Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/RB6c02Y05ndL1tBmed3K3PYqOb8.roa
File: RB6c02Y05ndL1tBmed3K3PYqOb8.roa (raw, json)
Hash identifier: HA3QTmLMd6DYrv7h2tvYadjPLlyjtL356EnCTt0Ef14=
Subject key identifier: 44:1E:9C:D3:66:34:E6:77:4B:D6:D0:66:79:DD:CA:DC:F6:2A:39:BF
Certificate issuer: /CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Certificate serial: 019DBA9D0874994E019537DC992D720754D5
Authority key identifier: 05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/RB6c02Y05ndL1tBmed3K3PYqOb8.roa
Signing time: Thu 23 Apr 2026 13:52:26 +0000
ROA not before: Thu 23 Apr 2026 13:52:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205799
IP address blocks: 2a0e:7f47::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ba:9d:08:74:99:4e:01:95:37:dc:99:2d:72:07:54:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Validity
Not Before: Apr 23 13:52:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=441e9cd36634e6774bd6d06679ddcadcf62a39bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c8:a6:91:78:14:6a:7b:92:bc:93:13:22:c7:
18:48:df:52:c4:a5:b9:b9:f7:b5:68:b4:de:63:c7:
62:3d:06:fd:8d:f1:0a:56:e7:e8:0c:a8:2c:77:2b:
1a:94:23:9f:16:cf:95:5f:8b:36:6f:47:d7:65:87:
4d:31:f0:e4:e4:77:41:07:68:00:2c:cc:40:a7:43:
dd:ba:bd:b8:4e:b3:03:31:ed:f6:1f:65:b9:79:01:
1a:d5:32:e7:6c:0b:52:ad:9b:73:02:8e:0d:f0:80:
e9:fd:49:55:4f:d7:a2:4f:13:f8:18:6f:0b:e9:49:
78:d3:56:95:ad:c6:bd:42:55:60:4e:77:ab:f4:80:
f9:c1:fa:c5:ac:85:e4:96:18:4b:26:c2:9e:3b:1d:
46:4d:c3:4b:6c:1b:46:40:54:ed:82:98:e7:de:d8:
59:2b:86:f5:f4:18:c2:68:ff:e9:c3:3a:3d:1f:7e:
4c:27:51:cd:a4:47:55:ee:08:47:24:fd:ae:77:09:
47:55:09:b1:bb:0c:26:e0:8d:bd:3d:50:f2:c0:12:
38:8e:19:a3:0d:61:c7:31:e9:fe:86:15:00:a3:de:
cf:88:15:d7:86:69:bf:85:3b:bb:6f:d8:7e:6c:48:
fb:dc:bb:48:b3:c0:3a:ba:bc:7c:09:1c:62:9a:bc:
5c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:1E:9C:D3:66:34:E6:77:4B:D6:D0:66:79:DD:CA:DC:F6:2A:39:BF
X509v3 Authority Key Identifier:
keyid:05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/RB6c02Y05ndL1tBmed3K3PYqOb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:7f47::/32
Signature Algorithm: sha256WithRSAEncryption
7f:f1:da:b3:2f:2b:b4:20:4c:c8:c9:13:53:8c:9a:ab:e0:d7:
46:95:17:3e:5e:c1:e7:61:da:60:d5:82:a7:8d:4a:64:0c:f5:
fe:4e:78:8b:38:f2:2d:69:4a:d1:76:60:45:4f:7d:83:e7:e8:
80:9f:98:27:02:60:36:1b:f0:d0:3c:77:97:69:59:89:31:49:
34:ba:34:38:ab:7e:e9:67:8a:7d:ab:22:ca:9b:c2:c0:d9:4b:
2b:88:57:b6:98:3e:48:a6:7c:dd:6b:de:b8:fe:ce:e4:e1:96:
89:8f:c9:fa:7e:74:63:de:b8:48:ac:17:f9:b0:79:4c:78:79:
c7:3a:91:83:d6:1b:34:57:d4:ae:42:68:e7:52:34:9e:32:54:
42:5c:70:f4:75:da:d6:a7:d0:92:10:35:16:7f:3c:ed:04:82:
d6:0b:34:a4:17:b8:8c:7c:bf:9c:51:d0:40:00:cd:f8:ea:80:
a9:f9:c5:4e:90:37:ab:20:77:b8:af:5f:5d:ed:f8:23:90:65:
b8:cf:1a:d4:35:36:40:67:7a:47:e1:db:62:b8:b3:77:5d:a5:
22:4c:8f:13:50:0e:3f:9a:22:3c:92:66:a9:c1:b8:e9:13:e8:
d9:27:60:9e:54:fa:1b:9f:18:07:41:ff:08:3d:8a:fa:a0:3b:
ff:2a:ba:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:15:15 2026 by rpki-client