Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/BiBb5pd42JGuxEA2_36VWez9To4.roa
File: BiBb5pd42JGuxEA2_36VWez9To4.roa (raw, json)
Hash identifier: ZmHy8hNEbi1UkgU4SvnNHfdKIst6HJZZ63T7U6bHPjU=
Subject key identifier: 06:20:5B:E6:97:78:D8:91:AE:C4:40:36:FF:7E:95:59:EC:FD:4E:8E
Certificate issuer: /CN=7f8ff3acfcaed203e96de91ab08c6efb64031a63
Certificate serial: 01A15E46D83725B8986C7036E543473232B6
Authority key identifier: 7F:8F:F3:AC:FC:AE:D2:03:E9:6D:E9:1A:B0:8C:6E:FB:64:03:1A:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/BiBb5pd42JGuxEA2_36VWez9To4.roa
Signing time: Wed 21 Oct 2026 11:44:23 +0000
ROA not before: Wed 21 Oct 2026 11:44:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218331
IP address blocks: 2a0a:87c0:fff5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:46:d8:37:25:b8:98:6c:70:36:e5:43:47:32:32:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f8ff3acfcaed203e96de91ab08c6efb64031a63
Validity
Not Before: Oct 21 11:44:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06205be69778d891aec44036ff7e9559ecfd4e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9f:3e:73:e7:8f:bf:f2:db:b6:11:91:3c:84:
7d:aa:49:55:42:7b:37:d9:d1:01:a6:18:c6:79:e5:
e1:c8:77:8a:d6:58:c0:bd:a8:08:df:35:44:d3:b6:
01:bf:ba:2b:f9:d4:1e:87:76:d0:63:ef:d6:fe:15:
d3:03:09:e3:85:2b:b4:6c:6f:1f:17:ca:f4:96:00:
ba:cd:01:7d:aa:55:63:2b:12:32:68:54:0f:ab:19:
40:62:d9:92:01:38:60:85:bd:55:72:1d:fc:3c:d6:
98:87:d7:db:60:ca:65:4a:13:db:b3:41:85:1d:02:
30:f1:29:fd:70:ee:4b:d6:d5:b6:08:39:96:af:a2:
b3:25:b6:4c:a2:df:7e:ca:09:5a:f6:20:18:88:da:
73:34:1f:7f:36:5e:ce:2a:c8:25:f0:9c:b0:61:73:
c2:46:91:04:e6:1a:5d:ec:64:b8:cd:ff:fe:e6:95:
a1:31:f1:81:47:85:a1:dd:fe:c7:44:8b:cf:fc:e9:
3c:14:5f:7e:8e:a2:d6:8b:de:49:b2:70:c6:0f:32:
31:16:b0:70:7f:a1:25:5a:26:32:5b:1b:04:cb:b4:
cb:19:03:96:85:5d:02:ab:85:98:f1:78:dc:16:4a:
b7:09:93:87:14:77:00:ec:95:37:0e:d5:be:59:69:
18:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:20:5B:E6:97:78:D8:91:AE:C4:40:36:FF:7E:95:59:EC:FD:4E:8E
X509v3 Authority Key Identifier:
keyid:7F:8F:F3:AC:FC:AE:D2:03:E9:6D:E9:1A:B0:8C:6E:FB:64:03:1A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/BiBb5pd42JGuxEA2_36VWez9To4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:87c0:fff5::/48
Signature Algorithm: sha256WithRSAEncryption
8c:07:67:fb:dd:47:51:5f:aa:77:4e:42:32:e4:85:0d:63:50:
41:53:74:1f:0e:b2:c4:a4:38:c3:c0:4d:1b:f0:68:dd:af:a3:
82:3d:f1:5f:0c:45:ca:04:06:e0:0e:f3:80:c5:09:5e:4a:4e:
dd:49:6a:82:98:3c:54:e9:53:0f:25:4d:53:65:eb:a5:0a:54:
47:9d:f2:fb:80:4f:ec:c7:54:35:26:e3:ee:2c:ff:4a:8d:9a:
3d:43:4e:71:ce:99:1f:c1:db:ed:d0:b5:d7:da:e4:df:1f:b1:
24:e1:2a:57:11:7b:88:65:73:49:a3:8f:01:4a:91:4f:a1:45:
51:4a:dc:a2:40:2d:11:2d:9c:c6:a7:89:2c:ad:8f:b1:ef:d5:
d0:07:6e:16:dc:9f:a8:c6:40:69:a4:bd:5f:47:09:ae:05:d7:
a7:3b:83:21:d9:21:39:c8:b2:f4:20:66:24:e2:20:f7:1f:67:
5d:bd:fb:68:5d:d7:b5:28:21:8a:cc:7e:bc:74:ac:a5:71:0f:
62:14:d8:cc:d7:76:4f:f7:8b:be:91:72:ff:6e:e8:80:b0:49:
9d:d1:b9:63:76:d7:a9:ce:68:ff:32:9d:15:86:55:50:ce:14:
58:7d:db:c9:a4:d7:a2:e3:ba:08:be:df:cd:84:ed:5a:63:26:
47:94:fd:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 18:51:54 2026 by rpki-client