Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/d844d4-2d3f-4804-9b03-894d273bc8c3/1/_BMj7x7qWwdFnvSX997ZXAAif9I.roa
File: _BMj7x7qWwdFnvSX997ZXAAif9I.roa (raw, json)
Hash identifier: KV8WoLOzmdQkF8zX/EJTBIsaRqlByLQUTl0D5W9VGcw=
Subject key identifier: FC:13:23:EF:1E:EA:5B:07:45:9E:F4:97:F7:DE:D9:5C:00:22:7F:D2
Certificate issuer: /CN=a303e337756d03d5a8416c60534c157ecc5e7b42
Certificate serial: 01A13A14A2BD7C6A46D9424409D95B09B4A6
Authority key identifier: A3:03:E3:37:75:6D:03:D5:A8:41:6C:60:53:4C:15:7E:CC:5E:7B:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/owPjN3VtA9WoQWxgU0wVfsxee0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d844d4-2d3f-4804-9b03-894d273bc8c3/1/_BMj7x7qWwdFnvSX997ZXAAif9I.roa
Signing time: Wed 14 Oct 2026 11:03:13 +0000
ROA not before: Wed 14 Oct 2026 11:03:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198430
IP address blocks: 2a11:1bc1:da00::/40 maxlen: 48
2a11:1bc1:da00::/44 maxlen: 44
2a11:1bc1:da00::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d844d4-2d3f-4804-9b03-894d273bc8c3/1/owPjN3VtA9WoQWxgU0wVfsxee0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/d844d4-2d3f-4804-9b03-894d273bc8c3/1/owPjN3VtA9WoQWxgU0wVfsxee0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/owPjN3VtA9WoQWxgU0wVfsxee0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 05:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:14:a2:bd:7c:6a:46:d9:42:44:09:d9:5b:09:b4:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a303e337756d03d5a8416c60534c157ecc5e7b42
Validity
Not Before: Oct 14 11:03:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc1323ef1eea5b07459ef497f7ded95c00227fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ae:7f:e3:65:c9:7c:4a:b9:b0:ff:22:a1:be:
a3:f8:04:67:30:a8:2e:60:ee:57:58:f4:1c:01:71:
8c:8f:0c:8f:2c:0f:ed:fc:96:fa:86:9e:10:a0:3d:
53:82:62:c5:86:1e:e7:da:ed:ed:0b:e1:26:ee:9f:
a0:5d:43:76:3a:b3:70:3e:91:91:78:25:c5:1a:0c:
12:ab:2d:f0:f6:16:5c:89:fa:01:02:31:e1:51:cb:
f3:f7:fe:31:72:95:93:18:92:49:80:2f:7d:c4:c6:
c6:5e:64:32:83:00:63:03:b6:00:b5:a2:69:da:d7:
97:50:0a:e1:7a:d0:b5:b0:6b:a2:15:78:a3:bc:ac:
e3:f5:da:5d:fd:ca:b9:8a:e1:2b:93:ef:d2:90:ba:
bf:f3:98:b6:3c:56:6a:e9:2d:73:7e:3e:1e:f2:01:
6a:10:89:07:1c:23:39:78:2f:71:07:d3:c6:34:c3:
4e:b8:ae:d0:63:c5:75:f2:7a:e3:74:78:cc:d5:3b:
35:5f:d1:a1:c8:f8:ad:9d:6e:e3:98:89:04:34:fd:
ce:71:9b:51:41:22:39:16:2e:c4:7b:87:13:26:0c:
e3:b7:68:d9:ed:f4:ad:a5:31:38:00:bc:9f:b4:df:
32:08:92:64:d1:81:c3:ea:4a:b3:3b:c7:59:72:4b:
cc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:13:23:EF:1E:EA:5B:07:45:9E:F4:97:F7:DE:D9:5C:00:22:7F:D2
X509v3 Authority Key Identifier:
