Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/BBCGChbmpWbWTnRjf2YyynfMDfM.roa
File: BBCGChbmpWbWTnRjf2YyynfMDfM.roa (raw, json)
Hash identifier: YKPHJ8UNqvysKHzkjQGZM5jmrGfUfAYcR2ElTKJRVT0=
Subject key identifier: 04:10:86:0A:16:E6:A5:66:D6:4E:74:63:7F:66:32:CA:77:CC:0D:F3
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019CD82D4614949CDD8A45F26EC953F4EAB6
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/BBCGChbmpWbWTnRjf2YyynfMDfM.roa
Signing time: Tue 10 Mar 2026 14:36:11 +0000
ROA not before: Tue 10 Mar 2026 14:36:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214953
IP address blocks: 2a0c:9a46:1900::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d8:2d:46:14:94:9c:dd:8a:45:f2:6e:c9:53:f4:ea:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Mar 10 14:36:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0410860a16e6a566d64e74637f6632ca77cc0df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:97:20:27:65:62:55:3c:a0:00:10:ab:3a:d6:
61:f3:2b:c2:ab:47:bc:e7:d9:98:c4:c6:c3:8b:d6:
08:51:d7:dd:1f:7a:7b:73:57:18:94:a3:7f:bf:52:
11:76:71:3f:68:17:b5:1b:b3:af:ed:f1:11:16:9f:
65:29:45:1e:9d:6e:a3:2c:21:07:e7:07:96:26:98:
f4:14:17:8f:80:cf:26:f3:21:46:3d:c8:0f:b6:bc:
32:80:c3:e4:cf:46:9c:6c:6b:84:2c:e5:b2:2e:ec:
a5:31:0b:25:da:f3:e0:10:f9:8c:e5:c2:61:37:d2:
60:2f:84:0c:bd:8f:4d:a4:6c:82:e8:a7:05:c7:d4:
75:a5:60:f3:77:49:d0:7d:58:e8:25:2a:e6:a5:bc:
37:f3:45:c2:3c:74:85:e3:57:28:33:ad:31:c2:f4:
10:ce:30:35:9a:86:53:cf:ca:b5:59:33:e5:9c:0f:
04:37:a3:b2:82:09:e1:3a:b3:9d:4b:ac:96:8c:75:
a3:26:49:df:af:88:8d:34:a3:8b:4d:b5:39:dc:fe:
34:bf:e5:51:26:be:c5:5b:cc:c0:5f:05:f8:6b:6b:
95:35:9b:43:f5:cd:e3:c6:cf:19:a6:bb:7b:5d:93:
4f:78:a8:d6:aa:cb:c6:84:04:38:73:97:70:a6:1e:
43:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:10:86:0A:16:E6:A5:66:D6:4E:74:63:7F:66:32:CA:77:CC:0D:F3
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/BBCGChbmpWbWTnRjf2YyynfMDfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a46:1900::/40
Signature Algorithm: sha256WithRSAEncryption
25:52:dd:a5:5e:80:37:e7:c5:e9:6a:cf:eb:f2:7e:8a:28:7b:
75:f4:14:97:87:84:27:23:ce:ea:d9:79:fa:c8:7c:7f:c0:87:
7b:d0:bd:17:55:89:5a:10:ed:96:73:8e:e0:1b:7e:2b:03:e3:
21:5c:53:d1:62:d6:4c:d5:5e:c2:ae:2d:00:1d:be:91:26:8c:
cf:17:55:31:35:49:4b:5c:6d:cc:5c:3b:57:ea:3c:d2:37:fe:
cc:a9:e5:37:87:87:67:99:b9:21:18:46:74:7d:6b:94:b0:f9:
25:dc:00:2c:ee:89:59:e4:63:95:c7:2b:37:63:e5:18:11:ad:
ee:cb:37:cb:8b:f7:7f:56:ce:71:f1:d2:78:88:df:5c:15:78:
a3:46:f5:c5:8e:79:99:3f:45:f0:ae:6e:90:88:d7:9a:37:42:
60:74:90:4d:9e:51:d0:b0:b0:f7:51:fd:8c:9b:b4:e8:84:2e:
e1:98:6a:a9:89:12:de:ce:cb:3a:73:b4:f3:a4:c8:44:07:5d:
70:c3:00:fe:1e:a7:04:0b:49:28:a9:53:4d:8d:b4:b4:0e:cf:
3b:98:09:3d:dd:23:1e:b8:6a:9c:80:d6:ce:de:de:8a:c8:ac:
e5:31:c2:d6:ad:55:76:9d:6a:63:df:a4:a9:c8:9c:4c:86:b3:
50:c6:14:ec
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZzYLUYUlJzdikXybslT9Oq2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjYwMzEwMTQzNjExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNDEwODYwYTE2ZTZhNTY2ZDY0ZTc0NjM3ZjY2MzJjYTc3Y2MwZGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JcgJ2ViVTygABCrOtZh8yvCq0e8
59mYxMbDi9YIUdfdH3p7c1cYlKN/v1IRdnE/aBe1G7Ov7fERFp9lKUUenW6jLCEH
5weWJpj0FBePgM8m8yFGPcgPtrwygMPkz0acbGuELOWyLuylMQsl2vPgEPmM5cJh
N9JgL4QMvY9NpGyC6KcFx9R1pWDzd0nQfVjoJSrmpbw380XCPHSF41coM60xwvQQ
zjA1moZTz8q1WTPlnA8EN6OyggnhOrOdS6yWjHWjJknfr4iNNKOLTbU53P40v+VR
Jr7FW8zAXwX4a2uVNZtD9c3jxs8Zprt7XZNPeKjWqsvGhAQ4c5dwph5DNwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFAQQhgoW5qVm1k50Y39mMsp3zA3zMB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvQkJDR0NoYm1wV2JXVG5SamYyWXl5bmZNRGZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgyaRhkw
DQYJKoZIhvcNAQELBQADggEBACVS3aVegDfnxelqz+vyfoooe3X0FJeHhCcjzurZ
efrIfH/Ah3vQvRdViVoQ7ZZzjuAbfisD4yFcU9Fi1kzVXsKuLQAdvpEmjM8XVTE1
SUtcbcxcO1fqPNI3/syp5TeHh2eZuSEYRnR9a5Sw+SXcACzuiVnkY5XHKzdj5RgR
re7LN8uL939WznHx0niI31wVeKNG9cWOeZk/RfCubpCI15o3QmB0kE2eUdCwsPdR
/YybtOiELuGYaqmJEt7OyzpztPOkyEQHXXDDAP4epwQLSSipU02NtLQOzzuYCT3d
Ix64apyA1s7e3orIrOUxwtatVXadamPfpKnInEyGs1DGFOw=
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:04:13 2026 by rpki-client