Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/bEcjbcp-y9JIahihmtoi9EK0TiQ.roa
File: bEcjbcp-y9JIahihmtoi9EK0TiQ.roa (raw, json)
Hash identifier: ASxCyz+NX/m3cMBGmbT/xXqWc8knXBuHgU1BoVV8rW4=
Subject key identifier: 6C:47:23:6D:CA:7E:CB:D2:48:6A:18:A1:9A:DA:22:F4:42:B4:4E:24
Certificate issuer: /CN=b79220a805e4378547e43bac731ce86fe01145c7
Certificate serial: 019D88E804AF2175AB9A2C66359EA512CA8C
Authority key identifier: B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/bEcjbcp-y9JIahihmtoi9EK0TiQ.roa
Signing time: Mon 13 Apr 2026 22:13:19 +0000
ROA not before: Mon 13 Apr 2026 22:13:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6707
IP address blocks: 185.92.213.0/24 maxlen: 24
185.92.214.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:88:e8:04:af:21:75:ab:9a:2c:66:35:9e:a5:12:ca:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b79220a805e4378547e43bac731ce86fe01145c7
Validity
Not Before: Apr 13 22:13:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c47236dca7ecbd2486a18a19ada22f442b44e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1c:db:4f:4f:41:c9:b8:0e:e6:97:da:b7:f5:
ca:1f:99:2a:83:3d:fd:22:1d:8e:9d:ec:af:59:69:
2a:e2:59:ce:2f:72:2e:19:63:7a:be:be:66:4d:0a:
04:7c:fe:14:2b:fe:4a:7a:ff:40:a5:e7:40:bc:f6:
a2:d9:c0:bb:f3:2b:55:ef:3c:6c:e6:36:08:53:ff:
bd:26:64:45:f5:1e:79:13:c4:ea:e3:28:e3:b7:a1:
9b:c0:f2:6b:e1:5a:c2:de:98:03:09:1a:05:66:80:
17:96:55:ac:b8:84:8d:2d:06:e8:b6:22:7d:bf:10:
bd:dc:3a:d0:bb:71:b7:44:6a:88:fd:f5:dd:6d:6d:
6e:cf:67:5b:7e:8f:63:22:9d:11:02:9b:32:4c:4c:
a2:eb:e4:ec:fb:26:dc:f3:8b:d5:46:70:8b:ae:84:
b3:e2:59:f4:d7:59:b3:f5:db:70:2c:ee:83:4a:98:
ea:d9:45:e1:19:6c:ba:4b:9b:27:08:11:06:eb:8e:
69:f7:1f:d4:86:31:c2:31:7f:ab:ad:f6:c0:31:32:
4d:b6:93:da:87:fd:be:a3:45:30:5d:de:b8:5d:91:
47:e4:7f:22:e6:55:0a:1e:b9:82:27:08:3f:6e:8c:
46:56:65:21:66:d7:bb:ac:a5:96:4e:f4:83:6b:ca:
28:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:47:23:6D:CA:7E:CB:D2:48:6A:18:A1:9A:DA:22:F4:42:B4:4E:24
X509v3 Authority Key Identifier:
keyid:B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/bEcjbcp-y9JIahihmtoi9EK0TiQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.213.0-185.92.215.255
Signature Algorithm: sha256WithRSAEncryption
66:99:42:34:f2:7b:f3:76:af:fc:00:6d:78:97:1b:d5:32:7f:
2d:96:ab:52:6a:17:9d:1c:70:07:e0:c2:03:0a:d9:e9:98:3d:
7b:50:f4:2a:1e:a7:48:ea:94:e4:40:5b:07:b0:58:99:a4:6b:
b8:02:d2:b7:f6:4e:ec:6a:5b:65:66:2d:15:ec:64:c7:9d:4e:
2c:ef:c5:f3:39:b2:88:e6:16:13:57:b2:c0:cf:f1:81:8f:d8:
5a:c6:c6:00:28:56:35:dc:a8:b5:6e:43:53:f5:c5:ad:d1:ee:
c3:ca:5f:e0:48:3f:9a:12:a0:c4:e3:34:80:ee:0d:49:23:c1:
74:b7:56:a9:25:18:a9:70:f9:ba:6a:75:cd:e7:e9:90:7d:5f:
6b:a4:1e:9e:70:48:36:e9:d1:a4:a0:d2:a2:dd:f3:05:df:b7:
cb:75:f3:66:29:53:11:ea:2c:58:07:d4:a6:2e:ce:d6:3d:85:
38:87:16:04:70:01:ea:dd:1d:76:85:d8:ae:51:1e:ee:32:b3:
3b:fe:08:12:56:75:82:9a:a8:d2:5d:4f:8d:67:70:fa:5e:3c:
eb:5f:e1:53:00:4a:d4:74:8d:92:e3:5d:25:e4:8d:cc:18:fb:
75:cb:51:bd:c3:b4:7d:c6:83:c3:09:9f:ea:69:d2:73:72:06:
41:ec:4d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:42:47 2026 by rpki-client