Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/BN5xn3puLBG77Ytvq5XNjpexQlg.roa
File: BN5xn3puLBG77Ytvq5XNjpexQlg.roa (raw, json)
Hash identifier: ttFDAIhufoPsyog+UuT4lDUDrzxoN3Mmca/WlShtmkg=
Subject key identifier: 04:DE:71:9F:7A:6E:2C:11:BB:ED:8B:6F:AB:95:CD:8E:97:B1:42:58
Certificate issuer: /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial: 019E93DA7CCEA36592337582F699E081DAF0
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/BN5xn3puLBG77Ytvq5XNjpexQlg.roa
Signing time: Thu 04 Jun 2026 18:17:09 +0000
ROA not before: Thu 04 Jun 2026 18:17:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198556
IP address blocks: 2a09:3f00:1002::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:93:da:7c:ce:a3:65:92:33:75:82:f6:99:e0:81:da:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367160181739568e578e1b5f57976a60398062e6
Validity
Not Before: Jun 4 18:17:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04de719f7a6e2c11bbed8b6fab95cd8e97b14258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:93:9e:2b:84:09:26:b7:bf:ff:d3:46:15:67:
67:8e:e7:0e:ab:c8:1c:c8:7e:6a:33:97:70:54:6b:
9c:87:42:95:02:76:40:68:e3:62:c8:1e:14:9c:0d:
1f:a0:2f:cf:9c:68:46:a0:d9:90:14:a8:69:b7:a5:
21:c0:83:37:0f:a1:b5:a4:99:fd:39:ee:e5:e3:8d:
f4:e2:a9:57:bd:78:e6:e5:df:1f:7b:c9:fc:cf:f7:
26:0a:ff:6d:7a:d9:de:8e:c9:e0:5d:ff:29:37:76:
85:b0:23:e9:0c:aa:2b:97:40:67:42:49:aa:24:55:
f7:5e:7a:1f:fd:43:ff:9d:50:a6:b9:f8:61:cd:0f:
a5:fb:ee:4b:02:06:58:5a:9c:7d:e9:37:03:89:fb:
b1:8e:0a:c3:0e:fb:96:03:1e:7c:eb:87:76:cb:5f:
1a:b8:50:8c:fe:f1:6a:5c:1f:f2:4b:bc:b1:a6:de:
a5:8a:47:76:47:4e:f3:d9:12:69:84:a6:62:5f:87:
1c:c5:d9:37:26:4b:d6:e4:84:48:61:97:ba:f6:05:
e4:bd:91:0e:27:ac:12:4e:47:b6:97:4a:4d:ac:1a:
fa:ad:cc:2f:e0:ca:52:db:46:23:5c:1f:b7:c2:11:
8f:98:fe:6a:15:24:c5:54:fd:d0:b5:75:bd:b2:40:
c4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:DE:71:9F:7A:6E:2C:11:BB:ED:8B:6F:AB:95:CD:8E:97:B1:42:58
X509v3 Authority Key Identifier:
keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/BN5xn3puLBG77Ytvq5XNjpexQlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3f00:1002::/48
Signature Algorithm: sha256WithRSAEncryption
b8:b4:1b:51:e8:f0:bc:41:02:59:7a:cf:2a:0a:7a:1e:55:d5:
35:a9:77:e9:e5:49:9f:0b:04:d9:62:31:5f:e0:b1:6b:95:22:
35:10:f9:1f:ff:0c:87:d2:5c:1a:e1:ba:63:34:42:a9:69:ba:
c9:2f:62:c0:b8:db:92:27:77:0d:5c:1b:e5:c2:49:0e:98:0c:
93:eb:15:3d:6c:da:0d:8c:0a:5a:10:38:1d:b2:2b:3b:6e:77:
2d:02:93:97:10:c5:f2:9b:45:3b:35:d6:08:68:c2:b1:93:92:
f1:ae:e0:f2:b0:9b:e1:fb:d0:4f:82:70:ef:ba:92:a0:6a:85:
55:f5:21:dd:ca:59:2f:55:2d:d5:36:2c:65:57:14:6b:59:36:
04:b8:20:2b:bb:9b:af:2c:1c:75:8b:ca:6f:89:3f:c7:67:91:
ce:7b:50:f7:06:1e:b7:1f:50:3e:b1:e9:1a:46:d9:68:22:fa:
9c:8f:f6:5d:71:20:99:0c:bb:2d:5a:83:50:c3:79:16:e6:b5:
0a:78:f2:81:89:6d:7c:80:40:f4:6e:92:28:c5:1e:9b:3c:52:
68:16:c3:8e:c4:59:96:51:c6:af:d5:96:42:98:40:df:31:4e:
b8:50:43:d7:51:64:4e:f9:01:66:28:08:41:28:49:d9:88:78:
0f:dc:4d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:17:36 2026 by rpki-client