Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/270326-b96c-4e3c-bf9d-b625f9b35e2c/1/b0u6At-JeKVEhq2JG13hKRTFkQM.roa
File: b0u6At-JeKVEhq2JG13hKRTFkQM.roa (raw, json)
Hash identifier: zjUUusC2m/EaiOZX6m4henUaYd6GRIS8uDHPErnI1zM=
Subject key identifier: 6F:4B:BA:02:DF:89:78:A5:44:86:AD:89:1B:5D:E1:29:14:C5:91:03
Certificate issuer: /CN=d68f4afd6c23addcb54ddcc984d554389aa39973
Certificate serial: 01A047E172CA91CFCC102F7F244A9A687CDD
Authority key identifier: D6:8F:4A:FD:6C:23:AD:DC:B5:4D:DC:C9:84:D5:54:38:9A:A3:99:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1o9K_Wwjrdy1TdzJhNVUOJqjmXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/270326-b96c-4e3c-bf9d-b625f9b35e2c/1/b0u6At-JeKVEhq2JG13hKRTFkQM.roa
Signing time: Fri 28 Aug 2026 10:19:12 +0000
ROA not before: Fri 28 Aug 2026 10:19:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 2a09:9140::/32 maxlen: 32
2a09:9141::/32 maxlen: 32
2a09:9142::/32 maxlen: 32
2a09:9143::/32 maxlen: 32
2a09:9144::/32 maxlen: 32
2a09:9145::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/270326-b96c-4e3c-bf9d-b625f9b35e2c/1/1o9K_Wwjrdy1TdzJhNVUOJqjmXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/270326-b96c-4e3c-bf9d-b625f9b35e2c/1/1o9K_Wwjrdy1TdzJhNVUOJqjmXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1o9K_Wwjrdy1TdzJhNVUOJqjmXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:e1:72:ca:91:cf:cc:10:2f:7f:24:4a:9a:68:7c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d68f4afd6c23addcb54ddcc984d554389aa39973
Validity
Not Before: Aug 28 10:19:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f4bba02df8978a54486ad891b5de12914c59103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e6:07:2d:25:32:b4:db:25:c7:91:18:8f:2f:
8d:c7:2d:23:21:cb:eb:d1:29:a3:12:b8:dc:b6:fc:
95:c0:9b:f1:78:85:92:5f:83:3e:e8:84:11:a0:9f:
2e:57:6e:90:3a:0f:c0:9f:c3:96:eb:09:cd:8a:bd:
d4:56:be:a0:34:ae:2f:88:75:4b:92:f2:ba:78:74:
07:6c:a4:0d:17:70:ed:78:f8:97:7c:ad:99:b1:06:
79:c3:d1:6d:f6:f6:a4:56:dd:2f:7a:a5:69:a6:03:
a4:e4:2e:db:74:f8:85:6a:c3:fe:df:ed:da:a5:e4:
e2:e1:8c:7c:f6:a7:3e:1a:4e:e1:52:31:f2:31:6c:
31:8c:ff:38:6e:85:f6:36:0c:6c:de:dc:d8:3c:a4:
28:e7:37:f1:41:a9:c9:27:36:35:fd:40:e9:33:05:
f8:24:8b:b9:de:03:70:76:8f:40:a4:f5:37:9e:d4:
c6:da:5d:5a:fb:12:3e:f8:73:b4:65:16:5d:0f:a9:
da:f0:0c:2e:bd:d0:a8:8c:ef:d4:fe:e6:a8:95:fd:
5d:ff:ea:49:3d:d9:df:c2:1a:e7:c8:9a:b5:b2:9b:
75:66:5b:e7:c1:72:44:82:8b:93:c3:a9:d1:bd:9f:
37:64:87:37:d8:de:e0:d2:7b:47:02:8b:7d:bf:be:
ac:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:4B:BA:02:DF:89:78:A5:44:86:AD:89:1B:5D:E1:29:14:C5:91:03
X509v3 Authority Key Identifier:
keyid:D6:8F:4A:FD:6C:23:AD:DC:B5:4D:DC:C9:84:D5:54:38:9A:A3:99:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1o9K_Wwjrdy1TdzJhNVUOJqjmXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/270326-b96c-4e3c-bf9d-b625f9b35e2c/1/b0u6At-JeKVEhq2JG13hKRTFkQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/270326-b96c-4e3c-bf9d-b625f9b35e2c/1/1o9K_Wwjrdy1TdzJhNVUOJqjmXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:9140::-2a09:9145:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
26:33:27:6a:f9:c1:4b:30:62:2f:6d:ca:68:3e:f6:ae:d4:0b:
b0:4a:2c:50:a4:a9:23:fd:a3:44:5d:81:12:cd:f5:fd:c8:b3:
c2:ea:92:44:dc:93:dc:7c:ee:e3:89:e6:8e:05:6b:49:43:7e:
97:3b:23:9e:01:ff:c6:d9:42:fa:8c:d0:73:e3:00:cb:90:86:
ed:66:bb:ba:02:cc:75:15:8f:a8:74:fc:39:2f:14:54:fd:47:
86:80:e8:f8:65:3f:93:85:a7:4d:57:6c:6c:34:69:17:d9:ad:
7b:78:16:82:f0:2b:ad:1d:5a:c3:68:b0:78:27:f1:db:55:84:
52:92:26:f7:e8:16:b8:c4:9e:25:ac:24:f1:a7:ed:dc:16:47:
99:17:38:02:5b:84:89:e1:f2:12:8a:8d:46:ff:0c:cb:0f:ff:
6f:a3:b5:a8:9d:6b:5d:54:54:fb:32:c6:83:d7:82:0e:9d:7c:
20:ba:5e:46:b0:89:fc:3e:76:97:cb:ff:43:ad:07:de:2e:c6:
20:7d:f4:25:ab:1a:60:4b:00:e7:50:3b:5e:78:b3:3a:5f:3b:
af:92:85:0c:5c:5c:2d:b9:6e:9f:fd:3c:e5:e1:51:e8:76:b5:
08:4f:db:02:a2:31:92:de:89:33:6a:ef:35:91:8c:bc:c1:f5:
bc:b4:9c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:07:54 2026 by rpki-client