Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/5496af-af9e-4131-9a02-81ded47d661b/1/bWvXRG71uPGncKY31OBiCkUmSC0.roa
File: bWvXRG71uPGncKY31OBiCkUmSC0.roa (raw, json)
Hash identifier: 3pKszfpsxmAD0jGOUD/ardUv3gOUWm95BwzEemIqRSw=
Subject key identifier: 6D:6B:D7:44:6E:F5:B8:F1:A7:70:A6:37:D4:E0:62:0A:45:26:48:2D
Certificate issuer: /CN=110b9341adb07cd51e959bf62207486f69adc44e
Certificate serial: 019FF9BBF03717871FE53A64204470FC257A
Authority key identifier: 11:0B:93:41:AD:B0:7C:D5:1E:95:9B:F6:22:07:48:6F:69:AD:C4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQuTQa2wfNUelZv2IgdIb2mtxE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/5496af-af9e-4131-9a02-81ded47d661b/1/bWvXRG71uPGncKY31OBiCkUmSC0.roa
Signing time: Thu 13 Aug 2026 06:07:51 +0000
ROA not before: Thu 13 Aug 2026 06:07:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209928
IP address blocks: 139.100.8.0/21 maxlen: 24
2a0c:5040::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/5496af-af9e-4131-9a02-81ded47d661b/1/EQuTQa2wfNUelZv2IgdIb2mtxE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/5496af-af9e-4131-9a02-81ded47d661b/1/EQuTQa2wfNUelZv2IgdIb2mtxE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/EQuTQa2wfNUelZv2IgdIb2mtxE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:bb:f0:37:17:87:1f:e5:3a:64:20:44:70:fc:25:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=110b9341adb07cd51e959bf62207486f69adc44e
Validity
Not Before: Aug 13 06:07:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d6bd7446ef5b8f1a770a637d4e0620a4526482d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c3:7d:96:0f:0b:f1:7c:a4:0b:d7:a4:10:82:
b6:36:2e:18:3e:a0:57:7f:4c:f7:83:4b:87:a8:9a:
2d:f1:ff:80:e2:f6:0d:bc:32:ca:9c:1a:ac:09:7d:
53:31:82:f6:47:b8:35:e5:c8:86:e3:86:00:60:94:
c7:f5:57:c3:14:dc:62:5a:79:39:e1:6a:68:e2:66:
e7:07:43:ed:70:5d:b4:dd:ca:f9:1a:5a:96:4e:19:
cd:02:5c:a0:13:19:4b:25:88:c6:0f:37:e6:12:ad:
c3:b9:6f:26:00:9a:1e:84:35:c6:f6:f7:44:57:64:
ec:74:b7:18:53:02:76:aa:70:d3:34:bc:91:f9:52:
bf:33:2a:e9:45:fa:3f:01:5c:4d:6e:11:74:cb:58:
4e:1a:53:af:77:64:c8:af:62:b9:2a:c8:48:13:18:
bf:6b:19:ba:82:58:03:fd:b2:80:0e:80:8e:41:e4:
ee:bb:66:9a:02:c1:96:01:1f:14:6f:2a:2d:e4:d3:
61:d4:a3:cd:40:d6:3f:85:a5:1f:6b:30:6f:2d:9e:
9f:ea:25:7c:2b:78:11:04:83:25:50:97:e4:73:02:
2d:8c:ae:57:ca:53:b7:22:6a:29:1b:71:1c:3b:24:
95:9c:8a:a8:c7:de:1e:1e:61:75:15:18:b9:4c:e6:
e0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:6B:D7:44:6E:F5:B8:F1:A7:70:A6:37:D4:E0:62:0A:45:26:48:2D
X509v3 Authority Key Identifier:
keyid:11:0B:93:41:AD:B0:7C:D5:1E:95:9B:F6:22:07:48:6F:69:AD:C4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQuTQa2wfNUelZv2IgdIb2mtxE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5496af-af9e-4131-9a02-81ded47d661b/1/bWvXRG71uPGncKY31OBiCkUmSC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5496af-af9e-4131-9a02-81ded47d661b/1/EQuTQa2wfNUelZv2IgdIb2mtxE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.100.8.0/21
IPv6:
2a0c:5040::/29
Signature Algorithm: sha256WithRSAEncryption
5c:a3:af:5c:41:01:74:ef:ad:de:87:7e:d4:59:8e:42:c5:ca:
3a:1c:10:3b:c5:e1:8f:e7:5b:7d:bc:87:28:9a:6c:99:7c:43:
6e:f8:61:85:c1:fe:d9:41:f5:b7:34:7a:84:e8:78:b3:bc:af:
4e:b4:e8:a1:93:95:9f:e7:75:4e:b5:8b:60:c2:cc:aa:e8:30:
24:26:ea:4e:6b:65:ed:4b:90:76:b6:04:a7:d6:d4:36:3b:24:
f9:fe:b6:6e:23:f0:83:3f:66:ea:93:a3:ef:e9:d4:86:65:fb:
01:a7:0d:95:74:b2:0b:8f:f7:d3:e9:cb:43:31:d6:ae:fa:d5:
16:b0:98:70:41:5a:32:ed:b1:7b:ce:5a:ce:bc:b2:69:f4:ed:
aa:dd:9d:34:aa:d6:bd:f5:59:eb:ee:4c:09:02:b3:a3:90:37:
13:87:01:e4:83:95:5a:69:c2:b9:10:a3:47:97:7b:91:cc:44:
58:ff:d3:09:5d:aa:24:cb:90:3d:00:b9:04:c4:9d:1c:84:ad:
11:e2:e4:06:53:5e:af:f5:13:cc:56:dd:e7:f3:3f:52:2c:3a:
98:81:4a:4b:29:fc:95:fb:ba:4d:f5:12:26:04:9a:a8:81:3d:
c9:4c:e7:85:7f:38:fd:ed:27:be:b7:5c:ba:e6:33:e9:8f:d9:
b8:ff:2c:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:41:31 2026 by rpki-client