Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/1-RC6YgYD8oj34wphiCNjB6BuRdQ.roa
File: 1-RC6YgYD8oj34wphiCNjB6BuRdQ.roa (raw, json)
Hash identifier: X6yfxp9jc/tguch3lbT/vHW1SQ/dHRRKqtT7Nkfefhg=
Subject key identifier: F9:10:BA:62:06:03:F2:88:F7:E3:0A:61:88:23:63:07:A0:6E:45:D4
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019FF7585DEC121178F94B9AF0997F11FEC2
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/1-RC6YgYD8oj34wphiCNjB6BuRdQ.roa
Signing time: Wed 12 Aug 2026 18:59:51 +0000
ROA not before: Wed 12 Aug 2026 18:59:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219208
IP address blocks: 2a0e:4001:8800::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f7:58:5d:ec:12:11:78:f9:4b:9a:f0:99:7f:11:fe:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Aug 12 18:59:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f910ba620603f288f7e30a6188236307a06e45d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:7f:5b:34:2c:d4:f7:f3:1e:16:ae:9e:ea:50:
c0:46:01:de:fe:fe:dd:2f:f7:af:05:b1:9c:c3:fc:
8f:fa:71:0c:c7:91:0e:08:73:73:87:1b:39:39:27:
a6:d7:85:8d:d3:75:b2:fe:98:44:dc:17:9c:c1:3c:
04:e5:72:05:cb:9d:5d:74:e6:82:51:69:de:df:56:
7e:87:43:cd:d0:01:5c:06:a3:33:b6:b2:f3:c9:23:
40:d1:0d:8b:3f:40:d4:cb:6f:53:15:0e:75:3b:e7:
99:59:de:e9:9f:49:e2:19:0f:75:64:40:14:3d:c3:
d4:f7:df:d6:47:b2:b0:c9:73:c4:7d:76:75:b7:7d:
ae:4c:6a:fa:34:58:44:29:e7:e5:fa:8c:41:8d:bf:
f6:fc:64:a3:00:77:79:12:cd:3a:2d:16:54:13:42:
32:16:ea:70:15:4b:5b:9f:94:b5:8e:5e:a8:fc:36:
a2:6b:6a:0a:70:10:93:84:18:de:14:30:b6:ec:5c:
e4:e9:de:8f:69:f0:f3:02:1c:05:d2:cf:32:65:ca:
72:e3:dd:b6:5c:82:09:b3:20:c4:cd:ae:48:dc:1f:
1b:87:09:68:3b:89:a9:51:ae:ed:d8:0f:4b:de:81:
b2:0c:a3:85:3a:74:f8:f1:b7:22:93:01:1a:cd:8b:
4b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:10:BA:62:06:03:F2:88:F7:E3:0A:61:88:23:63:07:A0:6E:45:D4
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/1-RC6YgYD8oj34wphiCNjB6BuRdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4001:8800::/38
Signature Algorithm: sha256WithRSAEncryption
62:81:65:b0:48:30:e5:22:c3:7a:e4:4b:fa:b6:e3:a2:c4:b3:
f4:a8:bd:e6:72:5a:cc:59:c7:6e:60:d1:4d:2e:2b:00:0d:28:
66:bd:a5:b0:a0:ca:ff:1f:43:59:db:d2:f8:65:ec:0d:fb:71:
56:2d:48:c9:5f:11:82:9b:4f:74:14:62:4f:c3:c7:d0:2c:c8:
cb:14:0d:cc:7a:7b:c3:63:78:cb:da:f6:81:88:0d:86:e6:57:
b0:25:b3:d0:21:97:dc:f0:a9:2e:c0:9a:f3:66:7b:cf:7c:13:
78:3a:54:b7:a6:fe:47:33:7d:59:7b:a0:9b:10:cf:5a:14:a6:
41:10:a0:f0:9e:bb:33:1d:21:ea:39:33:66:a1:27:1d:91:eb:
0f:9f:78:5b:5c:e0:3a:24:e1:62:a5:2a:7a:69:ba:8d:cb:0c:
2a:7f:da:c2:f9:e0:f9:d6:6c:8f:c0:b6:21:8d:74:95:40:4a:
e4:bf:fe:86:84:63:e4:a2:a4:0c:18:10:0b:fd:ac:e6:1b:6e:
5f:46:cf:a7:fa:b9:3e:64:ef:5b:22:1d:11:17:36:e9:96:b2:
69:97:33:9f:f7:85:e5:f9:2d:e9:03:fd:03:55:70:bd:b3:06:
6d:f4:e7:7e:55:8a:25:34:43:7f:d4:aa:38:d3:db:5f:32:13:
d6:fa:7f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:56:18 2026 by rpki-client