Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/bCB7Knn4QLX2-XHIFlPiaqOVsu8.roa
File: bCB7Knn4QLX2-XHIFlPiaqOVsu8.roa (raw, json)
Hash identifier: V/RVN3oJB/6Li2sdoZS206Goq2WcXv9CXvMF8+sYdPQ=
Subject key identifier: 6C:20:7B:2A:79:F8:40:B5:F6:F9:71:C8:16:53:E2:6A:A3:95:B2:EF
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019C7152BB0F36D2300D348C7AEA1F00E203
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/bCB7Knn4QLX2-XHIFlPiaqOVsu8.roa
Signing time: Wed 18 Feb 2026 15:16:13 +0000
ROA not before: Wed 18 Feb 2026 15:16:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44519
IP address blocks: 2a12:9f00:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Feb 2026 00:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:71:52:bb:0f:36:d2:30:0d:34:8c:7a:ea:1f:00:e2:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Feb 18 15:16:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c207b2a79f840b5f6f971c81653e26aa395b2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:41:26:e2:d6:7a:30:b0:fa:f1:38:d9:14:e5:
39:b2:6f:87:41:1f:6e:a1:9a:18:66:d5:2d:e2:7c:
0f:dd:fb:df:40:d5:80:47:bc:5b:bc:7f:1e:d9:28:
61:4b:40:ce:9c:41:67:1d:15:14:80:01:6f:5c:67:
d9:12:0c:2e:12:26:cd:2b:b1:ef:f7:21:3f:3c:5a:
0c:07:b5:16:1c:4b:90:e9:96:41:fb:04:e9:f6:3a:
e3:9a:6d:19:65:3e:13:a6:b0:26:e5:bd:5f:e8:c2:
92:09:06:c6:8c:32:b9:29:e8:f1:52:d2:1c:e5:c8:
98:13:c0:c1:eb:6c:a2:9d:28:6b:5b:00:1a:ae:1c:
37:65:73:5e:c6:60:bd:41:f0:7a:15:2a:04:46:84:
ee:e1:aa:53:15:c8:e3:a9:81:07:74:85:26:35:da:
1b:7a:45:17:37:78:7e:20:27:be:e0:0b:cf:34:ff:
88:22:f6:e3:fd:87:03:12:3c:fc:93:ad:52:c8:14:
12:dd:fa:99:67:53:ea:9a:2e:b2:19:fa:18:c7:6d:
62:d7:81:f6:5f:2d:3c:b7:60:60:a5:7b:29:bd:50:
5e:d8:54:13:1b:05:0a:1d:96:e6:a8:c2:b5:91:6f:
3a:47:31:66:a7:12:5f:f3:f4:2a:76:a6:3c:1d:5d:
f9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:20:7B:2A:79:F8:40:B5:F6:F9:71:C8:16:53:E2:6A:A3:95:B2:EF
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/bCB7Knn4QLX2-XHIFlPiaqOVsu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:9f00:3::/48
Signature Algorithm: sha256WithRSAEncryption
40:9f:cf:d5:65:f5:57:12:c7:75:62:57:b3:eb:46:f8:ac:be:
5f:f6:8a:8b:b7:41:d2:38:5f:58:4b:0d:2e:9b:40:d4:0f:0e:
ee:fb:de:20:27:40:0b:bb:a7:4f:f1:48:9e:6d:93:b6:0f:88:
d6:ae:8c:26:ff:0d:fe:dc:36:b8:5f:58:7b:46:ef:9c:fa:ce:
51:89:33:d7:b3:4c:b3:41:1a:9c:1d:8b:15:6f:94:c8:17:49:
35:1f:3a:c9:c9:e5:c8:5b:4e:ea:8b:54:c4:46:7d:f7:1f:ac:
0b:4a:ca:e0:a2:73:1b:0c:c2:06:cb:58:ba:59:ac:51:96:27:
81:63:21:41:7f:6a:33:f5:28:f8:52:4d:d0:08:ab:ff:bb:d7:
25:ef:d2:75:85:68:a5:35:b1:b5:ff:bf:a9:c9:26:1f:cb:70:
41:78:10:99:45:1b:68:a4:42:43:4e:12:e7:9e:e7:e0:3f:4e:
d9:fe:56:e9:cb:c0:98:1c:4e:07:b3:17:e5:36:13:dd:be:48:
a7:a5:34:81:c6:8d:b9:7f:82:96:ae:17:56:a3:7a:43:27:51:
14:46:28:ba:c4:3b:ca:58:3a:dd:0f:92:68:b2:da:2a:25:af:
1b:69:bb:86:22:7f:5c:cb:d8:35:56:d3:9b:36:4a:18:de:1c:
00:23:59:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 07:40:49 2026 by rpki-client