Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/bRXiC2U9rJZ0R844exWw5xnpCNw.roa
File: bRXiC2U9rJZ0R844exWw5xnpCNw.roa (raw, json)
Hash identifier: xzdo2MnLSJhXwmF8ybf9XYwi7ZHCLzUD16ROzxD4Q5c=
Subject key identifier: 6D:15:E2:0B:65:3D:AC:96:74:47:CE:38:7B:15:B0:E7:19:E9:08:DC
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01A001EFCD3931D4F610D0E379DE9C5F31BE
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/bRXiC2U9rJZ0R844exWw5xnpCNw.roa
Signing time: Fri 14 Aug 2026 20:21:27 +0000
ROA not before: Fri 14 Aug 2026 20:21:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199746
IP address blocks: 2a0e:4001:300::/40 maxlen: 40
2a0e:4005:fe00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:ef:cd:39:31:d4:f6:10:d0:e3:79:de:9c:5f:31:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Aug 14 20:21:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d15e20b653dac967447ce387b15b0e719e908dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:84:7f:34:74:e1:9e:b4:7b:14:87:15:4a:81:
e4:6d:15:48:ff:ca:da:e9:d7:28:24:e1:fb:5e:10:
6a:cf:ae:1c:a0:fd:40:ac:2e:ac:ee:f1:72:2a:4f:
11:67:fe:8e:c9:c3:93:03:64:aa:34:f9:56:62:6c:
83:3d:ca:83:41:21:3b:ea:68:b4:d5:5a:82:75:1a:
4f:bf:a6:3b:93:e2:8a:60:74:3d:f9:c9:0b:0e:77:
17:1a:0a:dc:fd:f0:fd:04:4b:81:a0:0f:8f:ce:b3:
15:af:a3:70:29:e2:74:1a:42:25:17:9a:36:c0:20:
f3:df:9c:36:c2:c7:3b:49:c0:bf:a2:e9:38:0f:16:
5f:b8:a2:45:6d:71:9c:78:3c:51:d3:be:31:75:26:
c0:41:07:e0:8b:11:57:f3:09:2c:4e:f5:10:31:6f:
c1:13:28:1f:0f:87:50:d8:e8:74:c1:7a:93:c7:77:
3e:03:59:a7:ec:71:84:9b:1a:62:ef:4d:96:2c:09:
ff:8f:a7:83:9d:de:b6:3f:b8:56:b6:2b:f4:7e:b3:
d8:e8:f5:af:bf:54:da:99:47:7b:b7:c7:78:3c:04:
9b:a8:0d:5c:a5:2f:e6:ab:32:ff:f1:3b:b8:10:26:
85:d4:67:93:06:f3:7f:2b:4c:14:02:fb:b8:cf:59:
a0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:15:E2:0B:65:3D:AC:96:74:47:CE:38:7B:15:B0:E7:19:E9:08:DC
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/bRXiC2U9rJZ0R844exWw5xnpCNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4001:300::/40
2a0e:4005:fe00::/40
Signature Algorithm: sha256WithRSAEncryption
a8:7d:1a:e3:0b:20:c5:b2:b1:e3:b6:80:65:7c:e9:6c:84:40:
dd:10:6c:3e:32:42:82:c2:9b:bd:fa:6a:18:e3:66:69:c3:12:
9f:ed:47:5b:af:f5:27:cb:e8:38:74:37:a8:e9:23:21:19:21:
d3:b8:35:3d:6b:a6:ac:03:e2:44:8a:25:88:b6:9b:c9:59:36:
2e:01:34:fc:5d:3e:32:a4:de:c7:c8:e6:8a:0b:e7:53:8f:a4:
07:ee:90:a2:70:4e:37:48:79:80:be:8c:03:79:74:bd:d2:41:
90:54:5c:1c:41:da:4d:3f:5a:8f:b4:ab:de:88:54:86:bf:85:
c5:ea:36:67:ea:e5:d4:51:d4:f4:28:a2:70:b9:99:d9:aa:a2:
09:84:7b:90:c6:62:72:1e:7e:9d:7d:81:46:ae:cc:ec:6c:49:
3d:ca:db:0d:ab:5c:df:63:97:d1:be:33:ff:5b:ac:8e:d5:d5:
d0:50:46:55:5b:a6:68:df:e2:bb:4a:f5:15:46:ea:1e:90:ef:
0c:74:1d:36:09:53:8b:39:b4:f9:1d:80:19:70:e0:bb:dd:80:
1e:68:ec:69:8a:a2:0d:28:d2:a2:9e:b5:ce:24:6e:2a:88:4a:
90:92:2b:d3:6c:5d:f7:f8:c9:6f:09:90:e1:a4:70:8b:45:0a:
98:38:82:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:56:23 2026 by rpki-client