Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/bWV9-ipYt2jjrK-6pf1rHveJ6GA.roa
File: bWV9-ipYt2jjrK-6pf1rHveJ6GA.roa (raw, json)
Hash identifier: ddJ0XAD6t5QQElM8h1FtjnOAe1zaPavt5df6dzC3Pqs=
Subject key identifier: 6D:65:7D:FA:2A:58:B7:68:E3:AC:AF:BA:A5:FD:6B:1E:F7:89:E8:60
Certificate issuer: /CN=2a49e10e0e7094b45eba1c16f9637e1cec67bdc6
Certificate serial: 019F228C2EDB16AA303C59AC3C5EE59BC47C
Authority key identifier: 2A:49:E1:0E:0E:70:94:B4:5E:BA:1C:16:F9:63:7E:1C:EC:67:BD:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/bWV9-ipYt2jjrK-6pf1rHveJ6GA.roa
Signing time: Thu 02 Jul 2026 11:17:20 +0000
ROA not before: Thu 02 Jul 2026 11:17:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3214
IP address blocks: 2a02:f440::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:8c:2e:db:16:aa:30:3c:59:ac:3c:5e:e5:9b:c4:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a49e10e0e7094b45eba1c16f9637e1cec67bdc6
Validity
Not Before: Jul 2 11:17:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d657dfa2a58b768e3acafbaa5fd6b1ef789e860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:42:f2:14:d3:6d:a5:5c:ca:6a:90:6f:91:a4:
b3:b8:c2:0a:8c:46:2d:b5:4f:22:17:97:d4:ba:1c:
c4:2d:d1:23:3b:83:e1:f9:ae:9e:5f:f3:24:b8:4d:
c1:80:b6:0b:c9:9f:24:fc:fa:fd:16:49:8f:34:00:
22:9b:9b:aa:09:22:a5:13:ca:61:69:2b:ee:11:71:
e6:30:4f:7b:44:9f:99:ca:54:02:27:99:a2:24:28:
79:67:16:f1:22:9e:fd:98:d4:6a:bd:15:87:32:ee:
a4:0b:95:2c:d4:87:86:fb:7b:18:19:ae:2f:da:e2:
fd:fc:11:bc:34:f3:45:8c:15:eb:cb:ad:8f:fc:62:
ad:e8:72:57:ee:b3:97:e2:64:29:a9:7d:f0:02:6b:
cb:8b:67:93:60:bd:f3:5a:de:b8:fc:84:13:f2:7f:
31:65:af:bf:25:33:ef:50:e2:e4:a4:7f:1c:97:41:
a4:a2:41:df:be:6a:3d:35:81:74:e0:7d:ee:1a:87:
4f:f9:89:bc:68:8c:f1:03:a8:e4:aa:2b:29:02:68:
49:18:8e:97:ec:17:d1:6b:f6:18:df:24:68:eb:63:
53:d6:f3:4b:34:eb:8d:a1:e6:5d:e0:c8:8d:35:67:
4c:2b:35:52:c9:60:54:e0:9b:d3:16:99:3f:bf:3d:
9f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:65:7D:FA:2A:58:B7:68:E3:AC:AF:BA:A5:FD:6B:1E:F7:89:E8:60
X509v3 Authority Key Identifier:
keyid:2A:49:E1:0E:0E:70:94:B4:5E:BA:1C:16:F9:63:7E:1C:EC:67:BD:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KknhDg5wlLReuhwW-WN-HOxnvcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/bWV9-ipYt2jjrK-6pf1rHveJ6GA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c0be5f-f887-440d-b1ed-2d38b393b123/1/KknhDg5wlLReuhwW-WN-HOxnvcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:f440::/29
Signature Algorithm: sha256WithRSAEncryption
