Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/bbM33uyT4kBfwLUpz-RY6FKOqD8.roa
File: bbM33uyT4kBfwLUpz-RY6FKOqD8.roa (raw, json)
Hash identifier: bGeEqHdHSoDdMrzZSf8lG1bsgmUH8NTBYTyhlhMWxKo=
Subject key identifier: 6D:B3:37:DE:EC:93:E2:40:5F:C0:B5:29:CF:E4:58:E8:52:8E:A8:3F
Certificate issuer: /CN=a16102e80735fec8921e9f509fc53b10e2be9505
Certificate serial: 01A13E468CD9619E8707BC0E3083EF470869
Authority key identifier: A1:61:02:E8:07:35:FE:C8:92:1E:9F:50:9F:C5:3B:10:E2:BE:95:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/bbM33uyT4kBfwLUpz-RY6FKOqD8.roa
Signing time: Thu 15 Oct 2026 06:36:13 +0000
ROA not before: Thu 15 Oct 2026 06:36:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218465
IP address blocks: 2a0e:e001:20::/48 maxlen: 48
2a0e:e001:21::/48 maxlen: 48
2a0e:e001:22::/48 maxlen: 48
2a0e:e001:23::/48 maxlen: 48
2a0e:e001:24::/48 maxlen: 48
2a0e:e001:25::/48 maxlen: 48
2a0e:e001:26::/48 maxlen: 48
2a0e:e001:27::/48 maxlen: 48
2a0e:e001:28::/48 maxlen: 48
2a0e:e001:29::/48 maxlen: 48
2a0e:e001:2a::/48 maxlen: 48
2a0e:e001:2b::/48 maxlen: 48
2a0e:e001:2c::/48 maxlen: 48
2a0e:e001:2d::/48 maxlen: 48
2a0e:e001:2e::/48 maxlen: 48
2a0e:e001:2f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:46:8c:d9:61:9e:87:07:bc:0e:30:83:ef:47:08:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a16102e80735fec8921e9f509fc53b10e2be9505
Validity
Not Before: Oct 15 06:36:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6db337deec93e2405fc0b529cfe458e8528ea83f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:47:94:5a:95:25:ae:2f:37:a1:1c:29:21:b1:
24:9e:aa:cd:eb:12:43:ca:f6:a0:69:25:6e:c9:30:
c7:0a:1f:e1:88:47:53:29:1d:c9:f4:0d:86:20:7e:
6e:d5:ef:41:b0:f0:25:37:d4:fd:d6:14:af:64:0a:
02:02:34:86:fb:13:98:b0:57:34:45:21:c9:d6:78:
64:62:7f:77:22:f1:6f:2e:1e:1f:fb:ac:c4:40:91:
93:c2:8d:53:10:4b:9e:6b:5e:98:9c:a7:ff:d4:0e:
3c:5d:ca:61:71:41:75:7e:7c:5a:18:c2:1a:db:43:
89:82:10:64:ee:f5:20:8f:74:c3:c7:ca:f7:75:98:
d0:84:09:fa:bf:e3:d6:53:91:e7:b1:5c:e6:55:42:
f0:fe:ae:cd:d1:75:cd:e8:82:71:a1:b5:be:ae:31:
a4:a4:ed:b5:3d:13:fc:75:59:33:8f:3f:26:c3:e0:
05:22:14:f9:57:a8:d8:ad:b9:b3:fb:2e:c2:61:9c:
5b:2b:60:53:86:b7:21:be:fa:d7:25:22:8b:75:df:
1b:1c:4b:f6:54:fc:aa:f8:70:05:4d:a3:54:13:ce:
32:20:8b:77:a4:fa:d7:50:97:98:ec:a6:eb:2d:56:
79:29:bf:bb:ef:0e:c8:dd:ef:b9:51:9c:5c:50:ea:
6b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B3:37:DE:EC:93:E2:40:5F:C0:B5:29:CF:E4:58:E8:52:8E:A8:3F
X509v3 Authority Key Identifier:
keyid:A1:61:02:E8:07:35:FE:C8:92:1E:9F:50:9F:C5:3B:10:E2:BE:95:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/bbM33uyT4kBfwLUpz-RY6FKOqD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4ebe8b-eae4-4a40-8a7e-01a2b1592d68/1/oWEC6Ac1_siSHp9Qn8U7EOK-lQU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:e001:20::/44
