Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/beGISfiSRraD0gs6t9XqAEHEZPg.roa
File: beGISfiSRraD0gs6t9XqAEHEZPg.roa (raw, json)
Hash identifier: ZM6DRKkZP4dd6QW50goh7HKB6UOlU8VpZ55FAAGh5Pg=
Subject key identifier: 6D:E1:88:49:F8:92:46:B6:83:D2:0B:3A:B7:D5:EA:00:41:C4:64:F8
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 019E9314BDF86A1D095330B8E38C97EFFE20
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/beGISfiSRraD0gs6t9XqAEHEZPg.roa
Signing time: Thu 04 Jun 2026 14:41:10 +0000
ROA not before: Thu 04 Jun 2026 14:41:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213999
IP address blocks: 103.82.102.0/24 maxlen: 24
194.31.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:93:14:bd:f8:6a:1d:09:53:30:b8:e3:8c:97:ef:fe:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Jun 4 14:41:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6de18849f89246b683d20b3ab7d5ea0041c464f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:01:89:41:8e:7d:ab:74:df:76:c4:d0:15:74:
e3:0e:64:22:02:9e:41:3a:df:c5:df:f5:77:4d:29:
08:6d:18:bc:25:04:fa:67:de:c8:f0:8f:a5:0d:6d:
02:96:f3:0d:bb:b3:c5:be:1a:78:3e:2d:c6:a1:42:
ea:6d:df:8b:f7:28:cd:27:fc:c1:c7:09:2d:7f:34:
97:1e:4d:9f:79:f1:a1:30:76:1f:08:52:5d:47:88:
fe:89:9e:25:d5:8e:37:d3:ee:e3:98:28:91:64:85:
54:fb:78:e5:31:1b:a3:b0:9f:44:1e:da:3c:ca:57:
74:02:e3:06:25:23:9f:ff:68:ad:24:d6:00:48:54:
c5:e6:03:6d:24:ee:93:b8:9a:90:f6:ea:a2:0a:30:
97:5f:04:bc:70:a1:87:11:03:1e:7a:e5:de:b8:5d:
ec:41:be:0c:08:73:7b:e4:54:36:28:a5:43:c7:50:
3c:8c:53:8e:97:44:02:5b:6f:d8:41:92:4d:98:81:
29:3c:b6:64:24:1b:b7:fa:2c:bd:82:61:06:12:0f:
b9:1b:14:37:78:e6:98:77:ab:84:34:37:68:a7:b9:
dd:a8:89:60:56:88:ab:43:2a:09:72:51:4c:b2:c4:
38:ba:41:7f:04:39:7d:8f:65:07:db:ab:19:f1:f3:
21:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E1:88:49:F8:92:46:B6:83:D2:0B:3A:B7:D5:EA:00:41:C4:64:F8
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/beGISfiSRraD0gs6t9XqAEHEZPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.82.102.0/24
194.31.73.0/24
Signature Algorithm: sha256WithRSAEncryption
23:94:53:75:b1:0f:48:47:60:e7:5f:a8:fb:b1:30:cf:09:e2:
c5:e0:7a:9c:4d:91:d2:be:69:ae:a0:39:ec:ea:b8:16:fe:2a:
98:4d:d1:07:57:01:31:ee:7e:27:99:82:20:0c:e2:09:e2:ad:
3c:15:5e:6f:0f:1c:2f:0b:76:9d:fb:3f:4a:21:b0:8b:e3:2f:
82:6b:a9:2b:4a:a1:62:25:a7:72:1f:53:33:7f:cc:ce:3a:65:
b7:f0:38:ac:2b:f0:fb:ee:ec:dd:bd:d8:22:81:8e:bd:61:82:
2d:89:e5:54:64:08:00:49:10:cd:e1:de:f4:fb:a4:b3:2f:44:
6e:1b:df:60:26:14:37:70:24:e7:94:6d:fd:22:3d:6c:67:96:
97:2d:fa:a5:1a:71:b9:e5:11:c6:0c:7e:b0:7b:21:9b:4d:79:
7e:cc:27:2f:76:8e:dc:48:ba:f3:dc:d1:b9:fb:79:28:e9:62:
49:9b:b7:ae:0c:69:d0:e8:bf:31:8d:d3:6a:9b:99:e5:56:66:
b2:01:30:42:59:ff:2b:b9:70:8f:eb:55:56:59:d1:59:57:e5:
9b:d3:05:dd:0e:31:38:b3:46:08:b6:23:bc:78:20:3f:a3:55:
10:01:89:0e:df:68:85:6c:c5:2d:cd:14:29:71:f9:95:5b:f9:
0c:25:36:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:21:32 2026 by rpki-client