Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/u0E4SvzEl9994iNxEezaONIsfcw.roa
File: u0E4SvzEl9994iNxEezaONIsfcw.roa (raw, json)
Hash identifier: D+weyzR7DTx4IIt47nl+UeuJg3ulgB66rjuZghddnF8=
Subject key identifier: BB:41:38:4A:FC:C4:97:DF:7D:E2:23:71:11:EC:DA:38:D2:2C:7D:CC
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01A112E0362482D8698D1E9BA271407EC5FA
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/u0E4SvzEl9994iNxEezaONIsfcw.roa
Signing time: Tue 06 Oct 2026 20:20:46 +0000
ROA not before: Tue 06 Oct 2026 20:20:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209874
IP address blocks: 2a12:bec4:1520::/48 maxlen: 48
2a12:bec4:1521::/48 maxlen: 48
2a12:bec4:1522::/48 maxlen: 48
2a12:bec4:1523::/48 maxlen: 48
2a12:bec4:152c::/48 maxlen: 48
2a12:bec4:152d::/48 maxlen: 48
2a12:bec4:152e::/48 maxlen: 48
2a12:bec4:152f::/48 maxlen: 48
2a12:bec4:1651::/48 maxlen: 48
2a12:bec4:1652::/48 maxlen: 48
2a12:bec4:1653::/48 maxlen: 48
2a12:bec4:1654::/48 maxlen: 48
2a12:bec4:1655::/48 maxlen: 48
2a12:bec4:1656::/48 maxlen: 48
2a12:bec4:1657::/48 maxlen: 48
2a12:bec4:1658::/48 maxlen: 48
2a12:bec4:1659::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 15:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:12:e0:36:24:82:d8:69:8d:1e:9b:a2:71:40:7e:c5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Oct 6 20:20:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb41384afcc497df7de2237111ecda38d22c7dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6b:2a:67:ee:bb:65:a5:bd:98:9c:79:1a:65:
8c:fb:6a:ec:e5:54:98:37:a0:c1:e9:18:33:9e:b3:
ac:92:5a:93:61:a7:59:a4:26:14:ff:70:17:46:5d:
ce:47:bc:15:0e:ea:7d:af:55:17:a6:41:f7:73:c4:
57:cd:b4:df:95:ca:3c:3a:d8:31:72:74:13:58:a3:
86:d1:ae:01:bd:d9:6c:0e:b9:14:cd:33:0e:db:7b:
c8:70:2b:03:c7:fc:09:de:2d:cc:c9:05:3c:37:9a:
1e:45:67:4f:5a:f7:82:78:19:a8:09:37:cc:94:45:
2a:fb:aa:b0:97:cc:6f:64:12:76:a5:d9:de:30:11:
92:f1:f1:86:8d:bb:80:00:d3:ba:52:c2:1b:f0:61:
ba:e6:a5:7f:29:9c:3e:14:6e:00:ca:4e:f6:0b:22:
81:fc:96:21:58:53:a7:c2:ad:5c:dc:5e:cc:7b:f0:
7b:67:ff:8c:a8:7a:40:54:f7:af:74:df:e0:92:2e:
d2:b5:36:9c:26:89:93:fe:71:23:07:cd:57:dc:d3:
dd:3e:fe:fb:ff:df:3f:ff:cf:c3:fc:ba:dc:7a:c5:
3c:3a:02:2c:c8:19:ec:e3:19:d6:6f:7a:49:06:b9:
27:52:0c:96:f0:2f:bc:0e:5f:a3:c2:c9:a7:1c:6f:
04:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:41:38:4A:FC:C4:97:DF:7D:E2:23:71:11:EC:DA:38:D2:2C:7D:CC
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/u0E4SvzEl9994iNxEezaONIsfcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1520::/46
2a12:bec4:152c::/46
2a12:bec4:1651::-2a12:bec4:1659:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0e:7e:7a:ef:9b:c7:69:d5:4c:54:5c:ad:a2:4f:40:cc:18:ff:
76:0d:6d:76:17:7f:f5:f5:17:e8:32:85:67:28:08:91:7c:ff:
cb:78:e1:58:0a:4d:d9:33:c2:0e:5e:4b:67:21:9a:27:d2:6b:
7e:61:23:64:64:7c:10:e2:bd:1a:81:a3:7b:d9:dd:f0:e6:fe:
28:ad:9a:5e:4c:c9:d0:15:fd:83:54:b5:77:09:d8:2e:aa:e7:
7e:03:70:28:f3:bf:4f:af:27:8d:d6:7f:2a:9f:87:56:96:1c:
c9:98:0d:0f:43:54:d0:99:2e:6d:14:34:e2:73:09:fe:62:bc:
b0:d9:2f:e4:25:b8:39:ca:a4:fd:5a:29:a6:fa:95:f7:5c:07:
19:83:9c:23:9f:5a:42:c4:85:ac:4e:10:0b:c0:ab:31:92:db:
36:e2:35:8a:7b:bb:fb:0e:d5:71:ea:b0:dd:a1:ed:5f:f8:5b:
6b:d1:41:90:ad:0c:da:6a:f7:45:0c:fb:34:9c:5f:03:96:47:
5e:a3:ea:ce:13:cb:21:36:5c:45:bf:88:4f:f1:22:b9:f0:01:
ce:d7:ce:74:e8:52:d6:a7:25:63:07:26:8b:28:5e:9c:15:a3:
3d:64:03:bf:ea:52:82:68:32:b0:67:c6:cb:28:fb:cc:da:fa:
ef:6f:40:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 02:13:16 2026 by rpki-client