Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/bAiv0w09X4HnDoPXtry_uVbCG9A.roa
File: bAiv0w09X4HnDoPXtry_uVbCG9A.roa (raw, json)
Hash identifier: 0EeSizCgG9dwzt3jvwALQHRTpOevtke5hHF/nPETtCw=
Subject key identifier: 6C:08:AF:D3:0D:3D:5F:81:E7:0E:83:D7:B6:BC:BF:B9:56:C2:1B:D0
Certificate issuer: /CN=7db10757cfa3917dbfa5b9be68e978653d414368
Certificate serial: 019ECFF275BCA49299B3A855328B05C914A3
Authority key identifier: 7D:B1:07:57:CF:A3:91:7D:BF:A5:B9:BE:68:E9:78:65:3D:41:43:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/bAiv0w09X4HnDoPXtry_uVbCG9A.roa
Signing time: Tue 16 Jun 2026 10:20:33 +0000
ROA not before: Tue 16 Jun 2026 10:20:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197537
IP address blocks: 2a0d:b140::/29 maxlen: 48
2a10:bc40::/29 maxlen: 48
2a12:5f40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:f2:75:bc:a4:92:99:b3:a8:55:32:8b:05:c9:14:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7db10757cfa3917dbfa5b9be68e978653d414368
Validity
Not Before: Jun 16 10:20:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c08afd30d3d5f81e70e83d7b6bcbfb956c21bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b5:e9:d2:10:59:13:76:6c:86:fd:30:33:70:
f2:46:26:65:76:c1:0f:3e:d2:e0:80:31:be:5e:35:
c7:e9:e8:c1:5d:fd:53:4e:7e:56:f6:2b:c2:37:3e:
69:50:79:1f:e8:71:d5:a2:70:76:b9:7e:4f:56:82:
f4:ab:cd:9a:1e:1d:7c:e2:40:1b:e5:66:11:84:b2:
91:f9:58:cc:60:90:ea:78:93:f1:77:8f:79:7c:74:
bf:25:ee:d4:a4:4d:fe:8d:0c:84:72:cd:20:f3:89:
19:29:d4:10:09:a4:76:82:43:a6:c2:54:e6:7a:57:
fd:34:f3:45:b7:d5:54:bb:a6:21:b4:0e:a0:8c:6c:
82:f2:bd:12:b9:e2:0c:54:7a:bc:8c:70:2b:df:91:
fd:a2:4c:23:d9:f6:5e:53:fd:43:08:3a:99:c4:2b:
e4:df:d0:30:84:3b:be:d3:47:61:b4:60:d6:09:69:
36:f7:02:07:2f:4e:e5:56:fe:e2:6f:aa:4d:d4:e8:
33:24:bc:8f:00:7b:67:bd:c6:a8:b8:70:3d:9e:ed:
5a:88:02:a3:ec:22:0c:b4:4b:0a:83:58:2b:ce:cd:
58:c9:b3:99:7f:d7:37:f2:18:8f:d7:95:9a:e7:08:
ab:86:0b:25:90:f3:7d:3f:b5:88:be:49:a6:0a:bd:
98:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:08:AF:D3:0D:3D:5F:81:E7:0E:83:D7:B6:BC:BF:B9:56:C2:1B:D0
X509v3 Authority Key Identifier:
keyid:7D:B1:07:57:CF:A3:91:7D:BF:A5:B9:BE:68:E9:78:65:3D:41:43:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/bAiv0w09X4HnDoPXtry_uVbCG9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:b140::/29
2a10:bc40::/29
2a12:5f40::/29
Signature Algorithm: sha256WithRSAEncryption
8e:b6:bd:3d:22:59:06:d0:4b:2a:bb:8c:ab:c6:93:b6:b0:ec:
d6:f1:4c:5a:0e:d4:c0:97:ed:c2:f3:e1:fc:98:23:34:ab:58:
4c:74:2e:e2:48:c5:a0:79:a6:25:14:01:fc:24:35:e8:c4:62:
a4:c4:85:b5:e0:aa:0a:2c:84:2b:31:cc:e9:eb:a9:05:c4:62:
12:3b:c0:38:e8:2a:fc:df:2d:81:d8:85:1e:0a:7e:3e:91:e0:
51:7d:39:ae:09:e7:ee:6e:92:df:15:23:fc:f5:f0:12:9a:cf:
4b:38:cb:86:7a:0d:b9:43:50:63:c8:0f:00:f9:7d:c5:5c:b7:
d5:c9:2f:ce:95:de:ca:49:84:3b:e3:88:7f:61:a5:ee:fb:5f:
28:fa:35:46:d6:52:00:f3:b0:82:19:3d:a7:c4:30:2b:72:30:
81:41:f5:c8:37:93:15:fd:12:3e:cb:26:88:27:0a:87:48:38:
9f:f3:c7:0a:77:74:e3:6d:62:d5:22:f2:11:2f:8c:c6:58:2c:
09:1c:71:a6:d0:25:1a:38:4f:6f:a3:51:88:93:3e:0f:a0:73:
d4:fc:b4:ad:b4:83:77:20:a1:9e:9b:29:e3:91:d1:6a:64:24:
62:66:ba:6e:b4:66:7a:d8:b3:e6:ea:94:69:e7:07:e3:9d:6f:
72:25:8a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 21:03:53 2026 by rpki-client