Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/bscSMUePvjYGJBA3eTSMaTqEF0Y.roa
File: bscSMUePvjYGJBA3eTSMaTqEF0Y.roa (raw, json)
Hash identifier: cNPF3CMj+Q3zU+XumEjHwBv76MtTW2OcHQISDQXkPMI=
Subject key identifier: 6E:C7:12:31:47:8F:BE:36:06:24:10:37:79:34:8C:69:3A:84:17:46
Certificate issuer: /CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Certificate serial: 01A0344059E547C2AA04386D301A3801BAF5
Authority key identifier: 4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/bscSMUePvjYGJBA3eTSMaTqEF0Y.roa
Signing time: Mon 24 Aug 2026 14:50:27 +0000
ROA not before: Mon 24 Aug 2026 14:50:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219051
IP address blocks: 2a07:e000:36::/48 maxlen: 48
2a07:e000:37::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:34:40:59:e5:47:c2:aa:04:38:6d:30:1a:38:01:ba:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Validity
Not Before: Aug 24 14:50:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ec71231478fbe360624103779348c693a841746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:31:79:bc:7d:0c:dd:a8:76:78:52:a9:ca:08:
82:d7:ac:eb:c2:d7:03:c0:9b:2b:41:ec:6d:51:2e:
62:9c:fb:9e:5e:23:c3:bd:9d:f2:6f:c2:f0:1a:f6:
99:5b:f7:0d:f2:86:2b:3c:f7:64:e7:16:e3:1b:80:
b2:38:9c:c8:2f:e8:21:46:2d:dc:fb:0c:89:17:3e:
26:09:51:a5:6d:16:3c:2b:22:13:a5:db:70:34:1a:
41:c3:47:4d:fb:3f:df:f8:28:ac:b9:3d:a3:df:e3:
8f:28:e8:e5:24:59:57:7f:fd:b5:8a:50:5b:37:e8:
cc:81:c0:21:91:c8:9f:da:c9:1c:6b:00:02:f1:0f:
7f:56:dc:34:66:0d:e3:38:8a:80:e8:7e:3a:69:54:
c1:0b:55:a7:b2:99:26:a3:ab:8c:da:22:83:59:ea:
f7:11:d6:ea:f3:3f:99:31:cb:30:05:8d:bf:f8:3f:
2d:7b:1f:9b:44:65:d6:91:96:09:6f:e8:e5:fc:2c:
a9:1c:e7:6d:3d:05:be:1d:ab:15:9e:c6:21:3c:b9:
2b:24:71:6f:5e:67:a1:fd:91:d5:a5:9e:ee:65:a8:
d2:c4:29:dd:36:b0:67:17:6d:66:97:0d:d6:6d:6a:
a8:f5:6e:d8:93:f5:e6:da:fb:af:b7:42:83:25:a7:
3a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C7:12:31:47:8F:BE:36:06:24:10:37:79:34:8C:69:3A:84:17:46
X509v3 Authority Key Identifier:
keyid:4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/bscSMUePvjYGJBA3eTSMaTqEF0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:e000:36::/47
Signature Algorithm: sha256WithRSAEncryption
71:b1:04:90:00:3a:52:4f:e2:7d:82:21:7f:40:da:22:5c:16:
37:78:52:df:3f:1d:7b:33:c9:7e:8d:e7:0c:e5:12:23:be:20:
73:ba:cb:65:16:1e:d4:e0:13:78:6b:63:df:c9:c9:b8:7c:84:
bd:97:ef:b2:5f:d4:55:65:1c:7c:4f:c3:d0:3e:a9:d2:69:7a:
fc:4c:0d:a9:fd:20:07:46:ea:ac:0d:19:21:0f:d4:d5:5e:1d:
83:c2:46:12:f6:07:a4:43:e8:1a:f3:91:60:39:2a:c9:a6:e3:
05:f8:22:ad:66:11:46:c7:ec:49:c9:77:3f:95:fa:d5:e1:df:
6f:ea:9e:6b:aa:ac:fb:1e:e2:e0:b1:db:c5:7d:49:12:34:9e:
f2:b6:14:b1:5b:c4:0e:f1:53:fb:4b:1a:54:6c:26:3d:40:74:
ba:b9:95:8f:99:ab:2f:a1:77:ab:9b:20:03:f8:84:56:e4:aa:
df:3f:6f:16:fd:28:95:b8:78:5c:bc:10:4d:df:ee:0f:35:9f:
1a:32:c2:ee:05:26:0d:23:7d:33:f4:83:94:89:5c:c3:4e:13:
99:06:ea:4b:48:49:53:30:45:aa:bb:a9:a7:e7:65:9f:24:35:
d7:4f:80:d4:01:e0:07:f4:77:2b:ca:f0:77:33:8e:af:90:de:
c9:3b:1c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:27:45 2026 by rpki-client