Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/bC9BbIEXuia6EuSJBAT7cA53Xbw.roa
File: bC9BbIEXuia6EuSJBAT7cA53Xbw.roa (raw, json)
Hash identifier: p4ryGyYacRfspIWiXy4Riy5kIZw2B6C0jpGFRPrBLAc=
Subject key identifier: 6C:2F:41:6C:81:17:BA:26:BA:12:E4:89:04:04:FB:70:0E:77:5D:BC
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A03B3164453AA53C31D8836D50CE39FE66
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/bC9BbIEXuia6EuSJBAT7cA53Xbw.roa
Signing time: Tue 25 Aug 2026 23:11:27 +0000
ROA not before: Tue 25 Aug 2026 23:11:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215296
IP address blocks: 2a10:fa87::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3b:31:64:45:3a:a5:3c:31:d8:83:6d:50:ce:39:fe:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Aug 25 23:11:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c2f416c8117ba26ba12e4890404fb700e775dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:df:7d:b5:a6:cb:b3:67:fb:e1:31:18:a2:d9:
75:d0:32:df:71:54:06:04:ee:cc:ad:25:aa:9f:ef:
4a:44:32:57:df:d0:26:09:8e:5b:b1:a2:4d:d3:a9:
4c:76:d6:41:04:e4:8a:e3:77:3b:b1:98:53:6c:f4:
60:b7:05:4a:ac:e0:06:8a:1f:7c:34:3e:b2:87:e8:
80:1a:cb:83:45:57:cb:85:7b:15:80:32:a2:9d:fc:
2b:dc:e5:02:c6:64:ee:ef:02:29:4a:1f:94:13:08:
41:bc:ca:f5:bb:1f:40:75:aa:14:07:69:7f:80:85:
b6:39:b7:4d:20:e4:ab:c1:4b:5c:6d:97:0b:9d:a4:
a1:f0:1f:c9:9c:af:6e:f9:55:60:23:84:8c:fd:9d:
31:8c:ae:6a:26:90:e6:88:9e:d3:b0:94:90:e9:a2:
ac:e0:a7:4e:c1:79:bb:fe:2f:22:f6:01:86:a7:bf:
92:ed:ab:99:29:9f:36:1d:1c:c4:c9:4c:c1:c3:20:
55:41:9f:f9:2b:88:ae:2f:93:d1:03:7c:5c:98:b1:
9c:91:29:f2:16:16:0b:1e:f8:2a:28:3b:dc:4a:72:
a8:51:da:f2:c0:ce:26:1e:99:bb:41:11:22:e1:c2:
77:05:fa:f7:a5:e7:41:0b:27:24:61:3c:7e:45:d7:
3b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2F:41:6C:81:17:BA:26:BA:12:E4:89:04:04:FB:70:0E:77:5D:BC
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/bC9BbIEXuia6EuSJBAT7cA53Xbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa87::/32
Signature Algorithm: sha256WithRSAEncryption
28:44:1d:87:44:3c:bb:34:22:37:11:35:21:c2:11:60:55:11:
18:fc:77:1d:c2:e5:65:b9:1c:17:17:ab:e2:c8:05:eb:1e:01:
e7:7d:a4:5b:b2:19:21:a4:fc:fd:01:27:07:f1:36:21:76:4e:
b8:19:33:44:98:b2:14:57:bb:7f:de:20:2f:c1:54:96:0b:64:
83:4a:76:36:2c:4c:1d:9a:f3:8f:a3:b4:0d:a5:7c:57:f1:e9:
92:90:fa:99:11:46:5e:a5:5f:a4:2d:bc:d8:a2:62:cd:ed:04:
fb:3f:e0:4e:2f:3d:d3:71:58:f1:f0:1a:15:76:4f:49:78:b9:
9f:bb:3b:d0:74:c1:ae:9e:a4:fc:cf:f6:81:cc:80:b6:5a:0d:
52:07:00:b1:83:41:52:a4:81:46:96:50:04:fb:bc:eb:23:68:
e0:3e:e7:ba:cd:53:d5:e6:0c:ed:29:12:2d:98:45:c0:6b:81:
0c:94:98:1c:d4:0d:1f:8f:e3:4f:9f:c1:4d:3d:aa:35:ee:c1:
19:37:7e:c5:09:d8:08:d8:c7:41:13:5f:9c:56:a3:a2:38:9d:
43:d9:8a:71:a2:b7:b0:c4:60:9d:a7:88:6c:d0:75:4e:65:9b:
a6:20:8d:fc:4b:72:e2:bd:d9:d4:ca:76:10:12:7f:e8:b4:02:
3d:42:bf:5e
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAaA7MWRFOqU8MdiDbVDOOf5mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2NTliMGJhODQwN2JlMTFjZmM5MTFiZDMxZWQxNDBjZDFj
NjA0NmMwHhcNMjYwODI1MjMxMTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzJmNDE2YzgxMTdiYTI2YmExMmU0ODkwNDA0ZmI3MDBlNzc1ZGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt99tabLs2f74TEYotl10DLfcVQG
BO7MrSWqn+9KRDJX39AmCY5bsaJN06lMdtZBBOSK43c7sZhTbPRgtwVKrOAGih98
ND6yh+iAGsuDRVfLhXsVgDKinfwr3OUCxmTu7wIpSh+UEwhBvMr1ux9AdaoUB2l/
gIW2ObdNIOSrwUtcbZcLnaSh8B/JnK9u+VVgI4SM/Z0xjK5qJpDmiJ7TsJSQ6aKs
4KdOwXm7/i8i9gGGp7+S7auZKZ82HRzEyUzBwyBVQZ/5K4iuL5PRA3xcmLGckSny
FhYLHvgqKDvcSnKoUdrywM4mHpm7QREi4cJ3Bfr3pedBCyckYTx+Rdc7nQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFGwvQWyBF7omuhLkiQQE+3AOd128MB8GA1UdIwQY
MBaAFFZZsLqEB74Rz8kRvTHtFAzRxgRsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEt
MjM5NGM2NjAwMDIyLzEvYkM5QmJJRVh1aWE2RXVTSkJBVDdjQTUzWGJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEtMjM5NGM2NjAwMDIy
LzEvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhD6hzAN
BgkqhkiG9w0BAQsFAAOCAQEAKEQdh0Q8uzQiNxE1IcIRYFURGPx3HcLlZbkcFxer
4sgF6x4B532kW7IZIaT8/QEnB/E2IXZOuBkzRJiyFFe7f94gL8FUlgtkg0p2NixM
HZrzj6O0DaV8V/HpkpD6mRFGXqVfpC282KJize0E+z/gTi8903FY8fAaFXZPSXi5
n7s70HTBrp6k/M/2gcyAtloNUgcAsYNBUqSBRpZQBPu86yNo4D7nus1T1eYM7SkS
LZhFwGuBDJSYHNQNH4/jT5/BTT2qNe7BGTd+xQnYCNjHQRNfnFajojidQ9mKcaK3
sMRgnaeIbNB1TmWbpiCN/Ety4r3Z1Mp2EBJ/6LQCPUK/Xg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:02:21 2026 by rpki-client