Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/vD1qNxP9N4SRKi055P0gfgShABo.roa
File: vD1qNxP9N4SRKi055P0gfgShABo.roa (raw, json)
Hash identifier: Fg9Em7txcMYPp8p8n0dxYQQB4g6EWfSL723ZZQj3T+k=
Subject key identifier: BC:3D:6A:37:13:FD:37:84:91:2A:2D:39:E4:FD:20:7E:04:A1:00:1A
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01A09C8921AAEC060E1678AE9674494FBBC2
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/vD1qNxP9N4SRKi055P0gfgShABo.roa
Signing time: Sun 13 Sep 2026 20:50:27 +0000
ROA not before: Sun 13 Sep 2026 20:50:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218731
IP address blocks: 2a12:bec4:150::/44 maxlen: 44
2a12:bec4:1460::/44 maxlen: 44
2a12:bec4:1a70::/44 maxlen: 44
2a12:bec4:1a80::/44 maxlen: 44
2a12:bec4:1c70::/44 maxlen: 44
2a12:bec4:1c90::/44 maxlen: 44
2a12:bec4:2000::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 15:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9c:89:21:aa:ec:06:0e:16:78:ae:96:74:49:4f:bb:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Sep 13 20:50:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc3d6a3713fd3784912a2d39e4fd207e04a1001a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ba:bb:08:67:0a:32:47:ac:bb:59:35:43:0d:
91:ef:fe:4c:5c:d4:ac:30:00:90:d8:d5:ca:02:ba:
4b:92:a2:5d:9d:3a:7f:51:e1:4c:10:41:bd:76:1e:
29:79:d0:99:4c:a0:ea:1d:23:6c:d1:59:3b:81:2e:
6f:27:ad:57:55:63:69:25:4c:5e:fe:b6:68:d3:68:
20:3a:0c:1c:81:d2:71:94:31:ac:bc:52:74:bb:68:
7e:ec:fd:dd:eb:5c:7e:42:62:4b:3a:7b:26:32:61:
c3:f1:2b:35:95:ce:f1:b6:bc:ab:1f:d8:c4:f6:f5:
3e:40:ea:cb:25:31:11:4a:3c:fc:fe:85:48:b2:68:
ac:5a:b4:f8:ec:95:7e:13:34:85:48:cb:e2:54:4b:
ba:03:83:74:90:37:7d:e4:82:89:64:25:85:ec:26:
42:6d:71:02:cd:aa:3f:43:13:14:0a:1d:89:4b:ad:
00:02:2c:9f:1a:92:44:fe:88:52:25:da:d1:a7:06:
27:6b:cc:db:5c:39:14:f4:24:de:30:2f:1b:07:a9:
61:89:e7:6e:27:62:f5:73:f3:8f:ef:d6:39:6a:77:
f1:08:b8:db:12:e2:c2:26:d5:cc:e3:9a:7f:b0:d6:
5a:7c:c3:63:dd:35:64:55:ce:22:20:37:da:de:08:
3c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3D:6A:37:13:FD:37:84:91:2A:2D:39:E4:FD:20:7E:04:A1:00:1A
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/vD1qNxP9N4SRKi055P0gfgShABo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:150::/44
2a12:bec4:1460::/44
2a12:bec4:1a70::-2a12:bec4:1a8f:ffff:ffff:ffff:ffff:ffff
2a12:bec4:1c70::/44
2a12:bec4:1c90::/44
