Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/a_a4Bm2vMVbsH9BfYmsaqGtUarI.roa
File: a_a4Bm2vMVbsH9BfYmsaqGtUarI.roa (raw, json)
Hash identifier: YQ7WevldUaPUf2luIJT1enFkQ7Ao715lMC2Xh1aTnXU=
Subject key identifier: 6B:F6:B8:06:6D:AF:31:56:EC:1F:D0:5F:62:6B:1A:A8:6B:54:6A:B2
Certificate issuer: /CN=55df024d85e89953d74c9bee32c9e32796bcfe73
Certificate serial: 019F23691216F7BE9D3E29B461E9731C61C3
Authority key identifier: 55:DF:02:4D:85:E8:99:53:D7:4C:9B:EE:32:C9:E3:27:96:BC:FE:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/a_a4Bm2vMVbsH9BfYmsaqGtUarI.roa
Signing time: Thu 02 Jul 2026 15:18:36 +0000
ROA not before: Thu 02 Jul 2026 15:18:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39227
IP address blocks: 2a00:1f78:fffe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 19:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:12:16:f7:be:9d:3e:29:b4:61:e9:73:1c:61:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55df024d85e89953d74c9bee32c9e32796bcfe73
Validity
Not Before: Jul 2 15:18:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6bf6b8066daf3156ec1fd05f626b1aa86b546ab2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3d:0b:b9:3e:0d:c9:4d:47:a6:06:47:9e:63:
de:2e:8a:cc:99:08:5f:93:09:3a:e1:7e:77:a1:8e:
b5:41:6a:4e:9d:59:6b:1a:6d:da:86:56:1a:19:35:
e1:92:8e:68:33:5b:2a:af:f7:16:3f:31:8d:99:bb:
8c:52:f6:bf:a4:8f:3e:34:f5:10:96:8f:55:03:80:
bd:82:b6:19:44:32:7e:fd:77:39:21:d2:0a:1e:2a:
2c:17:48:d1:7a:98:9c:88:a0:48:ca:5f:20:f8:d0:
6d:af:e8:e2:16:37:dc:f9:f8:c8:bf:22:45:1a:5f:
2e:1a:a5:e5:8e:5c:1b:8c:5a:aa:4e:e6:13:01:8c:
71:75:b8:74:e9:5c:08:2c:bf:1a:46:63:43:da:67:
c0:d9:c4:27:62:78:c0:80:9c:23:4c:a0:57:ed:3b:
fb:b7:67:af:7f:cf:5c:25:ef:99:6d:3b:07:bf:ad:
3e:55:3e:b0:dc:61:98:b0:00:e0:95:6d:dd:8c:d6:
19:6b:34:79:af:f4:44:24:20:96:69:c8:a8:6e:81:
fd:8c:9f:d0:48:1d:e8:7e:3a:86:35:97:37:7f:9d:
6c:00:b8:4b:c1:61:27:87:68:6c:75:e7:39:d1:41:
9d:71:08:97:10:fc:fa:e6:53:88:35:89:99:ad:b5:
60:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F6:B8:06:6D:AF:31:56:EC:1F:D0:5F:62:6B:1A:A8:6B:54:6A:B2
X509v3 Authority Key Identifier:
keyid:55:DF:02:4D:85:E8:99:53:D7:4C:9B:EE:32:C9:E3:27:96:BC:FE:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/a_a4Bm2vMVbsH9BfYmsaqGtUarI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1f78:fffe::/48
Signature Algorithm: sha256WithRSAEncryption
85:8f:34:10:57:19:1d:df:7d:1e:10:43:d5:60:c8:c5:5d:39:
35:18:74:27:f9:19:41:88:37:44:5d:f1:13:e2:e1:95:75:3e:
26:d2:f7:3b:29:13:4f:c6:8c:51:29:b0:95:e3:e6:53:fe:d6:
f8:15:1d:82:7f:75:d1:d9:f5:70:fb:65:5d:9d:79:bf:ac:ec:
41:98:77:fc:34:3b:53:ab:36:b2:8d:95:4f:b1:d3:d4:8b:82:
85:74:14:c5:e5:0e:83:6d:75:26:ad:0e:ff:49:8f:99:52:88:
22:b4:57:e2:fc:22:f0:fd:44:11:ff:9b:55:07:9a:af:fa:54:
2f:b6:5c:87:a3:99:e3:ff:b3:f6:a8:63:e2:12:8c:5e:0e:a6:
85:ad:c7:c7:c6:80:9a:6c:b8:55:5e:d9:41:cd:c0:2e:f5:af:
16:5c:88:c0:82:08:c5:c7:32:d7:fc:4b:40:73:78:16:7f:3f:
49:1b:8d:d2:66:7f:0b:56:c7:ac:18:d1:b3:07:bc:4a:0e:f9:
b2:b5:7c:5b:9d:d8:bb:f7:af:f5:3e:50:ac:aa:fa:5b:16:b5:
34:b1:4d:f5:b8:5a:be:87:a5:df:ef:5b:09:fd:ac:e5:a7:a0:
3c:c5:62:d7:07:27:7e:ae:01:40:7d:e4:81:18:04:69:89:e9:
31:b2:94:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:58:29 2026 by rpki-client