Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/bBE_lk3N6KS_zZoKS2wxF-vk23U.roa
File: bBE_lk3N6KS_zZoKS2wxF-vk23U.roa (raw, json)
Hash identifier: ehTdcQEnQLxX102cc7+OSyJZuGfqAICJZm2W6zJrmvg=
Subject key identifier: 6C:11:3F:96:4D:CD:E8:A4:BF:CD:9A:0A:4B:6C:31:17:EB:E4:DB:75
Certificate issuer: /CN=33b65a8baeba4ff621492ebee6fc1e88adb21b03
Certificate serial: 01A155A0B92F041A243BA214B84092F76857
Authority key identifier: 33:B6:5A:8B:AE:BA:4F:F6:21:49:2E:BE:E6:FC:1E:88:AD:B2:1B:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/bBE_lk3N6KS_zZoKS2wxF-vk23U.roa
Signing time: Mon 19 Oct 2026 19:25:58 +0000
ROA not before: Mon 19 Oct 2026 19:25:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208111
IP address blocks: 2a14:9d01::/32 maxlen: 32
2a14:9d02::/32 maxlen: 32
2a14:9d03::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:55:a0:b9:2f:04:1a:24:3b:a2:14:b8:40:92:f7:68:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b65a8baeba4ff621492ebee6fc1e88adb21b03
Validity
Not Before: Oct 19 19:25:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c113f964dcde8a4bfcd9a0a4b6c3117ebe4db75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f5:8b:c2:8a:ce:9b:92:70:ee:81:5e:33:a5:
9b:1a:c5:83:a8:63:03:47:ee:9b:6c:c4:53:bf:e3:
7f:76:a1:41:59:03:f3:bf:6f:ee:60:4f:5e:8e:e9:
ec:d5:71:8a:e8:e1:35:6e:85:8e:a1:3b:86:9b:87:
b5:b4:01:ee:1e:23:02:a4:e1:ac:be:ec:9d:10:99:
f3:e8:2d:3c:db:16:9b:4f:57:21:63:aa:47:37:11:
30:62:31:ca:d0:bd:15:87:f4:e7:bb:ac:6f:13:56:
d5:37:0b:4f:42:fb:7a:a8:2e:44:78:1e:1e:0f:f5:
d9:a4:fa:34:0b:db:f5:c1:34:02:25:2b:7a:c5:5e:
e0:50:3e:fa:94:18:3c:d2:46:60:c8:42:3f:80:d3:
46:bc:93:ce:c3:03:f3:c2:1c:9d:3b:c6:01:ee:5f:
26:eb:8a:5f:f6:21:e3:2e:15:d2:e6:6e:4a:a6:b6:
4d:4e:c8:6c:a9:be:c0:1d:ae:08:6c:b4:c0:80:69:
df:21:27:96:1a:1a:3a:90:9a:26:8e:a1:4b:83:65:
06:1f:d0:96:1c:27:c1:9b:b3:e9:6b:ed:95:d1:ff:
1a:af:ca:fa:71:ae:db:36:54:5e:e0:d7:0f:62:ad:
22:c7:de:77:57:3b:92:74:24:45:9e:d9:6a:4d:0a:
6c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:11:3F:96:4D:CD:E8:A4:BF:CD:9A:0A:4B:6C:31:17:EB:E4:DB:75
X509v3 Authority Key Identifier:
keyid:33:B6:5A:8B:AE:BA:4F:F6:21:49:2E:BE:E6:FC:1E:88:AD:B2:1B:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7Zai666T_YhSS6-5vweiK2yGwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/bBE_lk3N6KS_zZoKS2wxF-vk23U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/aabc6c-0456-4935-a469-d547185512de/1/M7Zai666T_YhSS6-5vweiK2yGwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:9d01::-2a14:9d03:ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
13:ff:b3:0c:f7:0e:2f:cd:be:96:1b:42:b4:c3:6e:cd:f4:d3:
3b:23:f4:89:ff:5d:d5:9e:4b:6e:f4:36:d8:ef:37:f0:ce:66:
fc:d4:2d:f5:8b:da:5d:c6:6a:a9:16:cc:cd:d2:0e:2e:1f:7b:
b9:87:42:50:26:8f:13:cf:93:af:87:eb:5f:38:c0:f1:9d:1c:
7d:e3:75:ed:79:84:33:c4:bc:22:12:f7:1f:fc:01:4c:e2:7c:
d4:fe:b6:be:88:e8:f7:d0:a3:5b:2d:81:a8:39:93:d5:9e:fc:
e3:94:6e:0d:75:b6:7b:ea:ec:57:22:6f:a1:9e:7e:05:49:d3:
6c:29:95:e1:56:02:57:db:d0:5a:ae:62:49:4f:2d:09:f8:c4:
15:41:50:10:48:ee:39:48:5d:95:97:bd:7c:92:86:9b:d8:47:
9c:2b:cc:82:53:3c:2e:77:c1:4d:d7:4d:25:ea:a6:a4:bb:7b:
cf:d7:56:cf:b2:c5:d8:60:57:38:fc:6f:1f:41:52:36:3c:33:
5d:54:75:32:72:22:63:04:cb:d6:3e:81:75:1b:8d:18:8c:ea:
f6:62:3a:7c:c8:ea:b1:0f:08:d6:97:36:ca:c3:15:cc:99:e9:
d7:64:47:00:a7:5b:58:9f:67:ea:08:11:dd:e5:98:f1:da:c0:
64:58:61:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 05:28:55 2026 by rpki-client