2a12:bec4:2000::/44
Signature Algorithm: sha256WithRSAEncryption
28:39:29:bf:a0:f7:aa:bd:90:07:f2:0a:4c:f1:8d:a5:8d:7d:
d1:a3:51:00:96:70:e0:35:aa:24:20:54:b3:11:34:8f:69:c4:
59:fe:be:9e:44:8a:34:e4:a7:08:0c:30:42:88:6f:e1:74:19:
7f:2e:b3:27:da:e9:59:6a:7d:14:dc:64:58:f9:1d:96:3e:15:
83:2d:7f:63:47:89:72:df:0c:f1:d2:42:d5:57:d4:41:89:30:
45:9f:f0:84:55:64:76:08:68:91:a9:59:ec:ea:ac:62:2d:f0:
f9:c3:15:d7:49:7a:98:88:dc:0c:5b:20:50:69:7f:e6:67:8c:
88:11:71:af:37:55:e2:24:ff:fa:d5:8b:f2:c2:70:80:bd:6f:
76:a4:ef:1d:09:bd:89:11:ee:ea:ad:d5:b8:61:c4:a7:08:1a:
c4:a6:ae:69:f5:3e:89:37:9e:d5:b4:3a:c1:cc:76:b5:5d:7c:
f0:b9:0a:83:a1:7f:9e:19:37:98:cf:30:18:da:d3:11:7d:da:
fa:f2:cc:ef:67:87:89:c4:0d:10:af:b0:91:51:1c:7b:57:67:
fc:65:9f:63:8b:a1:fa:39:2d:32:e1:91:75:55:35:3f:3d:23:
a0:9e:26:32:bb:09:ec:4f:78:6c:e1:de:b0:7d:b4:fd:61:d2:
1b:6e:1f:b9
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgISAaCciSGq7AYOFniulnRJT7vCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj
M2Q2NmYwHhcNMjYwOTEzMjA1MDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzNkNmEzNzEzZmQzNzg0OTEyYTJkMzllNGZkMjA3ZTA0YTEwMDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLq7CGcKMkesu1k1Qw2R7/5MXNSs
MACQ2NXKArpLkqJdnTp/UeFMEEG9dh4pedCZTKDqHSNs0Vk7gS5vJ61XVWNpJUxe
/rZo02ggOgwcgdJxlDGsvFJ0u2h+7P3d61x+QmJLOnsmMmHD8Ss1lc7xtryrH9jE
9vU+QOrLJTERSjz8/oVIsmisWrT47JV+EzSFSMviVEu6A4N0kDd95IKJZCWF7CZC
bXECzao/QxMUCh2JS60AAiyfGpJE/ohSJdrRpwYna8zbXDkU9CTeMC8bB6lhiedu
J2L1c/OP79Y5anfxCLjbEuLCJtXM45p/sNZafMNj3TVkVc4iIDfa3gg8BwIDAQAB
o4ICRDCCAkAwHQYDVR0OBBYEFLw9ajcT/TeEkSotOeT9IH4EoQAaMB8GA1UdIwQY
MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt
NTUzNjljZjUwN2VlLzEvdkQxcU54UDlONFNSS2kwNTVQMGdmZ1NoQUJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl
LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTBHBAIAAjBBAwcEKhK+xAFQ
AwcEKhK+xBRgMBIDBwQqEr7EGnADBwQqEr7EGoADBwQqEr7EHHADBwQqEr7EHJAD
BwQqEr7EIAAwDQYJKoZIhvcNAQELBQADggEBACg5Kb+g96q9kAfyCkzxjaWNfdGj
UQCWcOA1qiQgVLMRNI9pxFn+vp5EijTkpwgMMEKIb+F0GX8usyfa6VlqfRTcZFj5
HZY+FYMtf2NHiXLfDPHSQtVX1EGJMEWf8IRVZHYIaJGpWezqrGIt8PnDFddJepiI
3AxbIFBpf+ZnjIgRca83VeIk//rVi/LCcIC9b3ak7x0JvYkR7uqt1bhhxKcIGsSm
rmn1Pok3ntW0OsHMdrVdfPC5CoOhf54ZN5jPMBja0xF92vryzO9nh4nEDRCvsJFR
HHtXZ/xln2OLofo5LTLhkXVVNT89I6CeJjK7CexPeGzh3rB9tP1h0htuH7k=
-----END CERTIFICATE-----
Generated at Sun Oct 4 01:38:49 2026 by rpki-client