Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/bw9tcXWSv8dsElPkNXcq3yH32K4.roa
File: bw9tcXWSv8dsElPkNXcq3yH32K4.roa (raw, json)
Hash identifier: m+oB6VVNoxmHqMu7evkT6r4c1BdajPJT3yEfJkUEcWM=
Subject key identifier: 6F:0F:6D:71:75:92:BF:C7:6C:12:53:E4:35:77:2A:DF:21:F7:D8:AE
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019F390A4B8F96F158C70671810079220D8F
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/bw9tcXWSv8dsElPkNXcq3yH32K4.roa
Signing time: Mon 06 Jul 2026 20:06:43 +0000
ROA not before: Mon 06 Jul 2026 20:06:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 2a10:3c82::/32 maxlen: 32
2a10:3c83::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:39:0a:4b:8f:96:f1:58:c7:06:71:81:00:79:22:0d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jul 6 20:06:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f0f6d717592bfc76c1253e435772adf21f7d8ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:61:2c:e1:28:06:07:d2:07:b0:f1:23:a1:cf:
78:44:83:9a:0b:1a:ea:66:f9:51:9f:c8:aa:c3:8d:
29:06:3e:7c:b7:36:50:23:8a:23:05:85:9b:cf:8a:
d2:7a:3e:01:75:e9:0c:c3:ae:82:84:86:62:ca:5d:
7e:e8:ad:19:41:b0:4a:29:1b:34:de:d0:bf:01:a2:
cf:a6:20:b9:18:f3:69:ae:a8:bc:f4:3e:19:e3:10:
02:b5:c7:14:ac:c5:60:ea:17:b4:52:0c:3f:2a:47:
18:44:5d:78:76:f0:66:78:c2:79:4c:b7:d2:de:4e:
65:0a:b5:c0:71:69:d3:46:c0:46:5b:31:68:b8:c3:
df:02:15:76:8c:d1:b1:e1:ae:74:b1:38:1b:24:23:
0e:b4:94:b7:41:78:95:0a:4c:0c:45:f0:52:5e:0f:
59:6c:5b:e9:37:3d:54:8b:56:50:8a:cd:8c:43:94:
a8:f6:df:e3:79:22:b8:79:94:ba:5d:ae:bd:a7:0a:
fd:d3:d0:2b:79:92:41:82:ed:77:d2:f6:b9:b0:94:
ea:ae:fe:21:0e:68:6a:27:ab:a2:2d:7e:2b:7d:79:
1e:41:87:1f:a2:f7:af:8d:4e:47:eb:3c:53:c8:77:
b6:b0:f0:e0:29:50:87:3f:38:17:2a:a2:b6:29:5c:
ec:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0F:6D:71:75:92:BF:C7:6C:12:53:E4:35:77:2A:DF:21:F7:D8:AE
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/bw9tcXWSv8dsElPkNXcq3yH32K4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3c82::/31
Signature Algorithm: sha256WithRSAEncryption
e1:a9:91:6f:dd:b2:ef:53:11:82:e7:88:11:5a:d1:3c:2f:2e:
0f:c4:58:43:04:79:7f:53:e5:69:3e:96:ca:71:29:2d:cf:ab:
88:08:f3:1f:07:78:5e:e9:77:1a:93:73:78:ef:ec:91:9c:3b:
1f:ca:65:f7:48:a1:0a:04:f2:81:2f:15:a2:11:02:89:1b:91:
4b:e3:01:ca:ab:f0:2e:cf:4b:cc:2c:eb:59:be:c7:70:b0:3b:
9a:23:ac:41:88:b4:fa:ca:5a:d1:7f:5b:6d:2c:b4:be:3f:5a:
57:7b:8e:af:04:c0:0e:f1:3d:80:c6:86:90:9a:1a:81:b2:64:
fb:fc:04:8e:85:3b:31:3d:78:f6:74:30:97:41:32:89:79:7f:
f3:d1:6f:ec:10:8e:c4:6f:1b:d4:ac:98:41:75:cf:90:8f:62:
fb:7c:0d:e8:10:28:4d:66:21:5a:c8:3a:b1:51:15:50:9d:87:
91:84:4a:45:9c:97:d5:fe:03:93:5c:7f:8f:9a:f2:ac:2b:f1:
88:35:72:f4:9f:c8:b0:23:f4:c4:30:2c:38:8f:2a:3e:cb:f5:
17:4f:78:91:f7:2f:e3:4a:79:3e:68:43:09:81:e3:81:0f:68:
df:b3:c9:32:67:61:bc:1f:97:7d:05:1e:fa:48:36:b1:84:fd:
5b:f3:f0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 06:41:36 2026 by rpki-client