Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/BasflCNpBX3VXEAkTrugGlltypA.roa
File: BasflCNpBX3VXEAkTrugGlltypA.roa (raw, json)
Hash identifier: d1hsSeTLNGOFjmMRZqW1MfPJF1PXXOMU77O58FJ9nLE=
Subject key identifier: 05:AB:1F:94:23:69:05:7D:D5:5C:40:24:4E:BB:A0:1A:59:6D:CA:90
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019CBA993039FBB06D8813745A6B87E5D0E7
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/BasflCNpBX3VXEAkTrugGlltypA.roa
Signing time: Wed 04 Mar 2026 20:45:27 +0000
ROA not before: Wed 04 Mar 2026 20:45:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31898
IP address blocks: 2a0c:9a40:8711::/48 maxlen: 48
2a0c:9a40:8920::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Mar 2026 17:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ba:99:30:39:fb:b0:6d:88:13:74:5a:6b:87:e5:d0:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Mar 4 20:45:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05ab1f942369057dd55c40244ebba01a596dca90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1a:39:3c:dc:20:e4:7a:53:db:71:66:49:8a:
93:32:bd:8a:be:d5:ff:81:ed:c8:cb:a6:d3:98:0d:
25:5c:ce:72:ec:1b:fa:6a:d6:f3:e4:7f:88:d8:99:
ab:12:1b:12:70:7a:95:91:ad:2f:10:b4:1a:65:c1:
89:17:97:6a:0f:ed:b6:4b:19:5e:fb:ce:d9:d2:ce:
d1:ff:94:04:e3:f0:2e:2e:11:dd:63:33:eb:a6:18:
ab:88:17:b9:1a:ca:6d:be:64:e6:2b:c9:84:7f:05:
0a:38:e9:52:17:08:d6:2e:a7:f9:44:dc:86:8c:f9:
a0:02:d5:5b:9f:2c:0c:14:a7:7d:47:8d:64:a4:c3:
60:90:2d:5a:69:3b:1b:d4:4c:27:f0:62:67:0f:42:
39:b5:68:a7:af:b6:40:24:f9:b0:7c:5e:c1:25:50:
b6:74:66:4a:db:90:b8:6f:2e:d8:97:99:ec:dd:92:
5b:b5:d7:25:60:15:45:53:e6:5c:11:57:73:2c:fc:
b2:0c:8e:3b:7c:d7:6d:1a:84:95:63:62:e3:cb:e0:
28:39:6e:f9:30:6b:e7:76:86:91:90:02:39:ca:f9:
f0:aa:ad:36:a6:34:8c:ad:79:49:54:5f:f0:d9:e9:
c4:f5:84:86:26:16:e4:c4:2c:77:3a:2a:cf:4a:c3:
03:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AB:1F:94:23:69:05:7D:D5:5C:40:24:4E:BB:A0:1A:59:6D:CA:90
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/BasflCNpBX3VXEAkTrugGlltypA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8711::/48
2a0c:9a40:8920::/48
Signature Algorithm: sha256WithRSAEncryption
7d:f1:c0:8c:1f:13:da:83:5a:03:9a:c5:88:3f:bd:24:ad:65:
61:16:ba:02:b4:38:72:96:f7:ec:da:65:5f:01:3a:1f:87:f1:
82:cd:4c:2f:10:2a:6e:c1:b4:8d:9d:db:19:f2:31:59:79:ea:
10:58:df:b0:9e:dd:37:16:ef:09:08:ff:19:ec:6d:1f:c0:06:
9d:38:18:a9:77:ad:64:0b:0c:a1:52:c1:74:53:e4:83:a0:56:
8a:5c:6f:b2:7d:a9:e2:6f:6b:d3:43:08:5b:50:e9:99:c3:26:
15:72:1a:26:c5:fc:33:32:3d:51:b3:7b:96:8b:2c:30:ed:5f:
9f:97:ff:1c:08:04:ce:6a:8d:09:09:d5:ff:6b:b5:c5:aa:2e:
80:13:06:52:bd:17:ec:e5:35:5e:ba:43:bf:06:66:4e:d8:fd:
24:9d:20:24:a8:5c:65:76:35:bd:28:d0:5b:36:17:64:35:1e:
9e:9d:ab:27:49:b3:38:50:4d:9a:e2:20:85:57:66:14:83:b3:
c7:08:e6:e8:b9:a4:7b:54:0a:b5:bb:23:bd:a9:aa:f2:87:84:
80:76:6a:4b:39:62:12:2e:9d:46:00:12:be:fc:3d:54:73:37:
b1:39:15:0e:74:19:b1:c1:38:01:61:a9:a9:56:12:64:d6:8a:
40:7a:b5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 23:11:21 2026 by rpki-client