Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/IAkcC9KrcbWm55xe2tY_v7n5r70.roa
File: IAkcC9KrcbWm55xe2tY_v7n5r70.roa (raw, json)
Hash identifier: M34O2i02aXxsnZybV6t3NKi7N8X7qbuGEQ2GkT7DuNk=
Subject key identifier: 20:09:1C:0B:D2:AB:71:B5:A6:E7:9C:5E:DA:D6:3F:BF:B9:F9:AF:BD
Certificate issuer: /CN=bfe9f12c96ba20683aff5c958bfad8e4c577f7fe
Certificate serial: 019C20DC8B6FC9908CE9F62B66661AD07CFD
Authority key identifier: BF:E9:F1:2C:96:BA:20:68:3A:FF:5C:95:8B:FA:D8:E4:C5:77:F7:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/IAkcC9KrcbWm55xe2tY_v7n5r70.roa
Signing time: Tue 03 Feb 2026 00:17:30 +0000
ROA not before: Tue 03 Feb 2026 00:17:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14789
IP address blocks: 2a09:bac0:439::/48 maxlen: 48
2a09:bac0:450::/48 maxlen: 48
2a09:bac0:477::/48 maxlen: 48
2a09:bac0:483::/48 maxlen: 48
2a09:bac0:566::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:20:dc:8b:6f:c9:90:8c:e9:f6:2b:66:66:1a:d0:7c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe9f12c96ba20683aff5c958bfad8e4c577f7fe
Validity
Not Before: Feb 3 00:17:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=20091c0bd2ab71b5a6e79c5edad63fbfb9f9afbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4b:5f:c4:67:d3:6d:56:c2:04:20:fa:5f:8a:
b2:4c:d6:4c:6d:df:e6:a1:37:d5:92:f7:7e:72:2f:
0e:a3:a5:17:80:f6:16:e9:ba:14:c2:50:90:90:19:
7b:bd:62:75:44:a7:b0:df:31:ba:78:0e:24:33:92:
0a:79:b2:4e:91:68:3a:f8:6d:14:05:35:c8:c1:f7:
69:ca:9c:2f:9c:d8:5e:8f:b1:34:5a:82:0d:b3:6f:
95:d8:5c:c7:92:64:8c:fb:4d:17:12:59:bd:ac:b3:
0e:a5:59:39:b3:18:22:d0:33:f4:d4:a6:d9:ad:3e:
08:67:eb:9e:7b:5b:e4:a8:24:b3:66:21:2f:23:e0:
d1:ab:c9:31:b3:95:ab:f1:6c:7a:e3:98:71:30:e6:
fe:e0:16:6e:d4:cc:75:68:7e:72:c6:38:1e:87:17:
b8:d9:e9:61:c2:5f:ed:da:6e:69:ff:ef:da:28:cf:
70:e0:95:66:df:e4:97:63:0f:f8:dc:11:89:07:81:
ea:bc:f6:8c:7e:32:05:10:f5:f6:d2:87:9b:ca:d1:
fb:f5:e3:bf:eb:9b:3b:7b:77:69:1a:da:5a:51:41:
14:fb:52:43:51:36:1e:2f:37:a8:c8:8d:92:72:b9:
73:05:ab:3b:ce:80:5a:f6:1b:e4:e9:53:bf:c5:55:
5f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:09:1C:0B:D2:AB:71:B5:A6:E7:9C:5E:DA:D6:3F:BF:B9:F9:AF:BD
X509v3 Authority Key Identifier:
keyid:BF:E9:F1:2C:96:BA:20:68:3A:FF:5C:95:8B:FA:D8:E4:C5:77:F7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/IAkcC9KrcbWm55xe2tY_v7n5r70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:bac0:439::/48
2a09:bac0:450::/48
2a09:bac0:477::/48
2a09:bac0:483::/48
2a09:bac0:566::/48
Signature Algorithm: sha256WithRSAEncryption
76:91:cf:9e:54:8a:1f:63:44:d7:19:d2:d5:9a:f7:50:c1:14:
