Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/b5grD-xCJDSKOW9CSWODd-k89RQ.roa
File: b5grD-xCJDSKOW9CSWODd-k89RQ.roa (raw, json)
Hash identifier: EhofY8TX1DPwCk1oZ2F7+8G4D26Ym8dqZlRjKckREmE=
Subject key identifier: 6F:98:2B:0F:EC:42:24:34:8A:39:6F:42:49:63:83:77:E9:3C:F5:14
Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Certificate serial: 019E89929B947F441380B8FB9787AEA90027
Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/b5grD-xCJDSKOW9CSWODd-k89RQ.roa
Signing time: Tue 02 Jun 2026 18:22:27 +0000
ROA not before: Tue 02 Jun 2026 18:22:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60262
IP address blocks: 2a12:da80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:89:92:9b:94:7f:44:13:80:b8:fb:97:87:ae:a9:00:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51
Validity
Not Before: Jun 2 18:22:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f982b0fec4224348a396f4249638377e93cf514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a6:0b:b7:1e:96:a9:34:94:90:f3:fe:fa:48:
1d:af:7a:5e:61:18:23:91:ea:3a:ed:b7:a6:91:c6:
37:9e:4e:62:8e:35:0d:e7:b9:14:33:38:8c:17:15:
25:1d:9c:c6:e5:66:b8:79:2c:ef:c1:44:e0:63:ca:
90:ea:f7:f9:33:b9:f4:a2:2a:c4:df:cf:d2:db:e7:
1a:7a:0a:ce:28:d5:4b:60:26:d9:d9:39:7d:35:41:
af:e6:09:46:3b:d8:21:df:bc:67:2a:de:ea:55:f8:
fb:36:55:e3:f2:35:6e:2e:90:3c:9c:0a:06:68:b4:
e8:eb:2f:9e:1a:74:36:8b:dd:4a:5f:bc:2b:e6:87:
8d:31:52:e4:5f:93:0f:7f:2c:70:8a:f8:8b:e1:39:
bb:48:48:ef:ef:45:f0:e0:fe:d1:58:99:b0:b0:30:
53:0e:a8:ae:cb:2d:2f:80:7b:5a:33:9b:58:42:34:
70:a3:95:6a:f6:0b:fb:d4:b5:b8:25:a3:80:5f:ca:
bf:a3:30:12:a1:f0:be:f3:40:15:ed:31:16:c1:8f:
ca:7b:53:65:87:c0:b8:d4:de:3b:8b:25:25:f1:7b:
08:50:35:10:05:04:db:33:68:01:e8:54:7a:b8:4c:
38:6c:97:ef:e4:69:14:c0:e4:66:44:2e:ba:d2:7d:
cb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:98:2B:0F:EC:42:24:34:8A:39:6F:42:49:63:83:77:E9:3C:F5:14
X509v3 Authority Key Identifier:
keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/b5grD-xCJDSKOW9CSWODd-k89RQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:da80::/29
Signature Algorithm: sha256WithRSAEncryption
2e:f9:51:e9:24:d4:7d:4a:5c:b0:26:78:7a:f1:59:60:4c:72:
11:aa:d6:f0:9c:4c:fa:96:31:16:10:11:b0:2a:8f:42:df:50:
7f:cc:2e:e6:1b:28:46:5f:5e:f3:00:38:6e:db:5a:10:ad:7e:
9b:eb:0a:76:43:a3:e5:ed:7a:90:35:a3:53:9f:a5:a2:19:4c:
37:ef:30:b3:3b:2f:77:8c:61:46:01:57:fd:32:3f:80:3e:cf:
85:24:c7:05:2f:9d:39:07:12:32:8f:c9:40:aa:db:7b:14:2a:
9d:cd:d2:0b:cd:35:14:9e:3d:e7:09:d6:75:73:9a:91:19:d4:
72:b5:b4:5b:09:e9:63:48:35:25:16:a8:7f:49:5b:ec:6a:45:
8a:44:19:52:91:6c:85:06:c1:28:fc:11:ae:25:be:28:95:84:
54:cc:40:64:43:17:8f:e5:db:84:13:18:fb:51:36:f0:4b:7c:
19:5d:64:78:39:cf:06:46:5d:15:a2:ca:16:c8:34:5f:bc:86:
4a:df:ce:73:c8:b4:5b:4e:d1:9e:be:18:f3:d3:a7:ec:75:39:
18:86:26:06:63:92:46:06:64:05:6c:00:79:68:40:24:2e:d8:
11:f8:6f:a4:87:54:00:3f:e1:05:24:6c:d5:dd:6b:cf:0b:29:
fa:f2:30:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 11:46:17 2026 by rpki-client