Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/BiOSYll0I0040HgbuLDcv1RmruY.roa
File: BiOSYll0I0040HgbuLDcv1RmruY.roa (raw, json)
Hash identifier: cm0evPnHbL8dX6iKaOjBAdtZTRXpWeLS+x3y3enh2IY=
Subject key identifier: 06:23:92:62:59:74:23:4D:38:D0:78:1B:B8:B0:DC:BF:54:66:AE:E6
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 01A085CE0949B7487FC94264FA72C7515CFA
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/BiOSYll0I0040HgbuLDcv1RmruY.roa
Signing time: Wed 09 Sep 2026 10:54:27 +0000
ROA not before: Wed 09 Sep 2026 10:54:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213861
IP address blocks: 2a12:a340::/32 maxlen: 32
2a13:9346::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:85:ce:09:49:b7:48:7f:c9:42:64:fa:72:c7:51:5c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Sep 9 10:54:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=062392625974234d38d0781bb8b0dcbf5466aee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:be:3f:40:44:fe:03:b1:90:dc:67:45:97:02:
3c:ce:db:fd:56:87:1e:f8:b4:dc:74:e6:7f:89:c2:
43:92:ad:6e:d8:88:76:5a:4c:ae:f0:4a:f3:13:26:
cc:93:07:b6:a2:53:3c:9e:bf:ee:b4:48:31:05:34:
05:1b:83:84:50:16:c8:0f:77:c0:31:33:3c:b9:3d:
c8:99:5d:05:57:b2:69:5f:bc:d7:07:86:8f:91:d5:
7f:b3:86:c7:ef:12:a4:6a:fe:9b:4f:99:6f:43:fd:
3a:cb:b2:7e:5b:1a:56:29:67:87:f4:8f:13:1a:05:
69:0e:c2:60:9b:e1:56:dd:fa:00:a4:50:c7:74:91:
f6:67:bc:4a:36:3f:50:ec:14:cd:36:48:4f:ee:72:
de:c7:1c:12:a6:4c:e9:14:2d:2a:c9:e6:e3:48:20:
13:86:b7:fd:5f:bc:38:f1:09:49:20:29:db:7f:33:
da:00:60:23:e2:ea:3c:bf:a3:3f:6e:f7:2d:4f:d5:
63:a3:e8:55:9d:ad:ea:27:d3:6d:d0:e6:b8:2e:b8:
95:c9:b2:d7:65:7f:8c:07:1b:a7:58:3f:45:b6:d6:
62:bf:2b:4c:93:33:9e:4d:af:1b:4b:5a:2e:ca:7e:
e7:31:ef:45:a5:80:c1:fc:fc:55:31:b7:92:2e:b5:
4b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:23:92:62:59:74:23:4D:38:D0:78:1B:B8:B0:DC:BF:54:66:AE:E6
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/BiOSYll0I0040HgbuLDcv1RmruY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:a340::/32
2a13:9346::/32
Signature Algorithm: sha256WithRSAEncryption
a2:6c:56:e5:25:66:29:ae:74:aa:76:81:68:bb:f1:54:87:a3:
3f:1a:33:a3:ac:c4:24:29:58:30:ef:0b:ba:a4:8f:2e:a8:99:
12:27:01:ba:46:c2:23:a5:1a:8c:07:eb:05:65:f5:4c:a0:cb:
8a:86:24:c1:a7:41:ae:28:6a:dc:33:61:07:5e:73:e9:99:2c:
ee:4b:4a:ec:7b:c3:4e:80:28:a0:ef:f0:d4:e0:2f:2e:2e:3e:
78:05:99:1d:8c:1d:ab:ff:25:84:30:16:ed:ea:0b:fe:f1:4e:
d3:80:de:eb:c0:eb:4a:71:62:f2:d7:81:9b:be:1b:ed:e7:cd:
ee:2e:64:2b:56:95:fe:4f:e0:e7:55:4c:46:9e:e2:1a:1a:7a:
38:6e:6b:47:58:5c:3d:dd:2d:f9:75:6f:61:ac:32:aa:92:10:
9e:6b:65:ff:9c:c9:3e:ac:eb:4a:85:1b:b4:88:1b:19:13:75:
49:04:b1:f9:98:2f:4d:18:d6:ab:15:fb:6c:d1:99:9c:8e:97:
8c:66:54:77:4e:b9:05:ce:20:08:e3:87:89:2d:84:00:e8:da:
3b:d2:54:a5:83:f9:a5:8c:64:c6:07:40:35:2c:ad:ab:63:fa:
34:60:7a:dd:58:37:ea:86:52:4d:3f:1d:08:ac:71:65:ee:f3:
82:95:f0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:36:53 2026 by rpki-client