Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/bce-O795qHTyloEGfxEEkU8gPDc.roa
File: bce-O795qHTyloEGfxEEkU8gPDc.roa (raw, json)
Hash identifier: +sfkb14ppgbuFrf8UgUHw8x126muuQvGNB4Zbfv1Xxs=
Subject key identifier: 6D:C7:BE:3B:BF:79:A8:74:F2:96:81:06:7F:11:04:91:4F:20:3C:37
Certificate issuer: /CN=0968dacb344b4d8df54aa378653f71b0bf20da5e
Certificate serial: 01A05CDEAD6AB1ECF6A6C2137DA3C3F363DA
Authority key identifier: 09:68:DA:CB:34:4B:4D:8D:F5:4A:A3:78:65:3F:71:B0:BF:20:DA:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWjayzRLTY31SqN4ZT9xsL8g2l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/bce-O795qHTyloEGfxEEkU8gPDc.roa
Signing time: Tue 01 Sep 2026 12:08:12 +0000
ROA not before: Tue 01 Sep 2026 12:08:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216054
IP address blocks: 45.144.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/CWjayzRLTY31SqN4ZT9xsL8g2l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/CWjayzRLTY31SqN4ZT9xsL8g2l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CWjayzRLTY31SqN4ZT9xsL8g2l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 06:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:de:ad:6a:b1:ec:f6:a6:c2:13:7d:a3:c3:f3:63:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0968dacb344b4d8df54aa378653f71b0bf20da5e
Validity
Not Before: Sep 1 12:08:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6dc7be3bbf79a874f29681067f1104914f203c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:95:ee:29:bc:63:7b:2c:b8:48:ee:4c:2c:a3:
8e:a6:47:84:e6:66:09:05:ab:3e:58:2f:e3:6c:e1:
c5:c6:05:e8:c2:ed:f5:86:a9:51:de:25:0e:f9:df:
fe:89:88:d4:53:9f:65:f0:bb:5e:bc:72:a0:30:4d:
ea:8a:be:76:f1:dc:22:a6:51:e2:ab:39:e2:93:a6:
d5:22:f1:7e:ca:9e:5f:73:22:62:9e:f9:c8:28:ca:
1f:91:05:bb:b4:05:a7:4b:5d:1b:61:0e:e3:05:d5:
ce:64:48:43:b9:e5:71:01:5c:52:0c:5f:7b:e8:2d:
f3:91:a6:7e:70:37:a4:fb:4e:e0:f0:37:09:5b:90:
4d:5a:84:dc:d1:e8:e1:af:f9:7a:71:f9:c8:90:b6:
9c:db:cc:5f:88:d6:6d:0f:11:04:13:61:44:84:d3:
a0:9f:c8:05:1f:74:44:c5:88:13:8d:22:f5:21:08:
49:29:db:f3:ea:65:32:e6:a7:f9:9d:cf:99:4a:c5:
d7:f3:f1:cd:6c:81:f6:ac:1c:9d:ba:e4:30:fe:82:
ea:68:fa:45:fe:c5:40:e5:6a:d4:73:1b:95:38:40:
3e:26:37:eb:9f:ca:a7:dc:35:4d:07:79:95:b3:16:
c2:05:b9:40:07:00:5f:b1:51:6f:21:fe:97:a5:02:
6a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C7:BE:3B:BF:79:A8:74:F2:96:81:06:7F:11:04:91:4F:20:3C:37
X509v3 Authority Key Identifier:
keyid:09:68:DA:CB:34:4B:4D:8D:F5:4A:A3:78:65:3F:71:B0:BF:20:DA:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWjayzRLTY31SqN4ZT9xsL8g2l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/bce-O795qHTyloEGfxEEkU8gPDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/CWjayzRLTY31SqN4ZT9xsL8g2l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.17.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:f0:3b:7b:6b:98:90:40:b8:e0:23:70:12:d8:eb:03:d2:26:
