Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/bgTgqqb9OI5AH46xCnhhsZyGTME.roa
File: bgTgqqb9OI5AH46xCnhhsZyGTME.roa (raw, json)
Hash identifier: RTwV/pBoxLy9WMjr6AeFKI/SyJ1ZQ3CXqjoe1gKHNmE=
Subject key identifier: 6E:04:E0:AA:A6:FD:38:8E:40:1F:8E:B1:0A:78:61:B1:9C:86:4C:C1
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 01A13A5B24D80015D5EA36B9CCD40AD11C5D
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/bgTgqqb9OI5AH46xCnhhsZyGTME.roa
Signing time: Wed 14 Oct 2026 12:20:14 +0000
ROA not before: Wed 14 Oct 2026 12:20:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401163
IP address blocks: 2a06:b3c0::/29 maxlen: 48
2a06:cac0::/29 maxlen: 48
2a11:9600::/29 maxlen: 48
2a12:ec0::/29 maxlen: 48
2a12:1900::/29 maxlen: 48
2a12:28c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft
rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:5b:24:d8:00:15:d5:ea:36:b9:cc:d4:0a:d1:1c:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Oct 14 12:20:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e04e0aaa6fd388e401f8eb10a7861b19c864cc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2c:7d:24:b6:18:12:bd:b3:7e:97:60:db:85:
3e:54:5f:ef:a0:05:bb:da:b7:34:a0:d7:75:b8:7f:
26:be:f7:f8:8b:a6:68:a1:a8:42:e9:02:b9:f6:d7:
78:a8:ef:6a:dc:2a:b1:e9:c6:b3:a1:42:e2:69:56:
3c:9d:48:6c:44:b4:4b:96:5f:b2:25:79:5f:5a:8d:
03:bc:93:10:3a:ce:9f:d5:33:66:9e:ac:eb:1a:37:
2a:b9:15:a4:df:d1:7b:44:a9:0e:ba:8a:e0:02:f4:
74:24:34:3d:70:c0:8d:13:9c:31:ae:fe:01:a4:b7:
3a:49:14:72:de:19:ac:5b:17:0b:a1:b4:a2:1c:eb:
a6:46:00:cf:84:fd:bd:2e:35:bb:03:4d:93:bc:ae:
3a:d1:86:83:75:b2:12:6f:58:19:62:0b:21:2c:a7:
52:cc:f3:e4:2e:e0:b6:ed:35:87:75:66:80:b8:24:
56:72:e6:8e:11:21:c9:31:e2:18:df:0d:a6:d8:df:
63:6b:22:dc:4f:df:0a:6e:78:9d:6d:e4:e4:46:21:
26:1a:d5:99:49:6b:a9:7b:94:f3:86:73:ef:78:ef:
a0:ba:33:f5:35:9d:99:bd:d2:d9:d0:8f:57:75:db:
32:84:09:91:62:c2:f1:1e:36:e4:06:51:3d:4a:93:
99:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:04:E0:AA:A6:FD:38:8E:40:1F:8E:B1:0A:78:61:B1:9C:86:4C:C1
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/bgTgqqb9OI5AH46xCnhhsZyGTME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:b3c0::/29
2a06:cac0::/29
2a11:9600::/29
2a12:ec0::/29
2a12:1900::/29
2a12:28c0::/29
Signature Algorithm: sha256WithRSAEncryption
69:41:8f:df:5d:26:bc:a2:eb:33:1b:9e:e3:61:28:28:73:38:
85:9b:bf:98:ea:63:6c:8b:32:57:07:72:74:b1:42:8f:78:8d:
13:42:79:cb:f2:44:40:a2:ef:fd:1c:c8:7a:89:85:b8:d7:17:
ce:f1:4b:74:e7:c2:5d:63:fc:2b:75:a6:e8:f8:f6:84:d1:40:
e1:3b:65:d4:04:ab:b8:f2:e2:b2:10:e9:c7:30:f7:0b:af:1f:
62:48:d8:a0:d2:1c:95:38:98:aa:ae:1a:d1:bd:8a:63:b3:f8:
f6:b7:ea:1a:b6:08:cb:b1:34:06:7a:62:15:f9:9f:66:b6:6d:
d1:eb:ed:bb:a0:74:a7:15:ff:16:ef:00:04:75:45:47:a6:3d:
66:d3:d0:a5:0d:c3:5b:9b:f1:21:6d:d8:48:f6:8a:a8:32:b0:
f0:71:ea:c1:e6:43:cf:a9:2d:20:a4:bf:86:fe:b9:35:49:8c:
f0:c3:89:25:db:63:3a:5f:c6:bd:4c:c3:fe:75:4a:57:dd:66:
f4:39:d3:fd:05:73:f3:59:bc:93:b1:f8:46:be:ff:e4:08:55:
06:d4:e8:5e:5d:22:9c:a4:f8:fe:ca:2e:c9:d4:aa:4a:5f:67:
6a:a2:39:b0:af:a7:02:34:f9:1a:0a:c9:8b:c9:bd:fd:3f:3e:
14:35:b7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 18:14:03 2026 by rpki-client