Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/bTHa1XSuuLcDoXGskZfmtV928oQ.roa
File: bTHa1XSuuLcDoXGskZfmtV928oQ.roa (raw, json)
Hash identifier: EMQCW3uClsNXfK+SWYFnXtYwv8atrM01fO14EqoLhKw=
Subject key identifier: 6D:31:DA:D5:74:AE:B8:B7:03:A1:71:AC:91:97:E6:B5:5F:76:F2:84
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019EA9157C5026D691C0D633B1D5FABD0484
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/bTHa1XSuuLcDoXGskZfmtV928oQ.roa
Signing time: Mon 08 Jun 2026 21:13:37 +0000
ROA not before: Mon 08 Jun 2026 21:13:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51396
IP address blocks: 2a13:d44::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a9:15:7c:50:26:d6:91:c0:d6:33:b1:d5:fa:bd:04:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 8 21:13:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d31dad574aeb8b703a171ac9197e6b55f76f284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:35:1f:c5:5d:b3:b3:04:2e:6e:82:66:a0:80:
66:72:87:db:55:cf:f9:c3:c0:0e:81:c8:53:b4:ca:
57:fb:13:56:97:c6:ba:5b:4f:a8:bb:82:0b:74:9c:
18:db:6b:c7:b4:81:8c:4b:7e:4b:72:1d:cd:02:20:
0b:42:17:13:c8:4c:8a:d8:c8:19:50:75:79:64:62:
fd:a9:5f:e6:5b:2a:4c:ac:c1:07:11:b8:49:bb:11:
cd:a8:b6:f2:3e:6f:44:5a:b1:fa:d1:a5:9b:6f:36:
31:be:70:df:7c:e7:de:fd:13:b3:8e:25:e9:27:3e:
50:a4:4a:43:7c:26:cb:f7:a9:5c:1e:42:80:88:3d:
0d:01:ce:a6:c0:46:fe:8d:8f:af:e6:93:56:3c:95:
d5:cb:fa:31:07:d9:2d:28:7e:70:25:40:29:f3:60:
0b:65:f4:1d:15:ec:26:01:58:91:23:fd:05:ce:b3:
cc:ce:b7:3c:3d:1d:94:23:07:3c:e4:90:a6:77:67:
b2:6e:12:e4:bc:b5:c4:96:54:b4:7f:b9:65:e2:45:
e4:84:6e:c3:b5:52:b7:bf:eb:13:bc:cb:c9:94:23:
65:c7:32:b0:76:31:98:ef:22:c4:1d:a5:9e:2c:01:
29:95:0f:d7:1c:99:29:a9:6f:fb:c3:44:c7:a9:4f:
e7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:31:DA:D5:74:AE:B8:B7:03:A1:71:AC:91:97:E6:B5:5F:76:F2:84
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/bTHa1XSuuLcDoXGskZfmtV928oQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:d44::/32
Signature Algorithm: sha256WithRSAEncryption
8c:1c:58:20:65:51:54:0a:bc:15:a2:b2:89:fb:93:0c:e4:01:
91:f5:14:52:b7:cf:26:20:d5:a3:73:4c:95:d4:e0:b3:15:92:
4c:19:b8:b8:0c:2a:3b:c0:b7:55:5a:f0:1c:1e:f9:e2:73:e2:
9d:ea:a6:de:97:f6:12:a2:26:ab:b4:2b:54:d5:9b:23:ae:47:
da:92:7c:f4:4a:d3:86:2e:5a:4a:ea:47:e7:d5:73:fc:24:09:
38:25:bd:57:cd:de:40:d1:8a:8c:3e:7c:dd:ec:ea:df:cc:47:
a8:35:23:c7:2d:48:7f:ad:f6:2a:cd:ad:83:f1:9a:24:03:de:
1f:74:e4:7a:92:fb:b5:98:8a:e0:c3:17:8a:9e:67:bb:ef:3c:
13:28:dd:f7:93:c5:38:29:b7:c3:cc:49:36:21:84:b4:08:5a:
a8:a7:71:0a:58:9f:12:12:4f:c8:77:b1:9a:8b:db:2c:d1:3f:
cd:c8:18:e8:13:68:d1:79:73:46:a5:81:53:08:20:40:5a:42:
f3:81:ac:64:84:35:60:21:91:4d:81:e4:73:f0:07:8b:d3:57:
03:a4:90:44:3a:29:78:d1:62:62:3d:4a:87:0a:07:63:f5:9a:
6f:51:b7:84:64:ac:fc:a8:83:0e:73:d6:e2:f3:11:c8:a6:2f:
a9:a1:29:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 13:02:21 2026 by rpki-client