Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/wZKJafRQUH7w1pAW4XBFTzulaa0.roa
File: wZKJafRQUH7w1pAW4XBFTzulaa0.roa (raw, json)
Hash identifier: V88CXzBPXhuq0AzWplua9vIAN1+ENxD5NbNY+fG2cr0=
Subject key identifier: C1:92:89:69:F4:50:50:7E:F0:D6:90:16:E1:70:45:4F:3B:A5:69:AD
Certificate issuer: /CN=bfe9f12c96ba20683aff5c958bfad8e4c577f7fe
Certificate serial: 019EB937F0C1A5761A98761A37A3C67BEB50
Authority key identifier: BF:E9:F1:2C:96:BA:20:68:3A:FF:5C:95:8B:FA:D8:E4:C5:77:F7:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/wZKJafRQUH7w1pAW4XBFTzulaa0.roa
Signing time: Fri 12 Jun 2026 00:25:11 +0000
ROA not before: Fri 12 Jun 2026 00:25:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14789
IP address blocks: 2a09:bac0:237::/48 maxlen: 48
2a09:bac0:431::/48 maxlen: 48
2a09:bac0:439::/48 maxlen: 48
2a09:bac0:450::/48 maxlen: 48
2a09:bac0:477::/48 maxlen: 48
2a09:bac0:483::/48 maxlen: 48
2a09:bac0:545::/48 maxlen: 48
2a09:bac0:566::/48 maxlen: 48
2a09:bac0:574::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:37:f0:c1:a5:76:1a:98:76:1a:37:a3:c6:7b:eb:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe9f12c96ba20683aff5c958bfad8e4c577f7fe
Validity
Not Before: Jun 12 00:25:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1928969f450507ef0d69016e170454f3ba569ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:53:37:b7:8a:74:ca:59:4c:91:ec:eb:35:eb:
5c:82:83:a8:ce:7a:a4:82:fa:81:70:11:76:a4:3f:
b7:96:0f:bb:d8:ca:60:1e:92:ee:6a:c3:28:32:3d:
82:01:a7:e4:2f:ad:b5:9b:26:3f:4f:ab:c3:b9:d5:
52:90:2d:6b:96:9b:36:1c:03:78:bd:43:19:13:43:
38:de:4b:c0:18:52:1f:ca:03:5c:13:23:3e:47:3e:
f3:53:ec:97:0e:44:bb:1d:8c:a6:6f:22:f5:c7:13:
8b:96:20:e9:03:e1:af:9e:05:06:69:8c:83:6d:7c:
fa:ab:59:a4:16:12:e6:1d:28:35:70:61:bd:46:68:
44:7b:fd:18:8b:eb:e0:df:ce:89:f9:5f:5f:2b:0c:
34:8b:00:ce:9a:80:01:be:ff:b5:44:d9:34:1a:60:
0a:3c:8f:c3:d6:34:31:77:aa:69:c8:b5:5a:7a:7b:
b0:7f:64:72:b5:d3:dc:d7:36:47:92:a3:35:8e:7c:
cb:f4:df:50:8c:3a:c5:c3:94:c1:b1:1f:37:ff:38:
b5:c4:69:9a:3f:9a:f5:11:41:f7:8e:52:2a:88:6e:
45:8b:f4:c5:0d:eb:2e:f0:99:e7:90:2d:06:ef:74:
f5:05:58:1f:64:5a:11:25:34:f1:c7:a2:5f:cf:c1:
b1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:92:89:69:F4:50:50:7E:F0:D6:90:16:E1:70:45:4F:3B:A5:69:AD
X509v3 Authority Key Identifier:
keyid:BF:E9:F1:2C:96:BA:20:68:3A:FF:5C:95:8B:FA:D8:E4:C5:77:F7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/wZKJafRQUH7w1pAW4XBFTzulaa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:bac0:237::/48
2a09:bac0:431::/48
2a09:bac0:439::/48
2a09:bac0:450::/48
2a09:bac0:477::/48
2a09:bac0:483::/48
2a09:bac0:545::/48
2a09:bac0:566::/48
2a09:bac0:574::/48
Signature Algorithm: sha256WithRSAEncryption
3d:12:9f:61:0c:6c:45:d5:09:33:a4:d2:e8:3f:b1:1e:46:e6:
31:08:c7:b2:2f:dd:70:c6:4d:e9:e2:0f:be:71:c1:da:9a:15:
5e:ff:bd:e3:f6:5f:17:38:09:69:47:ab:d0:59:3f:1e:db:dd:
68:88:db:56:d9:35:e3:de:be:dc:ea:ae:4e:a2:b4:72:44:4c:
8c:96:67:70:e4:bd:b2:ba:28:87:54:2c:45:ab:2b:a2:d9:85:
d1:31:ac:05:4b:e2:0b:6f:95:26:22:f9:b0:91:54:b5:d6:1d:
cf:cd:32:98:2d:29:0b:23:d6:8c:d3:f8:87:2a:96:3a:8a:f4:
e6:00:6c:8a:78:b4:76:d4:00:f4:42:a7:10:86:1a:1c:49:1d:
1a:6a:50:38:a1:ce:b6:52:70:b2:56:28:84:99:75:62:df:21:
c4:85:e5:86:5c:45:19:76:45:63:be:b0:8e:9f:81:8f:6a:ee:
3c:bb:0e:54:c9:d5:70:f9:bf:90:51:57:06:00:bd:36:21:8e:
ff:df:b8:9a:7a:97:65:6f:11:6a:a5:4c:be:e9:24:d9:bb:a9:
2e:b6:0c:56:9c:c8:2c:5f:20:2f:ab:d3:29:6f:53:ff:c4:25:
34:2d:51:ca:b9:a8:c8:b5:69:ec:d7:c9:4f:39:e1:11:70:b8:
66:54:e0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:41:11 2026 by rpki-client