Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/bCPuQnidtKhLUBFCbnlwJtNtyXE.roa
File: bCPuQnidtKhLUBFCbnlwJtNtyXE.roa (raw, json)
Hash identifier: 3qWgrnYDux5Q5wFlEUAuuHH20MAw5zNUDlsV8Dn8JrM=
Subject key identifier: 6C:23:EE:42:78:9D:B4:A8:4B:50:11:42:6E:79:70:26:D3:6D:C9:71
Certificate issuer: /CN=66d3f1f63c1009c42a68919863a9b8ba85786730
Certificate serial: 019FADE7733ABF20AA8F359936F9AB15A437
Authority key identifier: 66:D3:F1:F6:3C:10:09:C4:2A:68:91:98:63:A9:B8:BA:85:78:67:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/bCPuQnidtKhLUBFCbnlwJtNtyXE.roa
Signing time: Wed 29 Jul 2026 12:44:14 +0000
ROA not before: Wed 29 Jul 2026 12:44:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36231
IP address blocks: 2a03:e680::/48 maxlen: 48
2a03:e680:1::/48 maxlen: 48
2a03:e680:3::/48 maxlen: 48
2a03:e680:4::/48 maxlen: 48
2a03:e680:5::/48 maxlen: 48
2a03:e680:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:e7:73:3a:bf:20:aa:8f:35:99:36:f9:ab:15:a4:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d3f1f63c1009c42a68919863a9b8ba85786730
Validity
Not Before: Jul 29 12:44:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c23ee42789db4a84b5011426e797026d36dc971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cb:d3:e6:38:42:1e:40:06:a3:82:34:06:62:
57:bc:be:3a:0c:ca:be:57:da:16:0b:f0:61:fa:34:
21:c5:08:28:2e:b2:38:2c:51:d3:eb:a7:57:fb:9b:
91:88:e6:92:c5:49:42:bf:0a:02:bd:f5:43:88:40:
64:ae:e4:07:b9:3b:50:0d:68:ea:67:cc:8f:84:c1:
14:2d:c4:51:86:40:a9:a3:42:07:b1:61:1f:a3:f5:
84:96:5a:2b:b7:38:a2:71:59:1d:3e:da:e6:fa:fb:
23:a3:9d:08:69:a0:97:58:b2:aa:6e:ab:81:64:5a:
6c:cd:f7:62:b8:f2:de:c6:6c:e0:f1:be:fc:ec:56:
05:4f:73:58:7e:1d:db:d6:71:53:57:25:65:d9:42:
5e:2c:7d:3a:e8:9b:a9:a0:0c:2d:b6:93:11:c4:50:
23:48:db:85:43:ed:44:27:2d:b1:bc:aa:c9:1f:fe:
c3:36:80:7f:dd:3a:36:68:84:5a:c8:77:1f:1b:4e:
bd:47:2b:5a:d5:8c:62:d3:54:6c:66:50:03:80:2e:
f4:f1:5c:64:a0:0a:78:2c:45:75:e7:6f:c1:5e:d6:
2f:5b:af:aa:eb:ff:61:2d:a0:98:51:17:f0:6b:15:
a1:56:12:63:58:25:32:0d:3e:e8:2f:14:a5:6e:d6:
d0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:23:EE:42:78:9D:B4:A8:4B:50:11:42:6E:79:70:26:D3:6D:C9:71
X509v3 Authority Key Identifier:
keyid:66:D3:F1:F6:3C:10:09:C4:2A:68:91:98:63:A9:B8:BA:85:78:67:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/bCPuQnidtKhLUBFCbnlwJtNtyXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6d157e-267f-43a4-ae0a-5a2e9d6695fc/1/ZtPx9jwQCcQqaJGYY6m4uoV4ZzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:e680::/47
2a03:e680:3::-2a03:e680:6:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
2b:d4:a4:92:73:50:6e:a3:d2:8f:29:55:cc:c2:46:ab:75:66:
4b:1a:5d:ff:68:9b:f5:f1:0d:02:ef:a4:e6:da:50:d0:cc:66:
00:52:83:9d:e1:56:ab:5d:3b:51:21:54:bd:32:aa:19:bb:19:
46:4a:af:7d:2f:76:19:ec:f6:09:18:42:c7:2b:2b:d3:2c:2d:
42:16:55:c0:c5:48:fc:20:05:a1:3c:21:d7:90:7e:3d:d0:6c:
6c:9b:8a:7c:bf:00:ea:79:14:99:33:08:35:e9:a2:4e:ca:09:
2a:21:92:db:5c:3a:31:3b:e7:f0:4a:ee:75:f3:85:5b:ef:d0:
ec:96:b4:59:24:50:22:7d:88:94:a1:b8:21:f7:fd:3d:6d:2c:
ee:64:a6:c5:59:c6:40:9b:38:69:08:a8:8e:b3:5a:0f:ab:21:
82:4a:57:01:32:a1:e2:33:20:db:c3:bd:ba:88:28:92:c3:c0:
98:05:8a:f9:80:55:da:d6:7c:04:72:fd:44:cb:42:62:97:2b:
2c:db:5c:5d:9e:bf:2f:41:dc:ce:74:a1:dc:20:74:8f:37:2a:
ec:e5:81:fc:1f:a2:74:76:a6:c2:40:3f:29:18:bd:75:e0:ee:
35:f8:d3:8a:97:80:1a:10:5e:19:43:80:f3:30:fb:fb:91:c7:
81:6d:69:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 17:31:38 2026 by rpki-client