b6:80:a0:5f:8e:3f:08:39:61:66:ae:e8:dd:c2:9d:da:a0:48:
50:bb:1a:ce:6e:07:6f:dd:c7:27:5d:c3:5c:53:91:f1:df:ba:
fb:f5:16:e0:21:ca:95:2a:fc:d0:3e:3b:10:3e:fa:cd:61:d9:
f8:96:73:72:38:99:75:fe:db:9b:f6:52:38:69:2b:65:62:57:
44:6a:e0:26:63:2c:0d:03:86:01:03:8e:2d:6c:f7:82:ff:9d:
be:d2:97:d6:58:5a:f2:58:87:2d:b2:e3:9d:0c:8c:cf:f5:29:
5c:34:12:a8:69:6a:12:4b:cb:b7:75:e3:d3:f6:fa:1a:6d:49:
02:ef:5a:c9:cc:e8:7a:ce:a1:42:41:5a:c1:bf:18:0d:57:14:
1e:37:ac:58:60:ea:d9:a5:78:a9:d0:b4:72:9d:ac:cb:81:82:
eb:25:cf:44:44:b4:53:e2:62:cf:20:c5:af:69:c1:7f:be:36:
e0:f6:9e:ad:ab:79:89:80:4a:bd:94:13:5d:f2:e8:87:cc:54:
7b:52:41:88:d3:f9:31:53:39:45:d7:5f:91:da:b7:94:31:51:
68:fd:f9:f3:cd:a9:73:a8:0f:ef:34:47:fa:fb:0e:a7:ea:5e:
47:cf:fe:7c:83:f1:1a:9f:e6:3d:a1:e1:5d:f6:24:17:7c:70:
75:21:d5:9e
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZ8ijC7bFqowPFmsPF7lm8R8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhNDllMTBlMGU3MDk0YjQ1ZWJhMWMxNmY5NjM3ZTFjZWM2
N2JkYzYwHhcNMjYwNzAyMTExNzIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDY1N2RmYTJhNThiNzY4ZTNhY2FmYmFhNWZkNmIxZWY3ODllODYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoELyFNNtpVzKapBvkaSzuMIKjEYt
tU8iF5fUuhzELdEjO4Ph+a6eX/MkuE3BgLYLyZ8k/Pr9FkmPNAAim5uqCSKlE8ph
aSvuEXHmME97RJ+ZylQCJ5miJCh5ZxbxIp79mNRqvRWHMu6kC5Us1IeG+3sYGa4v
2uL9/BG8NPNFjBXry62P/GKt6HJX7rOX4mQpqX3wAmvLi2eTYL3zWt64/IQT8n8x
Za+/JTPvUOLkpH8cl0GkokHfvmo9NYF04H3uGodP+Ym8aIzxA6jkqispAmhJGI6X
7BfRa/YY3yRo62NT1vNLNOuNoeZd4MiNNWdMKzVSyWBU4JvTFpk/vz2fcQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFG1lffoqWLdo46yvuqX9ax73iehgMB8GA1UdIwQY
MBaAFCpJ4Q4OcJS0XrocFvljfhzsZ73GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2tuaERnNXdsTFJldWh3Vy1XTi1IT3hudmNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9jMGJlNWYtZjg4Ny00NDBkLWIxZWQt
MmQzOGIzOTNiMTIzLzEvYldWOS1pcFl0MmpqckstNnBmMXJIdmVKNkdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9jMGJlNWYtZjg4Ny00NDBkLWIxZWQtMmQzOGIzOTNiMTIz
LzEvS2tuaERnNXdsTFJldWh3Vy1XTi1IT3hudmNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgL0QDAN
BgkqhkiG9w0BAQsFAAOCAQEAtoCgX44/CDlhZq7o3cKd2qBIULsazm4Hb93HJ13D
XFOR8d+6+/UW4CHKlSr80D47ED76zWHZ+JZzcjiZdf7bm/ZSOGkrZWJXRGrgJmMs
DQOGAQOOLWz3gv+dvtKX1lha8liHLbLjnQyMz/UpXDQSqGlqEkvLt3Xj0/b6Gm1J
Au9ayczoes6hQkFawb8YDVcUHjesWGDq2aV4qdC0cp2sy4GC6yXPRES0U+JizyDF
r2nBf7424Paerat5iYBKvZQTXfLoh8xUe1JBiNP5MVM5Rddfkdq3lDFRaP35882p
c6gP7zRH+vsOp+peR8/+fIPxGp/mPaHhXfYkF3xwdSHVng==
-----END CERTIFICATE-----
Generated at Sun Jul 12 08:34:19 2026 by rpki-client