Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/DJb3q9QP0vjgpfyVEHNjpwFGK0o.roa
File: DJb3q9QP0vjgpfyVEHNjpwFGK0o.roa (raw, json)
Hash identifier: J9f3+3+bZCVO4pdaXJk73MjSTfHDh7PUS0/X3EifbYI=
Subject key identifier: 0C:96:F7:AB:D4:0F:D2:F8:E0:A5:FC:95:10:73:63:A7:01:46:2B:4A
Certificate issuer: /CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
Certificate serial: 019B7F15AA5C9DFC628A8E789E3E85923C63
Authority key identifier: BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/DJb3q9QP0vjgpfyVEHNjpwFGK0o.roa
Signing time: Fri 02 Jan 2026 14:21:24 +0000
ROA not before: Fri 02 Jan 2026 14:21:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19541
IP address blocks: 2a00:ad40:100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:aa:5c:9d:fc:62:8a:8e:78:9e:3e:85:92:3c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
Validity
Not Before: Jan 2 14:21:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0c96f7abd40fd2f8e0a5fc95107363a701462b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e7:86:6d:86:6e:5e:eb:27:47:aa:e4:f7:2c:
af:e7:67:87:81:08:b8:ce:a6:03:aa:3f:96:2e:24:
47:bf:0d:b8:fb:f4:e6:9a:26:00:f9:91:7c:93:f5:
5a:d9:43:19:35:42:b6:59:9a:f8:32:ed:41:88:aa:
11:04:07:93:f6:b9:e9:4b:83:67:df:ab:aa:76:79:
c6:51:90:f8:5a:f7:57:ae:0f:fb:a0:fa:92:da:ac:
bd:32:41:95:de:6d:41:e6:a2:e6:27:68:85:70:f1:
00:e2:28:f8:2a:12:1d:a9:e2:a9:35:6c:a5:9e:5f:
dd:85:71:fe:ef:74:88:2b:6e:62:4f:12:25:90:7a:
cf:9a:dc:b7:0e:83:db:f5:25:73:04:72:64:d1:9b:
87:ec:31:e8:28:f7:27:e7:7e:d3:a8:fb:94:05:0f:
d7:98:bc:2e:c1:c2:9a:a3:24:8e:af:39:10:56:ef:
46:f3:0b:98:e6:ad:b6:c1:28:24:ba:bc:f5:cd:cf:
8b:d5:90:16:ee:88:eb:ea:32:a0:22:2a:b5:00:e9:
fc:43:2f:cb:0f:ac:b5:5f:a0:27:9d:c6:58:88:f5:
eb:e4:45:3d:f2:cd:96:16:cb:f1:cf:a3:0b:86:0d:
eb:ca:72:54:64:6b:65:31:eb:06:03:15:50:d5:f1:
8a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:96:F7:AB:D4:0F:D2:F8:E0:A5:FC:95:10:73:63:A7:01:46:2B:4A
X509v3 Authority Key Identifier:
keyid:BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/DJb3q9QP0vjgpfyVEHNjpwFGK0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:ad40:100::/40
Signature Algorithm: sha256WithRSAEncryption
8d:62:49:4f:65:84:ec:da:4c:3b:4d:3c:b3:02:ce:e4:ab:4f:
21:54:c2:13:93:fa:28:ec:5d:93:48:26:e3:39:65:f4:11:46:
71:b1:c7:6a:0d:bd:de:cb:fc:69:8c:4a:d9:e6:6e:e9:21:33:
09:c9:5c:3f:6a:3f:fc:37:e1:f0:45:69:ac:af:2e:f0:9b:8b:
fb:40:05:c2:c4:4c:48:64:54:c7:e2:5b:07:7a:02:20:63:99:
dc:3c:75:4d:42:ce:23:e6:54:bf:3d:7d:43:e1:0b:cf:08:f1:
b5:7b:1b:c4:af:49:55:04:a9:49:9a:d9:04:11:b2:2b:02:81:
2f:df:d6:dd:2f:d0:dc:ff:d1:f0:d6:e8:ed:4c:f0:9f:2e:33:
90:7b:f4:1e:2e:0e:f7:bb:9c:51:db:02:53:a6:16:b6:59:a1:
eb:02:e4:25:ce:fc:b0:aa:ef:18:f2:de:ab:a9:53:8e:33:25:
d4:f2:bd:1e:a2:33:ce:f1:1e:f5:a3:3b:9c:c0:84:c9:d1:ad:
fd:43:de:9c:90:50:ca:02:5b:c2:9e:13:26:e2:34:a8:e5:df:
0a:7e:58:0d:74:8d:a8:8b:31:e2:d5:18:c3:a2:7b:6a:87:4e:
71:89:2e:8a:29:42:48:be:13:07:0b:9f:05:37:77:78:f8:fc:
42:a0:0c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:34:48 2026 by rpki-client