Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/bGG4QXxgUzwoqqwAgB5WAK-Uxto.roa
File: bGG4QXxgUzwoqqwAgB5WAK-Uxto.roa (raw, json)
Hash identifier: TEYIeaNaWOf9ouUEps9+2mmWqssPfLKwLjfKOLn+W1s=
Subject key identifier: 6C:61:B8:41:7C:60:53:3C:28:AA:AC:00:80:1E:56:00:AF:94:C6:DA
Certificate issuer: /CN=7af51229773af9157e317160f9dc800f381e0b2b
Certificate serial: 019F226C800AFBFDF46CAB44A9D7D8929204
Authority key identifier: 7A:F5:12:29:77:3A:F9:15:7E:31:71:60:F9:DC:80:0F:38:1E:0B:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/bGG4QXxgUzwoqqwAgB5WAK-Uxto.roa
Signing time: Thu 02 Jul 2026 10:42:43 +0000
ROA not before: Thu 02 Jul 2026 10:42:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 949
IP address blocks: 2a11::/32 maxlen: 48
2a11:3::/32 maxlen: 48
2a11:4::/30 maxlen: 48
2a11:8080::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.mft
rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:6c:80:0a:fb:fd:f4:6c:ab:44:a9:d7:d8:92:92:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af51229773af9157e317160f9dc800f381e0b2b
Validity
Not Before: Jul 2 10:42:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c61b8417c60533c28aaac00801e5600af94c6da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:85:0c:6d:2d:76:08:a6:6e:29:9e:27:f6:66:
3c:00:b5:2b:94:31:2d:58:df:12:62:7a:0c:9f:e8:
4c:b9:61:a4:fd:a8:74:22:0b:22:aa:d0:bc:f4:92:
83:89:34:ba:2e:9a:f1:1a:14:c0:4e:b4:bd:ca:65:
e6:17:ed:94:a8:64:ff:41:c1:09:ad:ea:41:e1:4f:
55:af:15:21:17:2c:37:66:38:b3:5b:1c:8c:86:2e:
e5:c0:3f:60:7e:6e:93:1a:67:88:07:28:ea:68:85:
b0:b2:54:14:32:97:e8:df:74:d6:0d:43:50:08:e8:
5b:a7:5a:eb:c4:16:08:53:13:8d:7d:6e:f9:06:ac:
ca:43:7d:55:b3:18:40:3e:b3:5f:52:77:a4:b6:99:
82:8c:a4:e9:e6:db:4c:26:3a:78:c1:f7:b5:4a:92:
e1:fe:1d:7b:ca:0f:77:b5:9c:c8:dd:dc:c9:8b:a3:
4a:15:e8:70:6b:54:99:17:bc:3f:38:e0:8d:a2:84:
6b:11:e1:8f:f4:af:80:00:ec:4c:d6:15:88:eb:eb:
79:b9:54:14:1d:12:e3:c6:7f:c1:2e:a1:76:28:d7:
f5:c8:9d:49:1a:f0:3a:82:02:76:8c:77:9c:91:cd:
c9:9c:1f:36:f1:31:a1:89:bd:06:fb:aa:b5:f9:a7:
f8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:61:B8:41:7C:60:53:3C:28:AA:AC:00:80:1E:56:00:AF:94:C6:DA
X509v3 Authority Key Identifier:
keyid:7A:F5:12:29:77:3A:F9:15:7E:31:71:60:F9:DC:80:0F:38:1E:0B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/bGG4QXxgUzwoqqwAgB5WAK-Uxto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11::/32
2a11:3::-2a11:7:ffff:ffff:ffff:ffff:ffff:ffff
2a11:8080::/29
Signature Algorithm: sha256WithRSAEncryption
17:9f:e1:09:97:3a:09:b4:ec:4b:05:ad:fe:73:4e:15:35:de:
43:db:86:78:7b:bc:6f:ca:52:7f:0b:e1:2f:cb:05:56:48:d1:
d7:7c:0a:a2:3a:f1:44:3a:df:fe:aa:c9:4c:8c:de:8b:dd:d8:
f4:1d:5e:5f:d3:2d:e7:9d:60:4d:28:cc:98:e5:b0:cf:fe:de:
28:9e:31:60:1f:0a:77:ac:15:37:3d:76:43:de:a4:6a:c0:80:
1d:9f:3c:fc:91:01:09:4f:9c:de:ca:99:05:2a:5b:1f:6c:e5:
0c:0e:6e:f6:4c:f8:9d:48:e3:9e:52:6b:be:af:a8:32:06:62:
ce:6a:f6:50:f9:c0:f5:6c:dc:e0:3e:fd:0f:16:fd:3b:03:02:
73:3b:48:59:eb:f6:f7:bc:ab:c7:2e:fb:19:ad:bb:25:ca:8f:
16:38:b0:1e:99:c4:87:43:3b:a7:d2:d8:cd:16:e0:88:20:f0:
b2:3d:4b:16:ec:a5:c0:79:ba:41:c0:fe:cc:dd:ad:82:4c:86:
56:ab:2c:56:36:57:e8:3d:63:7f:40:82:d8:6a:29:dd:2d:36:
7e:dd:cc:5b:23:f2:4e:e9:16:f9:96:1a:a1:6b:dc:68:ca:87:
44:90:84:af:e0:7e:10:da:cd:97:b3:d2:bf:b9:3f:87:b8:c2:
1a:b3:7e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 06:23:30 2026 by rpki-client