f7:a2:07:d7:5f:28:5f:a1:6f:9c:a2:e1:4c:51:4a:68:5e:24:
c1:28:e8:e7:fc:91:4e:c2:8c:8e:e3:b9:4b:51:08:8d:eb:02:
7e:69:36:e3:e0:b9:63:e2:f2:41:8c:da:95:79:3d:c1:f9:00:
47:06:f0:b4:a6:a6:9b:1a:2c:d0:e1:5f:ec:34:ef:72:56:07:
37:37:d5:2b:a9:4d:c8:a1:7b:31:68:e1:6b:3e:2a:0b:f4:47:
98:15:1e:87:bb:1d:e7:ff:77:b5:e2:3e:b0:0d:b7:f4:eb:45:
59:7a:60:54:83:22:17:db:28:0a:6a:c5:01:d2:a6:58:98:c4:
1a:1e:cd:ad:68:2e:38:40:f6:4e:12:da:f2:31:08:4f:8f:f9:
8f:47:65:36:c1:7b:bd:47:77:c2:4c:a6:71:1c:4b:8c:4c:bc:
97:75:36:c1:fb:fb:6d:2f:f8:8f:17:37:08:db:d5:fa:b0:78:
e7:60:8d:10:fc:00:6a:1d:1b:ab:78:af:61:9d:98:17:ab:a9:
de:0b:44:0a:9a:56:07:62:ae:85:43:c3:d4:66:8a:d3:7d:f8:
9c:97:e7:e0:96:44:fd:71:26:36:87:b4:96:58:d7:88:1a:b9:
8b:76:cd:80
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBc3q1qsez2psITfaPD82PaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NjhkYWNiMzQ0YjRkOGRmNTRhYTM3ODY1M2Y3MWIwYmYy
MGRhNWUwHhcNMjYwOTAxMTIwODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZGM3YmUzYmJmNzlhODc0ZjI5NjgxMDY3ZjExMDQ5MTRmMjAzYzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZXuKbxjeyy4SO5MLKOOpkeE5mYJ
Bas+WC/jbOHFxgXowu31hqlR3iUO+d/+iYjUU59l8LtevHKgME3qir528dwiplHi
qznik6bVIvF+yp5fcyJinvnIKMofkQW7tAWnS10bYQ7jBdXOZEhDueVxAVxSDF97
6C3zkaZ+cDek+07g8DcJW5BNWoTc0ejhr/l6cfnIkLac28xfiNZtDxEEE2FEhNOg
n8gFH3RExYgTjSL1IQhJKdvz6mUy5qf5nc+ZSsXX8/HNbIH2rByduuQw/oLqaPpF
/sVA5WrUcxuVOEA+Jjfrn8qn3DVNB3mVsxbCBblABwBfsVFvIf6XpQJqwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG3Hvju/eah08paBBn8RBJFPIDw3MB8GA1UdIwQY
MBaAFAlo2ss0S02N9UqjeGU/cbC/INpeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1dqYXl6UkxUWTMxU3FONFpUOXhzTDhnMmw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS85ZTQ3ZTktMzI4MS00ZDE3LWE2YmMt
ZTJhN2ZiODQ4MzE4LzEvYmNlLU83OTVxSFR5bG9FR2Z4RUVrVThnUERjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS85ZTQ3ZTktMzI4MS00ZDE3LWE2YmMtZTJhN2ZiODQ4MzE4
LzEvQ1dqYXl6UkxUWTMxU3FONFpUOXhzTDhnMmw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZARMA0G
CSqGSIb3DQEBCwUAA4IBAQCj8Dt7a5iQQLjgI3AS2OsD0ib3ogfXXyhfoW+couFM
UUpoXiTBKOjn/JFOwoyO47lLUQiN6wJ+aTbj4Llj4vJBjNqVeT3B+QBHBvC0pqab
GizQ4V/sNO9yVgc3N9UrqU3IoXsxaOFrPioL9EeYFR6Hux3n/3e14j6wDbf060VZ
emBUgyIX2ygKasUB0qZYmMQaHs2taC44QPZOEtryMQhPj/mPR2U2wXu9R3fCTKZx
HEuMTLyXdTbB+/ttL/iPFzcI29X6sHjnYI0Q/ABqHRureK9hnZgXq6neC0QKmlYH
Yq6FQ8PUZorTfficl+fglkT9cSY2h7SWWNeIGrmLds2A
-----END CERTIFICATE-----
Generated at Wed Sep 23 15:44:56 2026 by rpki-client