Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/5f_BVK9tte1XmMotymRMb4wCsjs.roa
File: 5f_BVK9tte1XmMotymRMb4wCsjs.roa (raw, json)
Hash identifier: Tw2dvmuMHOZMqDn1xMZa5cy4sHJgjJFUwI0gytum83o=
Subject key identifier: E5:FF:C1:54:AF:6D:B5:ED:57:98:CA:2D:CA:64:4C:6F:8C:02:B2:3B
Certificate issuer: /CN=093e8fed87a5a206c3ddb0b0d9bf1de088676174
Certificate serial: 019F2368A158129D505BF6B4E5842E0A50C6
Authority key identifier: 09:3E:8F:ED:87:A5:A2:06:C3:DD:B0:B0:D9:BF:1D:E0:88:67:61:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CT6P7YelogbD3bCw2b8d4IhnYXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/5f_BVK9tte1XmMotymRMb4wCsjs.roa
Signing time: Thu 02 Jul 2026 15:18:07 +0000
ROA not before: Thu 02 Jul 2026 15:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 2001:67c:fc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/CT6P7YelogbD3bCw2b8d4IhnYXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/CT6P7YelogbD3bCw2b8d4IhnYXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/CT6P7YelogbD3bCw2b8d4IhnYXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a1:58:12:9d:50:5b:f6:b4:e5:84:2e:0a:50:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093e8fed87a5a206c3ddb0b0d9bf1de088676174
Validity
Not Before: Jul 2 15:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5ffc154af6db5ed5798ca2dca644c6f8c02b23b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:49:f9:79:8a:44:44:2c:dd:39:b3:e8:7b:ce:
cf:9f:45:bc:7d:0e:d1:53:7a:9a:0d:0f:43:61:ed:
f0:8d:04:66:5d:4d:91:0a:9e:1f:e7:aa:4a:8d:ca:
9d:da:4d:2f:f1:5a:dc:91:70:63:5e:30:46:d9:39:
0c:09:11:06:12:b6:40:e5:6c:95:26:71:09:3d:12:
a2:07:d5:ad:e2:58:a7:54:36:2f:2c:b3:8d:90:c9:
9d:a2:13:ff:a1:5e:b1:e0:80:67:33:90:eb:49:bc:
cd:49:c2:77:97:1b:dc:4b:a1:98:7a:1f:72:f8:1b:
8e:c8:40:5c:00:c3:f8:a0:14:69:79:a2:62:46:02:
84:23:7a:31:f2:aa:9f:d9:15:16:d9:d7:f7:a3:b2:
0d:b4:70:0c:75:8f:a2:ed:e7:f5:44:99:f5:8e:b4:
10:f2:6a:3c:d6:b3:26:31:02:d1:b9:17:59:2d:36:
01:8a:fb:82:98:fc:1e:b8:c8:bf:3c:e7:98:95:02:
f1:fc:17:4a:c6:d1:df:e3:72:13:8c:de:0e:ae:5c:
b1:9e:70:81:11:6e:80:9f:d1:00:bf:bc:0c:5f:f3:
fd:15:cc:21:63:4f:61:3f:1f:b4:99:02:ba:d4:de:
5c:21:5a:0f:36:62:05:23:0f:19:0e:94:64:a4:59:
7b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FF:C1:54:AF:6D:B5:ED:57:98:CA:2D:CA:64:4C:6F:8C:02:B2:3B
X509v3 Authority Key Identifier:
keyid:09:3E:8F:ED:87:A5:A2:06:C3:DD:B0:B0:D9:BF:1D:E0:88:67:61:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CT6P7YelogbD3bCw2b8d4IhnYXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/5f_BVK9tte1XmMotymRMb4wCsjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/9a0497-cd0d-48dc-86ae-51c99bc8e8d0/1/CT6P7YelogbD3bCw2b8d4IhnYXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:fc0::/48
Signature Algorithm: sha256WithRSAEncryption
3c:a0:cf:7a:59:b6:f9:73:9c:17:9a:31:80:e4:bc:9b:a5:db:
81:ef:60:a3:4b:c2:c1:b3:68:f9:7f:04:75:97:cd:92:07:ca:
1c:1b:b0:b3:a4:d1:7f:59:66:49:be:36:e6:02:33:e8:25:35:
2a:4a:bb:44:05:05:8b:4d:1f:58:97:51:7e:24:98:9f:6d:2b:
e8:8e:dd:2a:52:16:8e:44:34:6f:a3:4c:1f:f1:c4:87:16:65:
c3:2e:5c:3d:bb:4b:fb:32:0d:e9:81:9c:93:2d:bf:7f:d0:4c:
8d:3a:ef:d8:b4:f4:78:8e:30:b0:cc:10:35:af:50:03:a0:80:
f7:cd:10:ae:c9:5c:54:c2:d1:6b:15:91:7e:db:b3:cf:dd:d3:
d1:52:0f:e8:c5:ca:86:2d:b2:76:40:12:85:e7:70:3e:c1:e8:
ef:08:eb:6c:8a:3c:7b:f0:36:c6:6e:b8:ea:a6:e8:49:73:7a:
86:9d:b1:23:34:95:13:94:11:72:b8:6d:cd:8d:b6:32:dc:17:
42:d4:2d:84:53:00:26:67:46:5d:a2:69:1e:4d:f0:67:c0:2c:
b9:a1:91:cf:f5:77:59:a2:ce:08:56:52:81:09:7b:d3:0c:5b:
36:bf:42:e9:0e:2d:91:27:80:44:57:87:19:64:5b:eb:0b:e7:
a6:9b:56:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:15:52 2026 by rpki-client