Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/b1P1OGYaHKiMXS-bbE9VqZib-PA.roa
File: b1P1OGYaHKiMXS-bbE9VqZib-PA.roa (raw, json)
Hash identifier: FL/tGBQwSr+wB1iIM35czMkKJ7669VpRAfM2/wtmDgg=
Subject key identifier: 6F:53:F5:38:66:1A:1C:A8:8C:5D:2F:9B:6C:4F:55:A9:98:9B:F8:F0
Certificate issuer: /CN=92f7d213fa13708e3200184ff1bc391577cc252f
Certificate serial: 01A0D8C5C4676C75E8690A0DCF84D20F0DCA
Authority key identifier: 92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/b1P1OGYaHKiMXS-bbE9VqZib-PA.roa
Signing time: Fri 25 Sep 2026 13:33:54 +0000
ROA not before: Fri 25 Sep 2026 13:33:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 2a12:f180::/32 maxlen: 32
2a12:f181::/32 maxlen: 32
2a12:f182::/32 maxlen: 32
2a12:f183::/32 maxlen: 32
2a12:f184::/32 maxlen: 32
2a12:f185::/32 maxlen: 32
2a12:f186::/32 maxlen: 32
2a12:f187::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:c5:c4:67:6c:75:e8:69:0a:0d:cf:84:d2:0f:0d:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f7d213fa13708e3200184ff1bc391577cc252f
Validity
Not Before: Sep 25 13:33:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f53f538661a1ca88c5d2f9b6c4f55a9989bf8f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ae:1e:a8:ba:e4:11:c5:4d:f1:3b:9e:ac:f5:
65:01:a4:f1:09:24:a9:36:c2:39:10:e2:69:e2:c5:
25:de:22:65:76:bb:fe:d8:0b:94:0d:7a:6c:04:64:
e6:47:fe:d0:f9:a3:cf:59:64:b1:41:94:6a:da:2f:
6f:3c:99:a2:cf:cb:7a:7a:1d:6d:46:42:30:db:7f:
a2:e8:32:e0:b3:fa:38:e8:13:f5:cf:e4:3a:d7:e5:
9b:b3:25:83:3e:d8:5c:75:6d:d2:ea:b3:8b:6a:82:
c6:d8:70:e8:e5:21:1d:bb:c1:41:fb:97:20:a4:de:
4b:01:c9:78:f9:63:cf:85:7a:fa:38:37:c3:a1:c2:
ac:1a:a9:0c:30:a2:e9:35:0f:f8:c5:b4:83:a0:48:
72:1b:b0:48:78:fa:40:d4:85:cf:4a:c4:ff:d1:c8:
1a:be:d4:9c:a9:28:09:92:67:08:3f:63:32:c6:d5:
0a:29:2c:ed:b9:78:f1:30:84:a9:91:f6:69:64:58:
ab:0a:b4:1e:06:ad:62:ac:28:dd:b1:ab:ec:28:ad:
7c:4c:6b:db:73:64:1a:b0:5c:e1:bf:0e:ce:92:92:
12:f0:9b:c6:db:dc:39:55:af:b8:9a:54:c1:70:61:
6a:6d:a8:72:40:cb:db:90:2a:0a:4a:b1:c4:e7:93:
a4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:53:F5:38:66:1A:1C:A8:8C:5D:2F:9B:6C:4F:55:A9:98:9B:F8:F0
X509v3 Authority Key Identifier:
keyid:92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/b1P1OGYaHKiMXS-bbE9VqZib-PA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f180::/29
Signature Algorithm: sha256WithRSAEncryption
19:7a:7f:5f:cb:57:33:4e:b8:b8:2a:7d:a8:d7:bd:6f:6f:9c:
a9:a9:23:2e:7c:eb:46:79:23:a7:5c:ca:9b:1d:d2:e4:a9:40:
a2:6c:c6:6f:e0:00:80:19:79:ac:5f:da:cd:02:ee:d0:9b:be:
00:93:5c:7a:89:e6:03:f4:40:9c:e3:5d:08:fb:93:fe:fd:bc:
f4:f6:5d:83:86:fb:6c:6d:48:50:44:0f:af:f1:e9:05:55:84:
ea:44:0d:ea:41:62:f9:ae:e1:a5:4d:df:99:29:e8:39:b7:9d:
8d:55:c6:e3:b8:40:af:ac:91:c2:c5:f6:ad:86:16:b1:5d:e4:
7b:b3:e5:e0:9b:3a:18:ef:d3:1c:54:ab:4c:8e:a7:d2:0e:3b:
71:97:58:b7:e4:81:fb:58:40:ca:bd:c9:58:7d:a8:19:84:27:
2d:2d:e1:af:41:81:2d:2d:3b:ff:43:25:eb:82:64:f4:b3:cb:
17:b0:9c:5d:c1:1c:02:5e:52:e4:04:e8:02:c3:e9:74:12:17:
2d:3b:93:4a:b8:89:a4:d6:35:65:e3:47:28:a4:bb:6b:51:a7:
8f:26:fb:ea:31:46:2f:65:e4:18:b6:4f:86:f6:96:6f:b0:ef:
6d:4f:81:58:ba:5a:8d:84:27:8c:66:6c:0d:93:19:db:06:c7:
2c:ab:78:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:57:02 2026 by rpki-client