Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/BFP5XBPecJUh8XP5S_IplfcLmp8.roa
File: BFP5XBPecJUh8XP5S_IplfcLmp8.roa (raw, json)
Hash identifier: SFvdpihm8BbPzbixjKW/HjPpEboezWgtNUNv32Q2U6A=
Subject key identifier: 04:53:F9:5C:13:DE:70:95:21:F1:73:F9:4B:F2:29:95:F7:0B:9A:9F
Certificate issuer: /CN=e9e4dc968ed52935a04dee3b229c21ca9bfdbd7e
Certificate serial: 01A17CD999B49CC13ADD3203F2943FFD7C75
Authority key identifier: E9:E4:DC:96:8E:D5:29:35:A0:4D:EE:3B:22:9C:21:CA:9B:FD:BD:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6eTclo7VKTWgTe47Ipwhypv9vX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/BFP5XBPecJUh8XP5S_IplfcLmp8.roa
Signing time: Tue 27 Oct 2026 10:13:17 +0000
ROA not before: Tue 27 Oct 2026 10:13:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209153
IP address blocks: 93.183.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6eTclo7VKTWgTe47Ipwhypv9vX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:d9:99:b4:9c:c1:3a:dd:32:03:f2:94:3f:fd:7c:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9e4dc968ed52935a04dee3b229c21ca9bfdbd7e
Validity
Not Before: Oct 27 10:13:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0453f95c13de709521f173f94bf22995f70b9a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0a:2b:1e:88:11:b0:16:1d:94:dd:a7:04:5d:
9d:05:3d:31:c7:65:f2:71:60:67:aa:e2:0a:51:c7:
8f:50:2d:03:ee:be:21:53:97:76:c9:f3:f5:5a:ce:
eb:35:b4:cb:7f:61:c6:02:de:24:aa:92:1d:aa:62:
9d:88:a2:31:7e:b2:8f:4a:e0:fe:c8:53:0e:3b:7b:
6a:71:04:c2:d7:3d:e3:2a:2e:9f:9d:19:3a:ea:b0:
8c:e5:8e:5f:d5:6e:22:a7:4b:68:95:ce:7d:75:61:
bb:5b:2f:6d:c2:09:63:8f:58:b3:06:82:27:af:62:
9a:2f:ec:45:10:6a:48:66:15:28:dc:12:c4:33:7c:
eb:5e:69:f8:8f:fd:27:e9:35:ba:06:bd:67:ca:89:
4d:b7:31:84:e9:94:ba:bf:7a:45:b2:92:a3:42:30:
15:24:61:a1:c0:a8:08:f4:8c:ee:f6:6d:5a:97:20:
f6:b4:d7:83:97:db:9e:c7:8c:4f:b5:6e:c3:8d:46:
34:73:22:30:c9:0c:8b:3a:ca:1a:fd:43:ad:dd:44:
96:d7:48:45:07:a1:5e:ff:18:19:97:7d:6f:f5:8c:
db:ec:08:86:2e:ea:e1:9b:a4:6b:93:02:fc:46:4f:
1b:61:7e:0e:cc:c9:7a:d0:04:a8:a4:ec:9c:f4:01:
50:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:53:F9:5C:13:DE:70:95:21:F1:73:F9:4B:F2:29:95:F7:0B:9A:9F
X509v3 Authority Key Identifier:
keyid:E9:E4:DC:96:8E:D5:29:35:A0:4D:EE:3B:22:9C:21:CA:9B:FD:BD:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eTclo7VKTWgTe47Ipwhypv9vX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/BFP5XBPecJUh8XP5S_IplfcLmp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.183.100.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:70:12:f8:e3:94:9e:10:ca:bd:7b:8f:77:eb:9f:2c:c7:af:
4e:ed:02:e4:3b:15:1e:58:0c:c0:e2:8c:04:07:3e:26:b8:7d:
49:ef:75:8a:e2:f1:7e:e7:e3:db:ac:8b:47:c2:b1:96:18:35:
aa:bd:42:3b:e6:b0:a0:c2:f2:21:17:b8:05:da:9e:8e:c6:c2:
e4:99:c9:da:71:5b:f0:f2:0b:35:b1:9f:e3:30:09:00:41:eb:
f9:86:ec:5e:2a:1a:62:ce:9b:78:26:21:6c:2f:15:37:4f:5c:
9e:46:52:b7:11:a8:e5:d2:92:5a:48:6b:e4:bf:ad:a8:3f:97:
11:9d:c3:e4:f1:1d:af:e1:5f:1c:59:1b:f4:89:d6:a0:de:20:
ba:41:58:0b:4e:4e:ee:bb:ed:57:28:31:23:84:c2:9a:4a:be:
f8:38:c5:ab:aa:26:23:e5:ad:8f:b3:a4:84:45:08:f4:e1:aa:
07:13:7b:2e:fc:7a:fd:27:9c:95:05:bd:4f:f0:bd:f5:d5:92:
16:f7:eb:c0:55:3a:31:28:b3:cb:5d:bd:4b:07:2c:3e:4c:0f:
bf:84:7c:41:8b:e8:13:69:37:b8:ab:6e:22:13:73:f3:88:60:
86:d4:64:97:a5:da:d5:a3:dd:06:25:8d:5d:3e:4e:47:b9:e5:
6c:84:79:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:21:19 2026 by rpki-client