Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/3FBEFEqEqo7XqltpFpjhgA8OE_k.roa
File: 3FBEFEqEqo7XqltpFpjhgA8OE_k.roa (raw, json)
Hash identifier: 1nG36TGEU/Urugxm1nklCNm1OTEf4MhmiXkaTVHHccI=
Subject key identifier: DC:50:44:14:4A:84:AA:8E:D7:AA:5B:69:16:98:E1:80:0F:0E:13:F9
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 019CAAF855C81A2C954B1F868E253906DD5C
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/3FBEFEqEqo7XqltpFpjhgA8OE_k.roa
Signing time: Sun 01 Mar 2026 19:55:27 +0000
ROA not before: Sun 01 Mar 2026 19:55:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 53755
IP address blocks: 45.93.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:16:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:f8:55:c8:1a:2c:95:4b:1f:86:8e:25:39:06:dd:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Mar 1 19:55:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc5044144a84aa8ed7aa5b691698e1800f0e13f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:43:1d:23:70:0d:e6:42:07:df:a1:d6:88:99:
4b:c0:77:39:85:4e:16:6e:ca:ff:e1:a0:27:3c:c6:
a6:07:7b:24:af:c1:95:f1:fd:c6:17:ce:a6:28:47:
de:93:87:f0:9a:cf:19:2e:22:c9:77:0f:48:96:e3:
98:ad:77:b6:ae:b8:38:c9:6e:37:df:53:06:d5:68:
c1:9d:27:18:f0:9a:de:02:76:77:d9:ad:1d:fc:11:
45:17:f1:fd:23:3d:70:62:a1:b5:99:bf:a0:6a:d3:
a4:7c:cb:ae:25:9b:d8:a5:43:96:08:3f:77:90:50:
18:24:ec:d7:3a:53:20:e9:ed:34:03:8d:cb:31:9b:
4a:3d:26:f6:e0:05:ad:58:62:0b:43:17:48:7c:96:
f1:a5:e2:c9:70:da:f4:b4:1f:93:76:19:09:67:2c:
f9:e8:54:6c:f1:1b:3d:3c:9c:c8:e9:6e:39:b7:a3:
e5:1e:11:ac:34:d2:de:9b:68:7c:12:7a:30:40:5a:
30:ab:15:45:f3:7c:2c:86:d2:7a:7b:88:6d:9d:cf:
92:ad:83:1d:66:b4:06:9a:ea:33:b0:f2:8c:27:04:
5c:cf:2c:59:23:3b:0f:6a:d3:c8:83:16:a8:1c:0f:
b5:df:b3:92:21:4f:b8:06:84:08:68:d5:11:8c:b3:
20:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:50:44:14:4A:84:AA:8E:D7:AA:5B:69:16:98:E1:80:0F:0E:13:F9
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/3FBEFEqEqo7XqltpFpjhgA8OE_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.83.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:f5:58:a2:25:0d:f4:e9:b9:ce:7d:90:da:19:a4:19:69:76:
1d:51:47:40:c1:c2:80:fe:16:d9:e9:68:76:b7:6d:75:d7:53:
12:e8:2c:f5:85:15:dd:b2:e2:bf:84:f5:54:f2:da:6f:79:eb:
20:86:9e:ae:af:70:d2:fb:9d:b9:98:8e:0d:84:31:98:97:2d:
d8:d1:ec:fb:e7:69:c1:08:ba:20:8c:e6:72:73:68:a7:02:68:
00:40:26:00:2a:c3:ab:dc:63:6d:06:55:97:f7:1d:5d:65:43:
a5:4c:86:e6:b6:db:d6:17:01:2d:cd:cc:e1:c8:34:26:9b:78:
a7:8f:73:68:ad:0f:05:7e:ad:65:0f:ee:1e:f7:8a:8f:c9:e0:
3f:c9:7e:28:0a:ba:77:2d:a5:bc:8e:d6:85:35:b9:3f:0e:f9:
74:c2:82:2c:d5:3f:fd:2c:21:82:0c:f6:ca:2d:3d:16:c0:88:
a8:a0:7a:b6:15:fe:85:dd:11:5a:e0:40:37:a7:4c:e9:f2:38:
f0:7c:3f:84:bb:e4:59:15:7f:09:c4:e0:5f:4e:19:22:54:3e:
e8:b2:95:43:c5:b4:63:d3:65:bd:05:f1:9b:f9:34:4f:09:b3:
bf:fa:30:f2:c7:f1:58:e5:83:73:e0:40:5a:03:51:29:74:10:
3e:66:5e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:35:06 2026 by rpki-client