Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/BihTx85T_ESHb2zFBIoBZsH3gQg.roa
File: BihTx85T_ESHb2zFBIoBZsH3gQg.roa (raw, json)
Hash identifier: /c4yJ2wjcspqKTfyrW9dw2FpqsUdzBSrrjQh7X8q2sc=
Subject key identifier: 06:28:53:C7:CE:53:FC:44:87:6F:6C:C5:04:8A:01:66:C1:F7:81:08
Certificate issuer: /CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
Certificate serial: 019F3D294E7724A6FEB5DC9E490BDBB66FC5
Authority key identifier: 6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/BihTx85T_ESHb2zFBIoBZsH3gQg.roa
Signing time: Tue 07 Jul 2026 15:19:04 +0000
ROA not before: Tue 07 Jul 2026 15:19:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207223
IP address blocks: 2a0a:e000::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 18:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3d:29:4e:77:24:a6:fe:b5:dc:9e:49:0b:db:b6:6f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
Validity
Not Before: Jul 7 15:19:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=062853c7ce53fc44876f6cc5048a0166c1f78108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:17:cd:02:89:4f:e4:95:47:ab:93:99:b3:6f:
25:4b:3f:e9:2c:8f:09:75:35:dc:41:7b:94:84:a9:
ba:ac:08:95:80:eb:e5:98:a7:9c:7f:d5:d6:8a:72:
dd:49:6d:f8:cd:f1:9f:68:cc:19:cf:63:10:ca:1c:
b9:58:38:06:2b:bc:8a:92:b6:b0:8d:73:78:ec:4e:
6f:1c:e3:c6:ce:df:6b:aa:4b:5f:f6:db:ac:c7:1e:
e2:2c:7c:8a:d5:a6:5b:7c:bb:11:f5:cc:c0:45:39:
c6:af:af:1a:1e:90:f0:64:31:2b:d6:3c:03:d1:77:
43:41:11:a8:6e:36:7f:32:2d:25:c7:ea:7f:27:1f:
b3:99:60:37:7c:cc:f1:d4:b4:08:f9:a1:99:c0:75:
cb:51:c5:0c:10:e5:cb:52:7e:4f:37:b3:bd:9f:42:
e2:99:b5:47:42:a5:ce:03:5d:1d:39:10:5a:df:a4:
6c:00:82:d4:36:1b:f5:a3:48:e4:5d:58:f4:1f:ca:
92:c2:9c:ed:11:54:3d:14:7f:11:a7:5f:5a:71:c2:
88:31:c6:36:d7:86:7e:d1:f8:1f:fb:56:91:1e:05:
ec:99:34:85:7d:78:44:fc:ac:07:ff:b7:b8:34:53:
c1:a5:49:9a:70:da:b2:84:ed:16:5f:68:85:f5:97:
0f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:28:53:C7:CE:53:FC:44:87:6F:6C:C5:04:8A:01:66:C1:F7:81:08
X509v3 Authority Key Identifier:
keyid:6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/BihTx85T_ESHb2zFBIoBZsH3gQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:e000::/29
Signature Algorithm: sha256WithRSAEncryption
8d:d1:a0:cb:da:74:f2:14:c1:26:9d:c8:02:6a:60:72:4f:f0:
e4:3d:0d:1d:58:88:77:59:42:53:77:98:48:a7:bb:83:5f:be:
49:ec:66:bb:6c:60:ca:55:ad:b0:ef:23:fb:4d:5c:ee:ac:11:
84:58:a2:f0:92:11:92:1c:0c:b7:09:8e:e4:49:47:b8:45:55:
b0:b2:6a:7d:82:c2:b8:c3:a5:d5:5e:b0:d9:61:d9:73:30:d7:
71:3c:de:72:09:d7:db:3c:2d:61:0d:a5:95:22:80:96:be:51:
3c:55:c6:16:a5:52:5e:b1:ea:c6:d3:08:1c:68:33:52:1d:41:
16:f6:5e:fe:30:4c:ad:cc:39:ef:74:7f:bc:54:30:50:59:bb:
1a:58:79:1a:69:cf:dc:34:83:74:fb:1f:11:a4:29:bf:ad:e2:
e2:14:7a:72:0b:cc:f0:22:5f:54:a2:72:9f:3d:82:94:cb:09:
86:a4:f4:4d:c3:52:d1:65:fd:78:4b:00:2e:15:ae:08:d1:4e:
ab:79:70:3e:19:b6:a5:7b:4a:48:dc:4a:d0:7f:07:82:67:87:
00:0f:3c:42:43:4c:c1:88:73:2e:49:87:7a:ac:65:6b:b8:d7:
7f:07:8a:de:8f:5d:78:71:30:a7:97:29:44:2e:98:72:25:22:
c8:51:c3:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:57:59 2026 by rpki-client