keyid:A3:03:E3:37:75:6D:03:D5:A8:41:6C:60:53:4C:15:7E:CC:5E:7B:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/owPjN3VtA9WoQWxgU0wVfsxee0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d844d4-2d3f-4804-9b03-894d273bc8c3/1/_BMj7x7qWwdFnvSX997ZXAAif9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d844d4-2d3f-4804-9b03-894d273bc8c3/1/owPjN3VtA9WoQWxgU0wVfsxee0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:1bc1:da00::/40
Signature Algorithm: sha256WithRSAEncryption
a5:f5:95:e3:3b:1b:ac:b4:c4:b2:c2:84:43:f4:6a:cc:c2:a8:
81:0f:76:50:2e:40:98:a7:be:34:b4:0c:0a:9d:18:04:70:88:
cc:0d:b0:ae:d0:60:62:a5:25:35:17:0f:f9:55:e7:39:90:3e:
b7:74:ab:a9:f2:c7:25:c0:aa:1c:bb:d0:24:02:a2:16:1e:f3:
12:c3:3b:d5:2a:d4:cc:26:b2:71:8b:ce:52:0f:9c:b5:ae:40:
32:5a:43:fb:48:70:e5:d6:fa:61:34:7c:39:bd:c3:8c:68:92:
f2:24:27:bf:1b:b5:dd:5c:62:f7:82:76:d1:0e:7b:dd:59:d6:
6d:b2:75:a3:52:cc:53:ea:e0:d4:65:d4:f1:25:89:c4:91:2f:
a0:82:0d:59:8c:51:9f:34:1e:6b:88:3c:60:b8:9b:83:6c:a1:
fc:bb:17:ce:82:12:6f:71:42:db:0a:af:46:1d:71:82:10:fc:
35:3c:2e:4b:e3:2d:8f:15:7f:25:0c:92:5a:03:75:c1:b1:97:
7d:5f:22:80:8d:f8:88:88:6f:be:af:0a:2d:41:d4:98:44:ec:
5a:0e:89:d8:d3:27:e5:3f:8e:06:92:b3:59:4d:ff:2b:f5:95:
e3:5f:25:a4:75:b2:10:22:39:a0:2a:72:9d:50:92:a4:37:53:
d5:ee:06:ba
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAaE6FKK9fGpG2UJECdlbCbSmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMDNlMzM3NzU2ZDAzZDVhODQxNmM2MDUzNGMxNTdlY2M1
ZTdiNDIwHhcNMjYxMDE0MTEwMzEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzEzMjNlZjFlZWE1YjA3NDU5ZWY0OTdmN2RlZDk1YzAwMjI3ZmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA165/42XJfEq5sP8iob6j+ARnMKgu
YO5XWPQcAXGMjwyPLA/t/Jb6hp4QoD1TgmLFhh7n2u3tC+Em7p+gXUN2OrNwPpGR
eCXFGgwSqy3w9hZcifoBAjHhUcvz9/4xcpWTGJJJgC99xMbGXmQygwBjA7YAtaJp
2teXUArhetC1sGuiFXijvKzj9dpd/cq5iuErk+/SkLq/85i2PFZq6S1zfj4e8gFq
EIkHHCM5eC9xB9PGNMNOuK7QY8V18nrjdHjM1Ts1X9GhyPitnW7jmIkENP3OcZtR
QSI5Fi7Ee4cTJgzjt2jZ7fStpTE4ALyftN8yCJJk0YHD6kqzO8dZckvMVwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFPwTI+8e6lsHRZ70l/fe2VwAIn/SMB8GA1UdIwQY
MBaAFKMD4zd1bQPVqEFsYFNMFX7MXntCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3dQak4zVnRBOVdvUVd4Z1Uwd1Zmc3hlZTBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kODQ0ZDQtMmQzZi00ODA0LTliMDMt
ODk0ZDI3M2JjOGMzLzEvX0JNajd4N3FXd2RGbnZTWDk5N1pYQUFpZjlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9kODQ0ZDQtMmQzZi00ODA0LTliMDMtODk0ZDI3M2JjOGMz
LzEvb3dQak4zVnRBOVdvUVd4Z1Uwd1Zmc3hlZTBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhEbwdow
DQYJKoZIhvcNAQELBQADggEBAKX1leM7G6y0xLLChEP0aszCqIEPdlAuQJinvjS0
DAqdGARwiMwNsK7QYGKlJTUXD/lV5zmQPrd0q6nyxyXAqhy70CQCohYe8xLDO9Uq
1MwmsnGLzlIPnLWuQDJaQ/tIcOXW+mE0fDm9w4xokvIkJ78btd1cYveCdtEOe91Z
1m2ydaNSzFPq4NRl1PElicSRL6CCDVmMUZ80HmuIPGC4m4Nsofy7F86CEm9xQtsK
r0YdcYIQ/DU8LkvjLY8VfyUMkloDdcGxl31fIoCN+IiIb76vCi1B1JhE7FoOidjT
J+U/jgaSs1lN/yv1leNfJaR1shAiOaAqcp1QkqQ3U9XuBro=
-----END CERTIFICATE-----
Generated at Fri Oct 30 14:08:09 2026 by rpki-client