Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/c0e7b4-f369-4b8e-b3c3-1771b83d67e8/1/bSnYLh_sdKv-fT36fgkvzsG8JLk.roa
File: bSnYLh_sdKv-fT36fgkvzsG8JLk.roa (raw, json)
Hash identifier: 20udIgeLD06sWX5dR8ZV0DTU0ygzLALglysJkYPihrU=
Subject key identifier: 6D:29:D8:2E:1F:EC:74:AB:FE:7D:3D:FA:7E:09:2F:CE:C1:BC:24:B9
Certificate issuer: /CN=4540e5229a2c7295d21f3adff3add40995014095
Certificate serial: 019FD8E2DC8E80EB1A21EE1353C6FBA76335
Authority key identifier: 45:40:E5:22:9A:2C:72:95:D2:1F:3A:DF:F3:AD:D4:09:95:01:40:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RUDlIposcpXSHzrf863UCZUBQJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c0e7b4-f369-4b8e-b3c3-1771b83d67e8/1/bSnYLh_sdKv-fT36fgkvzsG8JLk.roa
Signing time: Thu 06 Aug 2026 21:02:54 +0000
ROA not before: Thu 06 Aug 2026 21:02:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208259
IP address blocks: 2a0b:9900::/29 maxlen: 29
2a0b:9900::/36 maxlen: 36
2a0b:9900::/48 maxlen: 48
2a0b:9900:1000::/36 maxlen: 36
2a0b:9900:2000::/36 maxlen: 36
2a0b:9900:3000::/36 maxlen: 36
2a0b:9900:4000::/36 maxlen: 36
2a0b:9900:5000::/36 maxlen: 36
2a0b:9900:6000::/36 maxlen: 36
2a0b:9900:7000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c0e7b4-f369-4b8e-b3c3-1771b83d67e8/1/RUDlIposcpXSHzrf863UCZUBQJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/c0e7b4-f369-4b8e-b3c3-1771b83d67e8/1/RUDlIposcpXSHzrf863UCZUBQJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RUDlIposcpXSHzrf863UCZUBQJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 18:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d8:e2:dc:8e:80:eb:1a:21:ee:13:53:c6:fb:a7:63:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4540e5229a2c7295d21f3adff3add40995014095
Validity
Not Before: Aug 6 21:02:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d29d82e1fec74abfe7d3dfa7e092fcec1bc24b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fe:f3:56:36:e6:d4:d1:a8:88:81:5e:b8:bc:
23:01:84:5f:a6:10:1b:25:2f:e5:a4:7d:aa:76:91:
57:2a:5a:1a:aa:a0:a8:cc:1d:29:6b:dc:97:ed:18:
83:ad:ed:35:69:fd:af:c3:04:83:58:06:26:59:8a:
69:30:82:8d:47:e1:ba:a2:7d:eb:4a:9e:25:74:71:
12:13:f6:8e:82:c8:ba:a7:18:44:a4:bd:40:d6:8e:
01:20:43:7d:82:86:ee:55:b4:3b:29:28:2a:f5:27:
72:e7:90:ae:6f:5a:56:f9:ee:52:ab:7c:b2:0e:cd:
13:7e:d5:e6:27:1d:ec:81:e6:ff:1f:f5:a4:ab:b1:
ae:18:9d:31:34:49:4a:86:0b:6f:16:5b:19:f4:d3:
bc:d3:34:00:82:16:59:3a:cd:4d:ac:d6:b9:2d:bd:
7f:05:e2:84:a6:34:ad:c2:3a:eb:58:3e:96:32:a1:
76:cd:57:1d:af:f8:00:8c:09:71:49:2c:20:88:08:
ac:99:3f:86:22:e1:c4:12:bd:93:7e:fe:a4:1e:d6:
ea:3f:eb:5d:d4:70:fd:76:4f:df:30:00:26:a1:2f:
5a:b9:ea:18:a8:09:6d:5d:cb:ea:ba:10:10:de:33:
1e:65:16:dc:13:2b:64:98:fb:2e:ec:0b:5e:12:d4:
8b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:29:D8:2E:1F:EC:74:AB:FE:7D:3D:FA:7E:09:2F:CE:C1:BC:24:B9
X509v3 Authority Key Identifier:
keyid:45:40:E5:22:9A:2C:72:95:D2:1F:3A:DF:F3:AD:D4:09:95:01:40:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUDlIposcpXSHzrf863UCZUBQJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c0e7b4-f369-4b8e-b3c3-1771b83d67e8/1/bSnYLh_sdKv-fT36fgkvzsG8JLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c0e7b4-f369-4b8e-b3c3-1771b83d67e8/1/RUDlIposcpXSHzrf863UCZUBQJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:9900::/29
Signature Algorithm: sha256WithRSAEncryption
5b:df:c2:80:42:af:49:1b:74:df:63:cc:2b:74:d3:bb:9c:f5:
6a:f1:64:aa:f7:62:be:02:5b:d9:5a:7a:4e:73:00:59:5e:20:
22:b1:2a:0a:4f:f0:84:cc:c8:0f:e7:03:d4:a8:4c:06:5f:8e:
3a:68:11:c7:4a:8c:57:e5:b5:94:51:b3:11:ff:f9:69:7d:e3:
74:37:e7:fd:d5:48:d8:ad:31:93:83:3c:8f:df:41:e5:35:2c:
88:7d:f6:41:15:60:90:93:bb:fb:c8:7e:7f:46:74:fb:5e:4e:
65:8e:fd:9f:d1:6d:ab:d9:56:13:a0:f2:8b:8d:53:74:a4:10:
23:74:28:9a:1e:65:27:a0:cc:61:af:c6:21:cc:e2:ca:ae:32:
1f:ad:03:44:05:18:f1:fc:f1:ce:1b:f2:34:76:79:03:83:5e:
73:e0:4b:a1:b3:36:f5:e9:c0:97:fa:a1:a1:b7:5c:a4:e4:b5:
3d:86:36:fd:80:98:2a:9c:ba:7d:18:db:19:bf:93:a3:8e:c1:
8e:c4:47:4f:dd:99:ad:b8:4f:ba:9e:a6:39:c2:ee:e8:64:15:
17:50:46:9a:cd:27:ef:13:fb:15:9a:4c:fc:f5:d9:81:3c:d3:
43:a2:0f:33:dd:d8:68:b0:36:4c:ec:6d:a5:2e:12:b6:c4:34:
1b:c7:0c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:55 2026 by rpki-client