e7:3f:bd:c5:95:b4:cd:8d:a8:f7:b7:b0:b8:29:3b:33:
f6:cd:92:09:b2:2a:7e:24:04:24:09:50:26:cf:81:bd:01:1c:
9a:16:c5:33:d9:5e:14:8a:6c:31:f4:0d:88:62:65:be:81:ee:
21:77:37:0c:00:04:3b:fe:c8:b6:40:59:17:0f:fa:cb:07:de:
48:f4:e9:b5:f9:66:a8:97:80:ce:d9:be:48:29:b6:4a:a8:43:
4a:3a:f5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 13:28:47 2026 by rpki-client