Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/BsMlSLa8jJzkArs_X_Ftv5KG2bQ.roa
File: BsMlSLa8jJzkArs_X_Ftv5KG2bQ.roa (raw, json)
Hash identifier: SGV19+dt097eqLExQqVhQctrIcnJxBZxp2rdoFqTLM0=
Subject key identifier: 06:C3:25:48:B6:BC:8C:9C:E4:02:BB:3F:5F:F1:6D:BF:92:86:D9:B4
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019ED99C70CB5FE4D9ECD3C42367831F5DAC
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/BsMlSLa8jJzkArs_X_Ftv5KG2bQ.roa
Signing time: Thu 18 Jun 2026 07:22:48 +0000
ROA not before: Thu 18 Jun 2026 07:22:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 269832
IP address blocks: 2a0c:7886:e4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d9:9c:70:cb:5f:e4:d9:ec:d3:c4:23:67:83:1f:5d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 18 07:22:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06c32548b6bc8c9ce402bb3f5ff16dbf9286d9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:de:5c:c7:86:d8:e8:3f:b8:34:90:89:2e:ce:
f2:fa:8e:f5:a5:7a:4b:a2:56:88:81:f0:65:98:bc:
b2:e4:ce:ed:4d:6b:77:b9:39:ad:77:1a:a1:e3:30:
81:7b:58:c7:ce:3a:19:ac:8c:67:5a:18:48:99:52:
e4:5c:d2:11:0b:bc:52:a1:f6:8a:33:9a:09:68:ac:
59:13:12:fc:3f:84:96:12:30:e5:e4:b0:dc:47:b3:
94:df:d6:1a:73:35:13:10:98:c7:f4:70:79:26:e3:
cf:32:eb:eb:c8:64:32:7f:fa:f5:f7:7f:49:28:1f:
85:b8:b7:f3:56:83:38:82:85:0a:7c:a8:1f:21:f8:
19:d6:81:8f:ff:11:ca:35:db:b2:c6:a3:56:ee:e9:
65:0e:cd:84:72:17:79:93:ed:c3:71:b2:a8:ef:e5:
3b:8e:17:9d:fc:c2:00:53:dc:f7:1a:a1:b0:3d:6e:
e0:e8:71:9a:a2:02:e1:5c:41:15:82:e0:97:06:0a:
ba:eb:3b:38:1a:aa:6f:c1:59:c8:56:2c:10:00:e5:
26:0f:3c:0c:96:b5:af:42:c1:9f:5e:7c:85:84:d7:
f4:38:99:cc:03:74:09:3e:52:c3:97:db:5e:96:a1:
33:2a:0b:4f:a3:70:e6:aa:7d:1e:d2:1e:3b:c8:0b:
a4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C3:25:48:B6:BC:8C:9C:E4:02:BB:3F:5F:F1:6D:BF:92:86:D9:B4
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/BsMlSLa8jJzkArs_X_Ftv5KG2bQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:7886:e4::/48
Signature Algorithm: sha256WithRSAEncryption
41:a1:8d:94:62:87:28:34:d5:c5:70:38:2c:c5:96:38:ad:06:
02:24:dd:0a:7a:38:c7:60:77:90:dc:d8:86:af:3a:be:1c:0b:
79:5c:b4:c4:bc:73:b0:fc:70:3c:35:93:21:41:3a:a6:e8:a9:
3f:ea:d0:d0:7b:ae:7c:3e:5c:87:6e:c8:50:68:6d:10:cc:14:
56:5c:3f:9f:8d:9d:35:38:2c:17:f7:74:ba:fd:3d:93:f1:a2:
8e:f4:13:0b:3e:04:52:6a:fd:2e:8d:dd:63:10:82:0b:e5:39:
98:85:7e:91:97:88:d9:c6:62:1e:a1:06:5c:f5:7b:20:e9:2f:
35:c0:b7:2c:8c:09:b0:7f:73:fe:c2:14:1e:5d:e8:22:2c:0c:
f9:94:b4:09:81:45:df:04:a6:05:ce:05:a3:a3:de:f2:b2:86:
c5:1d:d3:90:e8:28:3e:8f:2e:c6:48:1d:0b:c0:42:f1:8e:f7:
31:61:e4:01:cc:aa:5e:0e:d0:a1:5a:2a:0a:b2:18:95:ae:c6:
03:2d:d9:08:a1:0b:72:26:bd:25:b1:72:65:d3:90:0f:51:e6:
75:c4:26:9a:9d:39:b1:60:e9:d3:29:3c:93:92:77:1c:2e:6c:
89:45:81:7e:72:e4:5d:1e:0a:99:f3:14:e6:e8:47:1f:0c:be:
41:c0:27:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 15:52:18 2026 by rpki-client