Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/bsEkMJNGP3K3g14wscFISA3njyM.roa
File: bsEkMJNGP3K3g14wscFISA3njyM.roa (raw, json)
Hash identifier: kRLKn73dkV+pdxVp9DgyjekS8WZqKB+bryeeaRAHsrA=
Subject key identifier: 6E:C1:24:30:93:46:3F:72:B7:83:5E:30:B1:C1:48:48:0D:E7:8F:23
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 019EB78A8F685A258261014D2C308AF92669
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/bsEkMJNGP3K3g14wscFISA3njyM.roa
Signing time: Thu 11 Jun 2026 16:36:11 +0000
ROA not before: Thu 11 Jun 2026 16:36:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209866
IP address blocks: 109.122.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:8a:8f:68:5a:25:82:61:01:4d:2c:30:8a:f9:26:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Jun 11 16:36:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ec1243093463f72b7835e30b1c148480de78f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:41:4a:fe:ba:d4:58:dc:a6:e4:77:18:ef:b0:
83:27:2e:02:fa:3d:ee:de:08:91:4a:a3:75:dd:ce:
cf:0d:be:07:9a:4f:dd:a9:27:fa:59:94:76:55:3e:
b3:47:8d:ea:02:09:68:05:40:78:17:4d:5c:7f:57:
e0:54:76:bb:63:64:e6:9d:0d:17:b7:0c:f4:e3:15:
8a:50:6c:a2:40:d7:d1:13:7b:32:87:a0:47:35:9d:
ce:d7:c5:56:0f:86:5d:f4:18:59:00:02:69:ed:3b:
f4:bf:e8:d3:66:69:99:ab:de:62:33:02:0b:77:5d:
e3:20:be:ff:bf:f7:a7:47:fd:cb:6f:ec:d2:90:c8:
fa:e5:e6:1c:d0:37:04:42:d9:57:2f:4c:07:7b:e4:
65:5e:07:c8:ed:4e:66:5d:a8:61:49:e7:27:c1:92:
98:77:f7:d7:b3:25:f4:c8:98:02:3a:ff:b2:3c:14:
8a:c8:89:ca:19:56:9b:98:69:fb:9e:69:1a:d2:6f:
6b:3b:5b:30:a2:2b:3e:b1:8b:fd:97:63:00:2a:a0:
61:01:a1:6d:1b:42:96:1a:3a:f0:d3:d4:8e:a6:33:
47:7a:5f:ce:1d:13:a4:f4:b6:1b:2f:61:82:c5:69:
58:1f:04:a4:fa:f0:8a:9b:0e:28:f7:67:5f:12:7c:
8c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C1:24:30:93:46:3F:72:B7:83:5E:30:B1:C1:48:48:0D:E7:8F:23
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/bsEkMJNGP3K3g14wscFISA3njyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.56.0/24
Signature Algorithm: sha256WithRSAEncryption
78:b1:51:80:b2:a6:d5:9f:01:2f:ad:97:b8:17:57:0e:5c:8b:
62:d5:3e:b3:0f:28:28:52:43:e7:47:41:81:a3:05:79:cc:e0:
1d:13:34:49:9f:4b:e7:fe:0b:ad:0a:88:16:42:4f:f4:71:7d:
04:b3:ec:dc:c2:36:48:36:b9:6e:35:cb:30:d2:2d:18:d2:d6:
1f:3b:20:c1:8d:85:cf:7f:b8:32:00:ce:e0:6e:dd:27:c1:c8:
52:da:c0:e0:16:2e:0c:74:0d:c8:be:bf:30:f2:47:5c:e4:53:
c3:4d:cc:65:57:a4:c1:9d:50:07:fe:31:79:6f:f9:93:8b:0a:
76:12:b9:6c:d9:58:ca:6d:9b:b0:0d:c1:0e:2f:22:f7:e6:c1:
62:2c:dd:d5:84:a0:f2:a6:90:62:ef:77:ba:96:0d:b8:e3:a1:
ce:8b:4a:a1:81:1c:7c:28:f2:cc:27:d4:ff:1a:9c:31:df:c0:
aa:53:47:79:99:51:89:72:46:7b:b9:f3:45:1d:d8:ae:a5:3f:
be:f5:65:b3:00:33:fb:11:08:86:63:0c:62:f4:e5:ba:ac:ca:
dd:2a:97:f9:9b:78:38:72:ed:d7:16:b2:bd:35:f4:d9:75:59:
02:51:3d:14:25:2a:09:d0:f3:c7:29:33:4d:78:15:49:33:97:
06:77:7f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:23:24 2026 by rpki-client