Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/u2NxmBla1aioDiQy8Ic9wZDHBZA.roa
File: u2NxmBla1aioDiQy8Ic9wZDHBZA.roa (raw, json)
Hash identifier: MeKtJMrZrmn/kEw4YClH6PA2tOekPQ0oTbgnsspj2uk=
Subject key identifier: BB:63:71:98:19:5A:D5:A8:A8:0E:24:32:F0:87:3D:C1:90:C7:05:90
Certificate issuer: /CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Certificate serial: 01A139897996FA358F64DB076E2678296305
Authority key identifier: DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/u2NxmBla1aioDiQy8Ic9wZDHBZA.roa
Signing time: Wed 14 Oct 2026 08:31:13 +0000
ROA not before: Wed 14 Oct 2026 08:31:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212027
IP address blocks: 2a12:7b40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:89:79:96:fa:35:8f:64:db:07:6e:26:78:29:63:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db1d6eba463b7564abfae938b46ed47187de0ec0
Validity
Not Before: Oct 14 08:31:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb637198195ad5a8a80e2432f0873dc190c70590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:eb:7c:16:a2:c9:10:08:7e:64:f0:a3:48:b1:
cb:72:2b:d0:e0:94:f9:cc:31:ef:26:9e:89:e9:c7:
04:6a:0f:59:5f:e8:1e:43:b3:72:f4:8b:37:9e:fb:
8e:df:0b:57:47:b5:76:cb:32:b2:2f:46:ba:13:fa:
d3:35:71:a1:a2:36:51:a9:04:0c:a4:30:75:74:5d:
dd:cf:bf:f4:79:ed:39:61:d8:3c:d9:2a:56:f7:18:
d8:11:a8:8d:fb:79:16:30:70:bf:76:5c:05:ca:0c:
83:ed:ab:9e:9f:a1:65:ba:14:ae:bb:3d:77:3e:e2:
90:6d:31:7a:f4:6c:31:cc:8c:d9:d8:8b:f7:81:57:
92:40:20:21:d8:68:5b:07:f3:ea:45:df:58:e6:2b:
c1:d8:2f:80:02:ad:c6:6a:a5:d6:f1:43:c8:03:96:
0f:f9:7b:2b:f1:12:cb:e1:4a:28:1c:ca:87:fa:71:
6b:0e:a5:a3:04:13:bd:1a:f1:f9:4b:b6:76:fb:12:
bd:4f:d1:24:af:9b:d3:8c:ef:78:30:f2:13:cb:cf:
c8:32:4a:96:04:02:4c:64:fd:f1:5e:5e:d7:85:bd:
85:df:15:f1:69:87:46:bd:11:17:e8:bb:5d:60:25:
4b:d1:2d:88:57:99:41:2a:58:35:57:15:3e:8d:9f:
38:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:63:71:98:19:5A:D5:A8:A8:0E:24:32:F0:87:3D:C1:90:C7:05:90
X509v3 Authority Key Identifier:
keyid:DB:1D:6E:BA:46:3B:75:64:AB:FA:E9:38:B4:6E:D4:71:87:DE:0E:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2x1uukY7dWSr-uk4tG7UcYfeDsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/u2NxmBla1aioDiQy8Ic9wZDHBZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4f6985-b94a-47cc-a300-6f2cf4f03ceb/1/2x1uukY7dWSr-uk4tG7UcYfeDsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:7b40::/48
Signature Algorithm: sha256WithRSAEncryption
26:21:83:bd:07:d6:f1:d0:8e:ea:c4:e9:97:30:cd:5c:6b:f6:
7b:3d:c0:3c:18:18:17:96:ec:1a:1a:18:18:23:0c:34:7e:e3:
59:a9:fc:84:f9:6f:30:ef:a0:06:6f:5c:9d:31:df:42:91:9d:
80:d0:5a:c5:b2:3e:d5:ef:7c:2f:8d:ca:f9:4f:96:63:82:eb:
3d:93:d4:a3:47:63:41:c7:2f:4e:5d:8b:f8:48:dc:54:30:35:
21:be:10:5e:dd:9a:b2:43:e7:89:40:f6:44:4e:0c:1d:b0:73:
fa:d4:ec:35:16:3f:f6:1a:08:e1:f4:75:3e:dd:a4:ff:6e:16:
1b:6f:52:e0:ab:93:06:54:9a:26:87:98:dc:1c:ac:bc:33:06:
71:2c:82:bc:88:c8:b5:33:ff:49:4a:07:d1:04:10:a9:d4:0a:
34:9e:3a:82:7a:6f:1d:1e:76:40:3c:ea:ac:9e:ce:c8:e2:67:
46:c9:b5:83:ee:6a:14:e3:e8:d8:d9:ae:da:93:f1:62:c8:9f:
33:7b:19:37:66:c8:c2:0f:30:ac:54:55:68:60:dd:17:c1:8a:
b4:9a:93:3a:df:3f:50:a1:2e:50:6c:f8:4b:12:e5:cd:f2:6f:
36:26:e1:53:2e:be:7c:cf:f1:12:32:55:f3:4a:b5:0b:a9:cf:
26:63:66:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 06:54:58 2026 by rpki-client