Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/bFqNu0qxdZkx24Fld8g7E83W2fQ.roa
File: bFqNu0qxdZkx24Fld8g7E83W2fQ.roa (raw, json)
Hash identifier: MB8Uz+cjABT94y8aG/gfF1JxVTn1oGALHW9RrVBn5w4=
Subject key identifier: 6C:5A:8D:BB:4A:B1:75:99:31:DB:81:65:77:C8:3B:13:CD:D6:D9:F4
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A091AF6B1C3EE24B4555E06D5113CDA83B
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/bFqNu0qxdZkx24Fld8g7E83W2fQ.roa
Signing time: Fri 11 Sep 2026 18:16:27 +0000
ROA not before: Fri 11 Sep 2026 18:16:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62240
IP address blocks: 2a10:fa81:1c00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:91:af:6b:1c:3e:e2:4b:45:55:e0:6d:51:13:cd:a8:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Sep 11 18:16:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c5a8dbb4ab1759931db816577c83b13cdd6d9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:cd:50:9c:2c:1a:31:35:20:61:a8:43:9a:3f:
4b:fd:be:dd:75:b0:f5:5e:16:5c:00:8f:60:34:c6:
93:d9:f6:38:94:8e:3c:ed:68:ba:cd:d7:ac:67:33:
96:c3:82:36:27:47:62:ee:68:b1:d2:80:63:10:04:
0b:26:a0:3c:4c:47:bf:da:08:e9:d1:0b:76:65:fc:
52:f7:fb:ed:47:11:5d:39:9c:3f:de:a2:12:33:9e:
e3:d2:7d:ca:b3:fe:8f:5d:eb:88:16:b9:8d:be:2c:
5c:62:1d:20:48:cf:75:21:a5:5e:90:54:a4:a5:f4:
e7:50:4d:2f:4b:fe:97:c8:05:2b:a7:e7:d8:3c:3b:
94:00:f0:ad:25:5a:9d:84:a0:76:23:ae:a8:5c:10:
c7:a7:28:c1:90:c0:5c:fc:d8:db:4e:75:e0:93:6c:
41:f0:03:6f:f2:7c:05:fc:f0:9d:f0:17:ee:8a:c8:
81:fb:5d:9c:05:de:9a:af:11:31:bc:f1:90:9e:0d:
63:11:08:1b:45:fa:3b:aa:24:ba:17:95:c6:e0:6b:
ab:91:4d:c9:f5:35:c8:f5:cf:45:d3:3d:36:b8:80:
e1:99:5f:af:21:46:4f:21:d5:0f:52:45:a6:a1:49:
78:ec:18:0b:c0:5a:a5:b7:cd:c1:66:0a:28:67:a2:
5e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5A:8D:BB:4A:B1:75:99:31:DB:81:65:77:C8:3B:13:CD:D6:D9:F4
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/bFqNu0qxdZkx24Fld8g7E83W2fQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa81:1c00::/40
Signature Algorithm: sha256WithRSAEncryption
10:f5:d0:4c:e3:b2:7c:c1:50:31:61:dc:80:da:bc:c8:39:93:
0a:28:f6:ec:92:f7:a6:3a:ba:1d:30:e9:5d:41:7d:d4:27:6c:
59:2b:9c:6f:5f:83:43:1f:1f:19:81:a6:65:ca:86:6b:89:0b:
27:dc:3e:92:fa:31:32:25:4c:3f:79:54:c2:23:71:5d:8c:67:
dd:12:85:98:3d:e9:8d:12:14:4c:99:a7:cb:96:49:4c:c5:d4:
9c:2d:46:53:14:4b:d9:11:86:1f:bf:8a:17:cc:e0:76:a7:5e:
cb:51:7b:32:fd:fa:53:25:2e:0d:ad:12:75:8a:ef:12:46:05:
84:90:56:4c:28:43:43:c6:52:f9:b0:d5:cb:15:e0:e5:c3:f6:
d8:9f:0d:be:8e:8b:4a:89:ce:44:f1:ab:84:25:c6:51:45:7b:
ae:f0:ec:19:d2:f6:d8:e4:02:37:f7:78:c1:b7:95:db:79:3e:
ab:9f:eb:ae:0d:e8:16:77:85:5d:b8:93:fb:fe:79:99:dd:19:
7d:61:b6:5f:c9:cf:83:9c:7d:b4:19:a3:c1:cd:cd:4f:39:2e:
0a:7d:5f:c1:5d:6d:97:e0:31:81:7d:07:df:b6:68:7b:2e:0f:
ec:3c:b5:10:4c:a7:2d:5a:35:eb:77:c6:78:68:fc:7a:9e:b7:
2c:c9:ae:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:45:54 2026 by rpki-client