Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/a3b6ea-b4a6-4573-92e6-7cfe2c03b0a8/1/ibifGe6nmFsSTVNDHYWRQSy2kOA.roa
File: ibifGe6nmFsSTVNDHYWRQSy2kOA.roa (raw, json)
Hash identifier: kEKA3i/6UscqbuHT+tIpAu/mc2AjacPsvOQfB+U26qw=
Subject key identifier: 89:B8:9F:19:EE:A7:98:5B:12:4D:53:43:1D:85:91:41:2C:B6:90:E0
Certificate issuer: /CN=bac031091f69d3570116f0dd1a09be20f3dd5844
Certificate serial: 01A162B934E95262F482EBDC8A17E19F98E5
Authority key identifier: BA:C0:31:09:1F:69:D3:57:01:16:F0:DD:1A:09:BE:20:F3:DD:58:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/usAxCR9p01cBFvDdGgm-IPPdWEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/a3b6ea-b4a6-4573-92e6-7cfe2c03b0a8/1/ibifGe6nmFsSTVNDHYWRQSy2kOA.roa
Signing time: Thu 22 Oct 2026 08:27:47 +0000
ROA not before: Thu 22 Oct 2026 08:27:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218369
IP address blocks: 2001:67c:2888::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/a3b6ea-b4a6-4573-92e6-7cfe2c03b0a8/1/usAxCR9p01cBFvDdGgm-IPPdWEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/a3b6ea-b4a6-4573-92e6-7cfe2c03b0a8/1/usAxCR9p01cBFvDdGgm-IPPdWEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/usAxCR9p01cBFvDdGgm-IPPdWEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:b9:34:e9:52:62:f4:82:eb:dc:8a:17:e1:9f:98:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bac031091f69d3570116f0dd1a09be20f3dd5844
Validity
Not Before: Oct 22 08:27:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=89b89f19eea7985b124d53431d8591412cb690e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:65:0b:f0:23:ee:0b:29:a8:9e:59:b6:5b:1a:
a5:af:65:ba:cb:60:00:5b:2f:8d:27:c1:14:8b:8a:
d4:a8:66:b0:1f:b8:c4:e5:29:9d:b2:64:e4:d8:b9:
ad:16:50:b2:ca:1b:c7:f1:ae:84:7b:23:47:3e:50:
24:48:24:cb:18:95:1b:b3:e9:f0:19:38:f5:88:73:
cc:5e:60:bf:e9:8f:df:78:e2:98:18:ce:4c:80:bf:
34:51:62:c3:8b:ee:d8:57:c5:0d:23:bb:f4:69:4f:
96:24:78:85:45:30:cc:99:cb:3d:b3:88:71:31:55:
75:b9:83:00:db:6b:92:89:ff:b9:68:9e:1d:48:98:
4f:c7:9f:3c:cb:fe:35:72:96:c7:99:a1:85:e8:8e:
6e:07:2e:a0:e0:d2:ff:06:ef:5a:5c:33:16:be:b2:
1e:63:65:4b:d1:f3:19:b4:ac:3d:d7:10:86:2a:2e:
95:2d:d7:4a:03:cc:ac:35:5b:63:86:78:5a:76:34:
52:ee:a3:a6:3c:77:9b:fa:07:d6:93:4b:1b:2f:4c:
3b:20:60:d4:8c:ac:3a:3b:7b:f1:4a:63:e7:0a:05:
14:14:22:5c:64:0b:8b:b5:54:8c:52:45:17:87:53:
a8:90:bd:60:3a:5d:c2:3b:29:03:65:41:97:f0:49:
fe:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B8:9F:19:EE:A7:98:5B:12:4D:53:43:1D:85:91:41:2C:B6:90:E0
X509v3 Authority Key Identifier:
keyid:BA:C0:31:09:1F:69:D3:57:01:16:F0:DD:1A:09:BE:20:F3:DD:58:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/usAxCR9p01cBFvDdGgm-IPPdWEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/a3b6ea-b4a6-4573-92e6-7cfe2c03b0a8/1/ibifGe6nmFsSTVNDHYWRQSy2kOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/a3b6ea-b4a6-4573-92e6-7cfe2c03b0a8/1/usAxCR9p01cBFvDdGgm-IPPdWEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2888::/48
Signature Algorithm: sha256WithRSAEncryption
5b:2f:b9:40:16:a2:eb:e2:a5:18:01:d7:fe:88:fe:9c:b3:a0:
68:d2:4b:d4:f6:be:74:d2:88:3d:55:18:e7:e4:76:1c:e3:75:
32:a1:77:2d:c6:7c:3e:b6:d2:ea:0f:47:18:d8:73:cb:ec:0d:
04:a7:d0:cb:34:2e:aa:ba:f5:f7:6c:b1:d7:b2:8d:c6:41:ac:
6e:db:09:28:90:4c:7f:43:33:fd:cb:a6:d8:c6:cd:5e:bd:46:
5d:b2:dd:62:1e:70:88:04:f4:49:ad:12:7e:9c:46:bd:aa:c7:
ae:2d:09:9f:45:fe:a0:aa:c1:cb:07:f5:87:21:8e:6b:54:af:
64:6d:cc:57:57:b6:3e:7a:fe:07:e5:b8:29:c9:cf:8a:c0:0b:
8a:b4:56:09:de:e7:6c:96:0e:9b:7f:b0:8d:84:f4:29:f9:7e:
60:73:ce:4a:53:0e:69:4e:f0:f1:12:cb:19:ae:10:5c:6a:da:
dc:a5:56:52:a4:2f:a4:28:c2:8e:05:d1:b1:0c:9c:23:7c:13:
3d:3d:3c:aa:d4:bd:da:a7:2d:1f:e6:58:27:b8:0d:58:4d:8c:
28:c4:f3:c9:59:f5:84:b9:f5:d8:36:8c:5b:64:90:2f:d0:0c:
eb:b0:22:62:1c:79:62:14:06:b1:5f:6d:a5:a0:57:ae:72:7b:
58:51:70:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:46:03 2026 by rpki-client