Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/bkbetdS8S-j3tP4wUr1qTgybbWU.roa
File: bkbetdS8S-j3tP4wUr1qTgybbWU.roa (raw, json)
Hash identifier: Oq2Kf7OZI0bbyyfOu9XDW+vxC4txNMjTca4uRZlKC+I=
Subject key identifier: 6E:46:DE:B5:D4:BC:4B:E8:F7:B4:FE:30:52:BD:6A:4E:0C:9B:6D:65
Certificate issuer: /CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Certificate serial: 019E305C020DD5384923E3C77768C65F3F89
Authority key identifier: 18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/bkbetdS8S-j3tP4wUr1qTgybbWU.roa
Signing time: Sat 16 May 2026 10:36:36 +0000
ROA not before: Sat 16 May 2026 10:36:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209811
IP address blocks: 95.215.200.0/23 maxlen: 23
95.215.202.0/23 maxlen: 23
185.208.8.0/24 maxlen: 24
194.31.160.0/23 maxlen: 23
2a09:1680::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:5c:02:0d:d5:38:49:23:e3:c7:77:68:c6:5f:3f:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Validity
Not Before: May 16 10:36:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e46deb5d4bc4be8f7b4fe3052bd6a4e0c9b6d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b2:a0:be:6b:7d:75:f6:05:de:6e:56:9d:47:
33:3f:d4:72:2d:cd:4b:cf:dc:cf:01:fc:ff:a7:77:
21:95:52:d0:22:43:7e:46:9d:21:c8:c1:ba:5b:1b:
f8:59:be:68:7f:11:25:84:15:f6:69:36:f9:4e:b3:
57:9b:22:58:c0:60:9e:88:4a:08:35:37:2b:eb:9a:
89:47:80:d8:18:86:84:80:e6:d9:1f:a1:8a:37:2d:
bb:ee:7f:fd:2e:49:02:2b:e1:3a:2e:be:e4:05:a8:
da:93:f1:c1:d3:18:a7:c0:48:b0:63:00:d7:91:77:
15:e5:81:bf:a0:ca:4d:7e:cc:fd:89:8b:d2:a1:83:
6c:1f:73:a6:a1:d3:2f:ef:e3:ee:19:03:05:12:93:
16:ff:b0:a5:51:1c:ae:af:13:21:94:b7:ce:a8:39:
15:b9:98:12:c2:46:cd:22:11:8f:fc:db:d4:0b:76:
c1:9e:26:3d:79:a4:cc:a9:d5:8c:60:24:78:a0:77:
1c:09:09:17:89:14:ac:ec:01:33:18:f0:11:85:1b:
5e:9c:db:8e:fb:15:90:35:bd:d1:2d:c2:67:3a:c4:
e6:6b:f2:39:1f:05:c7:e9:08:71:ea:ad:74:87:87:
7f:15:ac:9e:75:b2:31:b5:91:b9:3a:d3:7a:81:a7:
93:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:46:DE:B5:D4:BC:4B:E8:F7:B4:FE:30:52:BD:6A:4E:0C:9B:6D:65
X509v3 Authority Key Identifier:
keyid:18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/bkbetdS8S-j3tP4wUr1qTgybbWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.200.0/22
185.208.8.0/24
194.31.160.0/23
IPv6:
2a09:1680::/48
Signature Algorithm: sha256WithRSAEncryption
64:b6:b1:e5:a1:21:32:10:46:3e:f2:65:d0:ec:98:c3:be:57:
1a:06:e3:c2:96:d6:47:a8:8a:18:5d:bd:db:0d:74:af:71:3a:
10:d0:1f:3b:28:e9:6e:ce:c3:df:9d:1a:af:9e:ec:01:c1:c1:
af:16:61:1a:63:3c:10:04:50:7b:16:5b:8c:09:88:74:bb:ca:
a6:fd:93:57:05:a0:95:91:ed:36:a8:e2:88:ac:6e:f1:09:d2:
d6:2c:db:bf:a7:62:e4:d2:a1:84:18:09:96:33:c2:87:bd:71:
4b:bb:93:fb:f8:31:13:1f:17:fb:9e:f5:62:22:17:8a:7e:7c:
b9:bc:65:4f:64:d2:3b:ba:54:96:9d:60:c4:b3:e6:8f:30:82:
4c:f7:85:7c:9a:8d:0f:86:48:3f:1f:79:02:41:ab:af:e1:f3:
99:b8:fa:56:71:40:79:6d:db:f8:9f:53:36:58:18:7c:af:37:
d2:c3:5e:30:67:fb:69:58:35:d0:e5:17:db:1b:d5:31:6e:ad:
2e:e2:40:9f:4f:3f:25:91:7c:05:ed:be:2a:3f:95:38:62:78:
2c:5d:b4:0d:7d:93:1f:bc:af:14:bf:ed:66:bc:e6:86:dc:e0:
ab:05:f3:1a:66:ca:71:97:f1:4a:c2:9d:f5:53:e3:04:87:01:
f8:ed:b7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 06:15:36 2026 by rpki-client