Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/BYNvzVt0kzrkEcb3hlI2jsEjycQ.roa
File: BYNvzVt0kzrkEcb3hlI2jsEjycQ.roa (raw, json)
Hash identifier: upQ7C64jeGXCeCqLWJf0H1lJjW+zSJQItrtW0J7Whaw=
Subject key identifier: 05:83:6F:CD:5B:74:93:3A:E4:11:C6:F7:86:52:36:8E:C1:23:C9:C4
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A0E3C06F3F3629260ED1B581E19B51D42F
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/BYNvzVt0kzrkEcb3hlI2jsEjycQ.roa
Signing time: Sun 27 Sep 2026 16:43:54 +0000
ROA not before: Sun 27 Sep 2026 16:43:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206361
IP address blocks: 2a10:fa81:2200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 16:43:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:c0:6f:3f:36:29:26:0e:d1:b5:81:e1:9b:51:d4:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Sep 27 16:43:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05836fcd5b74933ae411c6f78652368ec123c9c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:85:90:b4:39:43:d0:47:31:89:83:b6:c7:ab:
18:20:df:f5:51:19:3c:75:61:1a:40:39:95:d2:12:
0c:6c:84:37:9e:bb:6d:cd:d1:4a:3c:77:e0:34:9e:
8c:d4:6b:c8:d4:32:e8:6e:d7:65:df:bf:76:a5:e0:
15:dd:e3:fd:6a:b9:61:60:9a:20:0f:b5:f0:45:50:
db:40:d3:06:77:36:02:41:87:28:f6:18:86:14:4a:
97:5d:66:6b:73:dc:65:25:71:f2:ad:0f:66:99:a5:
d5:87:9e:0c:59:10:19:ff:71:93:4c:ed:b8:33:79:
01:bd:eb:b9:4f:d3:91:82:ea:95:da:13:61:94:f6:
81:bc:dc:03:c3:65:54:5f:b9:b0:f1:0a:60:12:a4:
18:c8:e9:27:b7:16:db:f1:32:8f:54:7c:88:0f:e6:
36:d9:bd:f5:50:c6:ab:ec:cd:da:45:da:0b:44:dd:
1c:e6:f9:b4:45:8c:3b:d1:78:f7:62:4f:66:88:dd:
5a:59:96:1c:fe:9b:91:1f:09:65:ea:c4:b0:7b:58:
40:95:a0:ef:ac:56:73:cf:96:5b:65:af:9a:a6:cd:
c5:e8:91:2d:33:49:56:ac:07:ad:90:fd:cc:cd:29:
23:9e:51:15:70:61:78:92:4b:98:7e:ea:54:23:d4:
b7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:83:6F:CD:5B:74:93:3A:E4:11:C6:F7:86:52:36:8E:C1:23:C9:C4
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/BYNvzVt0kzrkEcb3hlI2jsEjycQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa81:2200::/40
Signature Algorithm: sha256WithRSAEncryption
27:0f:91:c8:6a:cf:7f:9a:1e:b9:1a:b8:82:32:3f:e7:b2:92:
34:90:7d:24:d0:fb:6c:d8:36:97:fe:e7:34:60:c8:d2:f8:66:
d0:20:3c:2e:37:8f:3c:2b:3a:a4:f7:5b:43:05:ae:45:1b:6c:
0c:4a:7f:59:0d:af:c9:4f:e7:74:94:30:10:39:c1:4c:24:33:
14:87:fa:1c:85:67:b2:02:14:c7:fb:b7:35:b6:78:7d:e0:e1:
4a:f6:65:c3:a1:c2:74:5c:67:d6:38:c4:18:ec:ab:2d:80:eb:
0b:77:b1:ca:4d:26:b5:d4:34:92:69:33:16:c3:80:c8:28:bb:
07:d7:af:a9:93:ba:02:15:91:43:33:da:6a:61:87:a4:6b:d6:
50:15:4f:a0:01:33:83:d2:ef:94:2f:20:c1:8e:08:f9:cb:e8:
c9:61:91:5a:02:ec:a1:ff:c8:d0:7f:06:34:d6:52:99:26:c2:
86:7b:ec:1e:b2:62:c6:c1:f5:ae:25:6c:25:5d:67:1c:97:3b:
53:3b:1e:96:47:13:f9:1f:db:07:03:04:02:88:73:1a:0b:c3:
0c:18:ca:ba:9f:74:e2:e3:3f:d0:f9:d1:f0:8f:20:2b:49:26:
68:82:da:2d:2e:1c:4f:e1:3e:72:f8:37:d3:ff:3a:55:84:bc:
2b:22:72:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:49:03 2026 by rpki-client