00:6e:2e:44:ca:2c:f2:7e:0d:45:62:8c:e0:b7:aa:62:96:70:
f2:51:69:6b:da:60:fb:a4:3c:e4:4a:55:08:50:c6:ea:e8:da:
94:66:0b:44:91:b2:8d:8a:b2:24:4c:59:f6:c5:4b:62:4b:db:
eb:98:b6:6c:1e:e2:05:bb:7a:03:3c:db:c4:34:9c:0f:1f:c7:
d9:55:fb:90:d1:fe:c6:5a:1a:13:1e:46:2a:40:19:21:aa:03:
71:2c:b1:b4:0b:f6:ce:eb:92:38:2e:f9:37:d9:97:4e:55:a5:
f2:ae:74:91:c3:05:3d:6e:16:c0:47:55:be:91:bc:9c:4a:22:
42:d6:cc:49:3b:b5:77:b6:ca:36:ed:7a:b6:70:28:6b:c0:35:
00:9f:6b:bf:9a:01:18:71:d9:00:7b:0d:59:9e:f0:09:f4:a5:
8e:06:19:26:ea:ab:42:24:c6:0a:4c:cc:17:51:f8:ab:64:7a:
90:09:94:65:cd:5a:7f:04:bb:5a:07:16:e7:6c:eb:fb:d6:be:
e0:4d:04:7d:49:f6:46:ea:06:23:79:71:89:ad:61:10:b9:c8:
4d:81:47:34:59:e1:cc:8b:48:24:bf:a6:71:e1:e6:d8:c9:06:
b9:c6:7f:ae
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAZwg3ItvyZCM6fYrZmYa0Hz9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZTlmMTJjOTZiYTIwNjgzYWZmNWM5NThiZmFkOGU0YzU3
N2Y3ZmUwHhcNMjYwMjAzMDAxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDA5MWMwYmQyYWI3MWI1YTZlNzljNWVkYWQ2M2ZiZmI5ZjlhZmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUtfxGfTbVbCBCD6X4qyTNZMbd/m
oTfVkvd+ci8Oo6UXgPYW6boUwlCQkBl7vWJ1RKew3zG6eA4kM5IKebJOkWg6+G0U
BTXIwfdpypwvnNhej7E0WoINs2+V2FzHkmSM+00XElm9rLMOpVk5sxgi0DP01KbZ
rT4IZ+uee1vkqCSzZiEvI+DRq8kxs5Wr8Wx645hxMOb+4BZu1Mx1aH5yxjgehxe4
2elhwl/t2m5p/+/aKM9w4JVm3+SXYw/43BGJB4HqvPaMfjIFEPX20oebytH79eO/
65s7e3dpGtpaUUEU+1JDUTYeLzeoyI2ScrlzBas7zoBa9hvk6VO/xVVf0wIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFCAJHAvSq3G1puecXtrWP7+5+a+9MB8GA1UdIwQY
MBaAFL/p8SyWuiBoOv9clYv62OTFd/f+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdi1ueExKYTZJR2c2XzF5Vmlfclk1TVYzOV80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy80Y2U1NTgtNjNkNi00NjlhLWJiNWQt
Zjc4MjBjNWU5NjZhLzEvSUFrY0M5S3JjYldtNTV4ZTJ0WV92N241cjcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy80Y2U1NTgtNjNkNi00NjlhLWJiNWQtZjc4MjBjNWU5NjZh
LzEvdi1ueExKYTZJR2c2XzF5Vmlfclk1TVYzOV80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAzBAIAAjAtAwcAKgm6wAQ5
AwcAKgm6wARQAwcAKgm6wAR3AwcAKgm6wASDAwcAKgm6wAVmMA0GCSqGSIb3DQEB
CwUAA4IBAQB2kc+eVIofY0TXGdLVmvdQwRQAbi5Eyizyfg1FYozgt6pilnDyUWlr
2mD7pDzkSlUIUMbq6NqUZgtEkbKNirIkTFn2xUtiS9vrmLZsHuIFu3oDPNvENJwP
H8fZVfuQ0f7GWhoTHkYqQBkhqgNxLLG0C/bO65I4Lvk32ZdOVaXyrnSRwwU9bhbA
R1W+kbycSiJC1sxJO7V3tso27Xq2cChrwDUAn2u/mgEYcdkAew1ZnvAJ9KWOBhkm
6qtCJMYKTMwXUfirZHqQCZRlzVp/BLtaBxbnbOv71r7gTQR9SfZG6gYjeXGJrWEQ
uchNgUc0WeHMi0gkv6Zx4ebYyQa5xn+u
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:35:56 2026 by rpki-client