Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/BiC4a6qOYIaNo51g36rz2teBb48.roa
File: BiC4a6qOYIaNo51g36rz2teBb48.roa (raw, json)
Hash identifier: R6FRfNkX9d9XJQhInhXeJSXC27FGtkyAE/WoWgfgD6A=
Subject key identifier: 06:20:B8:6B:AA:8E:60:86:8D:A3:9D:60:DF:AA:F3:DA:D7:81:6F:8F
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 01A1013EBAC2C9D9F30702200F86A149E604
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/BiC4a6qOYIaNo51g36rz2teBb48.roa
Signing time: Sat 03 Oct 2026 10:10:50 +0000
ROA not before: Sat 03 Oct 2026 10:10:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199180
IP address blocks: 2a03:5840:151::/48 maxlen: 48
2a03:5840:16b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 01:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:3e:ba:c2:c9:d9:f3:07:02:20:0f:86:a1:49:e6:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Oct 3 10:10:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0620b86baa8e60868da39d60dfaaf3dad7816f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:68:64:80:e4:9f:84:47:e3:a7:b8:80:d1:e7:
97:08:da:95:2d:14:02:dc:19:4f:f8:74:18:4d:1f:
0c:e9:9a:b6:f6:82:46:6a:b7:1f:1d:f0:9b:d8:04:
a0:f1:39:f5:17:3d:fd:bd:54:3a:c3:4d:62:bb:c3:
bc:80:e1:d8:6a:e0:f9:3b:9a:4a:8d:20:1d:25:21:
1b:46:79:0c:4b:11:76:a7:b7:82:60:ca:76:7f:f9:
7c:c2:cd:36:1a:39:7c:e1:c5:56:51:85:be:a1:6b:
21:fc:e5:02:df:86:7d:57:c2:01:53:e7:01:b2:43:
33:bc:0d:e8:d1:1a:ee:8f:97:64:97:c1:73:fa:87:
1a:96:35:cb:b6:9c:68:7f:26:97:45:69:ec:09:70:
29:82:15:62:44:4f:e3:d0:3e:ba:4a:3e:fe:09:05:
7b:15:fb:83:55:e7:f1:c4:c7:91:d3:48:19:d5:aa:
87:57:37:d5:cd:5e:5f:85:bd:d3:55:15:cd:82:79:
e6:7b:16:78:9e:43:f4:32:be:ca:f9:53:ed:03:d3:
87:0a:28:88:0b:f5:67:e3:46:6b:bc:f4:c2:52:a2:
37:e6:10:cc:29:c3:32:a6:95:1e:8f:28:1d:a8:c4:
71:f7:60:40:9d:df:c8:8c:31:22:91:31:d1:0e:e9:
f8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:20:B8:6B:AA:8E:60:86:8D:A3:9D:60:DF:AA:F3:DA:D7:81:6F:8F
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/BiC4a6qOYIaNo51g36rz2teBb48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:151::/48
2a03:5840:16b::/48
Signature Algorithm: sha256WithRSAEncryption
1b:0e:40:19:db:81:c8:6e:70:fd:aa:bd:2f:5e:00:b6:0c:d9:
79:a6:59:63:d0:be:3e:b0:4f:11:76:db:3a:c4:34:5a:87:74:
7c:fe:51:be:c4:9f:19:46:bb:2b:b2:0d:60:b8:e3:c9:b5:05:
a3:16:2d:9a:4c:d3:8e:dd:e6:47:2c:3d:74:dc:79:cd:81:ad:
8e:c0:4a:d3:d2:b8:82:ac:3e:d4:c9:c1:0c:31:a5:42:f3:5f:
9f:d0:88:58:f0:69:f2:d2:e9:c0:85:b1:1a:04:e9:d9:13:7e:
49:20:d1:2b:af:cd:b6:25:45:3d:80:35:d3:56:bb:98:8c:66:
e3:51:58:18:c8:58:0c:7f:a5:e2:36:f7:57:18:3b:cb:78:d3:
df:ec:7c:c0:05:06:be:a6:3e:cd:66:5d:c1:e1:11:0c:1d:d7:
46:9b:ce:2f:0b:7a:98:2a:c1:f8:3f:f2:d8:75:2c:fe:14:6b:
30:52:c2:67:c7:7d:48:6a:73:ee:b3:6d:e5:ae:1e:5a:b1:c6:
2f:cb:ad:b3:e1:81:86:19:c5:2b:00:b8:79:9c:77:58:8e:76:
28:a1:87:6b:b6:7d:55:0e:0d:43:97:fe:d7:85:6e:73:e3:4a:
ec:70:2c:9b:88:09:2e:b7:37:dd:2c:e7:7d:11:79:f1:32:80:
15:7f:49:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:26:44 2026 by rpki-client