Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/v6gwLEELUcOW8EGrOdAAHovql_o.roa
File: v6gwLEELUcOW8EGrOdAAHovql_o.roa (raw, json)
Hash identifier: OVBiXttWtXEViwRttR3M1gCKBS/ptPZBSBfkNvQ8mSA=
Subject key identifier: BF:A8:30:2C:41:0B:51:C3:96:F0:41:AB:39:D0:00:1E:8B:EA:97:FA
Certificate issuer: /CN=9df589672bc2a345dc11e9ff162500ec15dadd1d
Certificate serial: 019B783486BDD870ED7C88AA5BB450DCF24C
Authority key identifier: 9D:F5:89:67:2B:C2:A3:45:DC:11:E9:FF:16:25:00:EC:15:DA:DD:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfWJZyvCo0XcEen_FiUA7BXa3R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/v6gwLEELUcOW8EGrOdAAHovql_o.roa
Signing time: Thu 01 Jan 2026 06:17:46 +0000
ROA not before: Thu 01 Jan 2026 06:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39078
IP address blocks: 212.23.220.0/24 maxlen: 24
2a12:3600::/30 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfWJZyvCo0XcEen_FiUA7BXa3R0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:78:34:86:bd:d8:70:ed:7c:88:aa:5b:b4:50:dc:f2:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df589672bc2a345dc11e9ff162500ec15dadd1d
Validity
Not Before: Jan 1 06:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bfa8302c410b51c396f041ab39d0001e8bea97fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:04:1c:c6:35:cc:fa:46:e5:81:54:9a:fd:2c:
d7:92:87:ce:89:39:ad:d9:15:ce:30:ea:dd:45:bf:
16:f4:9f:0a:fa:fb:72:73:4e:aa:07:4e:be:24:25:
65:0c:76:a1:25:81:38:f0:bb:88:3f:93:a2:5a:73:
c8:c0:f9:8d:24:89:ef:c8:67:78:ed:63:0a:62:9d:
a2:9d:2e:f6:15:fb:9c:24:53:77:2e:73:68:3e:6d:
ca:c3:64:43:21:a7:d8:69:ed:4a:ab:19:98:3c:b7:
e4:bc:da:de:14:41:d9:00:63:cc:44:16:db:1c:c1:
67:21:37:e7:b2:b8:e4:0a:98:02:5b:d6:89:25:a9:
d7:14:46:1b:b2:c6:8b:7a:94:84:86:1c:87:0e:fc:
9c:29:97:df:81:df:00:fd:60:58:37:e7:7f:37:35:
c0:25:46:cc:e0:7a:9c:36:6c:9b:d0:9c:50:3b:8c:
69:0a:8d:b9:fa:f3:df:c2:b1:e4:1e:96:d5:52:14:
a3:85:b5:a9:20:6d:89:54:d1:08:3e:ad:c0:51:39:
62:ed:03:18:cc:1a:ca:35:6a:83:56:3a:a5:6d:ff:
78:aa:60:bc:90:58:2c:00:23:00:df:28:6f:e9:67:
c2:ca:e2:f4:48:7b:9d:cd:a3:21:df:af:33:34:59:
55:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A8:30:2C:41:0B:51:C3:96:F0:41:AB:39:D0:00:1E:8B:EA:97:FA
X509v3 Authority Key Identifier:
keyid:9D:F5:89:67:2B:C2:A3:45:DC:11:E9:FF:16:25:00:EC:15:DA:DD:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfWJZyvCo0XcEen_FiUA7BXa3R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/v6gwLEELUcOW8EGrOdAAHovql_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/269f66-0fc1-4658-b367-9c30f656fd5b/1/nfWJZyvCo0XcEen_FiUA7BXa3R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.23.220.0/24
IPv6:
2a12:3600::/30
Signature Algorithm: sha256WithRSAEncryption
2f:76:dd:00:b2:f0:72:2e:ff:a1:d0:86:50:bd:f6:92:54:cd:
49:a9:94:cf:36:bc:9e:4f:7d:b9:f2:36:05:51:c9:79:7b:a2:
4f:54:c5:82:07:12:b4:8f:6e:3e:af:94:e6:7e:62:05:4d:a3:
ad:9a:21:8f:01:04:4d:ec:cf:b4:9e:9f:fb:4f:95:b8:7b:73:
ae:ea:69:99:3e:eb:0a:1b:d1:b9:e5:ef:42:3c:38:ab:c1:e3:
0c:8a:72:02:a1:ff:73:a3:73:cc:5b:9f:4b:7f:8a:b2:05:cc:
50:03:b1:19:21:ad:20:4a:83:1d:96:34:3d:8c:10:4a:0c:f6:
f0:2c:37:26:52:be:ca:a6:fb:c8:a2:23:47:32:07:22:da:5c:
bd:d1:1e:76:47:47:5f:fa:e9:fd:ba:59:4d:30:46:89:41:ba:
eb:c8:0e:11:2b:a5:d5:1a:a3:4b:6a:9d:3d:37:59:cb:f5:c7:
d0:5c:79:f4:b0:32:ee:21:92:96:86:cb:41:77:a8:e9:65:d3:
aa:20:b5:bf:f8:15:59:28:0e:ff:dd:eb:96:61:25:16:85:06:
88:02:97:b2:56:37:80:5d:b7:9c:56:a1:4c:95:23:3e:15:5f:
6d:6b:a9:c5:f3:e0:d6:5b:81:a4:6a:48:25:27:ca:77:cb:88:
50:3b:b1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:13:15 2026 by rpki-client