Signature Algorithm: sha256WithRSAEncryption
74:1a:a0:7a:f9:f6:ea:7b:95:5b:83:7c:2d:e1:f8:60:a0:04:
46:0a:44:8a:96:87:da:08:24:be:4a:ea:e1:00:58:96:94:0e:
67:65:31:73:f4:ea:6b:80:fa:0d:6c:e3:ec:73:64:db:47:9a:
d3:e3:9e:58:08:58:39:5c:44:df:ec:81:b5:ec:55:c0:fd:74:
e3:b7:f2:9e:7e:44:c5:0a:3e:21:2e:7d:ea:ba:9f:16:7d:f6:
ff:2c:31:82:56:00:da:ff:32:26:bf:1c:89:54:61:c6:87:f8:
dc:52:b6:29:65:b2:31:14:87:98:51:43:2d:88:62:13:84:ff:
76:dd:e7:1e:8b:5b:99:7e:d8:1b:f8:cb:77:8d:6f:8a:ea:9d:
55:bb:22:a9:f3:c9:d0:1d:0e:00:2f:aa:8d:93:7e:1c:72:ef:
9e:96:4a:b8:87:7b:53:bd:a6:88:35:3c:16:02:29:fa:95:41:
f8:9a:80:c0:61:ed:10:10:e4:0c:23:d9:1b:2c:d3:77:2e:43:
0b:7c:c5:e7:54:b3:a1:53:f6:fd:82:9f:de:f9:d4:c0:f9:fa:
17:3f:4b:a2:e8:2a:e6:29:2e:d6:2a:6f:dd:87:e5:46:7b:09:
9e:40:ea:10:2f:d5:e0:7b:ef:34:2d:ca:3b:36:96:67:d1:3f:
f8:69:0a:bf
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaE+RozZYZ6HB7wOMIPvRwhpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNjEwMmU4MDczNWZlYzg5MjFlOWY1MDlmYzUzYjEwZTJi
ZTk1MDUwHhcNMjYxMDE1MDYzNjEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZGIzMzdkZWVjOTNlMjQwNWZjMGI1MjljZmU0NThlODUyOGVhODNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEeUWpUlri83oRwpIbEknqrN6xJD
yvagaSVuyTDHCh/hiEdTKR3J9A2GIH5u1e9BsPAlN9T91hSvZAoCAjSG+xOYsFc0
RSHJ1nhkYn93IvFvLh4f+6zEQJGTwo1TEEuea16YnKf/1A48XcphcUF1fnxaGMIa
20OJghBk7vUgj3TDx8r3dZjQhAn6v+PWU5HnsVzmVULw/q7N0XXN6IJxobW+rjGk
pO21PRP8dVkzjz8mw+AFIhT5V6jYrbmz+y7CYZxbK2BThrchvvrXJSKLdd8bHEv2
VPyq+HAFTaNUE84yIIt3pPrXUJeY7KbrLVZ5Kb+77w7I3e+5UZxcUOprawIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFG2zN97sk+JAX8C1Kc/kWOhSjqg/MB8GA1UdIwQY
MBaAFKFhAugHNf7Ikh6fUJ/FOxDivpUFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1dFQzZBYzFfc2lTSHA5UW44VTdFT0stbFFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi80ZWJlOGItZWFlNC00YTQwLThhN2Ut
MDFhMmIxNTkyZDY4LzEvYmJNMzN1eVQ0a0Jmd0xVcHotUlk2RktPcUQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi80ZWJlOGItZWFlNC00YTQwLThhN2UtMDFhMmIxNTkyZDY4
LzEvb1dFQzZBYzFfc2lTSHA5UW44VTdFT0stbFFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg7gAQAg
MA0GCSqGSIb3DQEBCwUAA4IBAQB0GqB6+fbqe5Vbg3wt4fhgoARGCkSKlofaCCS+
SurhAFiWlA5nZTFz9OprgPoNbOPsc2TbR5rT455YCFg5XETf7IG17FXA/XTjt/Ke
fkTFCj4hLn3qup8Wffb/LDGCVgDa/zImvxyJVGHGh/jcUrYpZbIxFIeYUUMtiGIT
hP923ecei1uZftgb+Mt3jW+K6p1VuyKp88nQHQ4AL6qNk34ccu+elkq4h3tTvaaI
NTwWAin6lUH4moDAYe0QEOQMI9kbLNN3LkMLfMXnVLOhU/b9gp/e+dTA+foXP0ui
6CrmKS7WKm/dh+VGewmeQOoQL9Xge+80Lco7NpZn0T/4aQq/
-----END CERTIFICATE-----
Generated at Wed Oct 21 05:22:32 2026 by rpki-client