Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/b2bc26-6ea7-43ea-8f00-a87ebafc8da8/1/u-yQc4anbAE0o89xpV3wnoAvukA.roa
File: u-yQc4anbAE0o89xpV3wnoAvukA.roa (raw, json)
Hash identifier: tCZhN3FArTvOF+ssZVxrH8n2f4Pf4R0GdARtS0BFrXo=
Subject key identifier: BB:EC:90:73:86:A7:6C:01:34:A3:CF:71:A5:5D:F0:9E:80:2F:BA:40
Certificate issuer: /CN=a3a36d04175198b8566ca4c7459e3a7fbdc4e479
Certificate serial: 01A12D5B866A005DE6B070E8AF6CFF2E51AF
Authority key identifier: A3:A3:6D:04:17:51:98:B8:56:6C:A4:C7:45:9E:3A:7F:BD:C4:E4:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o6NtBBdRmLhWbKTHRZ46f73E5Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/b2bc26-6ea7-43ea-8f00-a87ebafc8da8/1/u-yQc4anbAE0o89xpV3wnoAvukA.roa
Signing time: Sun 11 Oct 2026 23:45:35 +0000
ROA not before: Sun 11 Oct 2026 23:45:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218696
IP address blocks: 2001:678:131c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/b2bc26-6ea7-43ea-8f00-a87ebafc8da8/1/o6NtBBdRmLhWbKTHRZ46f73E5Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/b2bc26-6ea7-43ea-8f00-a87ebafc8da8/1/o6NtBBdRmLhWbKTHRZ46f73E5Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/o6NtBBdRmLhWbKTHRZ46f73E5Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2d:5b:86:6a:00:5d:e6:b0:70:e8:af:6c:ff:2e:51:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3a36d04175198b8566ca4c7459e3a7fbdc4e479
Validity
Not Before: Oct 11 23:45:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bbec907386a76c0134a3cf71a55df09e802fba40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:55:05:c7:04:74:d0:af:0f:04:37:13:da:e0:
87:f5:41:55:b6:6a:05:d8:9a:7a:07:51:e4:07:c6:
02:5a:c8:e5:97:9c:aa:0d:9b:98:65:f3:50:24:36:
eb:54:1c:97:aa:20:c4:ee:3e:fc:4f:7a:b8:e9:81:
75:17:07:04:95:15:b7:35:09:65:49:35:8a:5a:e2:
27:31:f7:8f:c0:98:cc:6a:32:27:1e:e2:9b:86:03:
1a:7f:33:3c:7e:d7:7d:48:b0:39:f6:04:67:bb:1c:
0e:86:92:64:1d:0a:3b:af:25:2b:21:fc:73:77:fc:
bd:d7:06:a9:8f:35:fb:d6:cf:de:ba:a9:d2:8e:1a:
4d:78:6e:8c:8d:47:93:28:2f:8f:f4:13:ad:29:d8:
7f:87:ae:3b:fe:f0:31:5f:c9:9d:8b:65:7d:f3:ab:
d9:ca:71:4b:7b:a0:2f:62:e2:74:80:c6:ab:48:7e:
ae:e3:1e:63:cb:e7:9b:d5:d5:45:ac:85:19:64:b7:
03:44:bf:bd:9c:23:7e:a4:ee:37:39:23:6b:b2:5d:
cf:b8:98:3e:d8:93:d7:38:94:f4:b4:5f:e0:04:27:
0a:3c:ca:bf:d8:5e:f9:49:fe:f3:fd:18:f0:3b:e0:
39:31:f9:d2:cb:06:f8:92:24:53:90:8e:0e:20:96:
d8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EC:90:73:86:A7:6C:01:34:A3:CF:71:A5:5D:F0:9E:80:2F:BA:40
X509v3 Authority Key Identifier:
keyid:A3:A3:6D:04:17:51:98:B8:56:6C:A4:C7:45:9E:3A:7F:BD:C4:E4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6NtBBdRmLhWbKTHRZ46f73E5Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b2bc26-6ea7-43ea-8f00-a87ebafc8da8/1/u-yQc4anbAE0o89xpV3wnoAvukA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b2bc26-6ea7-43ea-8f00-a87ebafc8da8/1/o6NtBBdRmLhWbKTHRZ46f73E5Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:131c::/48
Signature Algorithm: sha256WithRSAEncryption
47:ef:1e:94:61:92:4e:c3:2d:4e:a6:9d:fa:da:19:96:f7:48:
b2:93:d3:9d:b7:0f:54:99:9f:20:f1:20:df:d8:75:f0:62:18:
dd:c9:f1:12:ba:57:86:26:1c:51:b3:53:3e:a6:dc:da:3b:e9:
02:54:24:95:7f:53:b3:dd:01:8d:47:8f:40:99:a3:dd:e7:a6:
d5:e2:42:40:ab:81:e1:63:43:d0:e8:e1:af:f7:00:da:c8:8c:
d5:2f:70:60:c9:a2:3b:47:70:4d:e4:9e:e3:69:d4:dd:88:66:
ee:e5:57:9e:42:4d:a7:ad:3a:47:8e:3a:80:f7:4c:4d:5e:8d:
dd:c1:57:ce:3a:ce:36:10:c0:14:75:65:45:a8:b0:1b:9e:2a:
6f:c2:7c:a1:b8:de:cd:28:f4:76:19:fc:0b:86:48:21:ca:af:
51:7c:ff:44:5f:fc:b5:00:bb:45:72:8b:77:ee:98:cc:e4:91:
3d:4a:0f:6f:ed:3b:d1:01:66:29:3f:08:bc:09:70:8b:c8:4b:
d1:6c:e1:0c:d9:a3:1d:2f:d5:07:51:7d:09:0e:de:dc:8a:32:
6a:e9:44:57:c1:02:ad:1e:f9:de:5a:a5:08:e3:21:19:c5:c1:
fa:57:e5:07:b2:48:e2:58:c0:7b:dc:78:d8:40:8d:af:e2:b9:
82:31:53:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 07:09:40 2026 by rpki-client