Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/0xTXzw65S6SAKbF2ypbnQR8flBY.roa
File: 0xTXzw65S6SAKbF2ypbnQR8flBY.roa (raw, json)
Hash identifier: KPGmo03a7ngvQ5hpXQozCZzOmDre3xu+doPSkJFQPEI=
Subject key identifier: D3:14:D7:CF:0E:B9:4B:A4:80:29:B1:76:CA:96:E7:41:1F:1F:94:16
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019DB5846900FE72DD3F82FA08C466247145
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/0xTXzw65S6SAKbF2ypbnQR8flBY.roa
Signing time: Wed 22 Apr 2026 14:07:26 +0000
ROA not before: Wed 22 Apr 2026 14:07:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199387
IP address blocks: 2a0e:4007:fff2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b5:84:69:00:fe:72:dd:3f:82:fa:08:c4:66:24:71:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Apr 22 14:07:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d314d7cf0eb94ba48029b176ca96e7411f1f9416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:52:8a:9a:d5:b9:90:50:b7:17:f1:a4:af:d3:
26:3b:b7:92:c7:14:cd:84:73:51:d4:c3:5d:bb:64:
4a:37:e4:64:ff:bb:b3:a8:8c:30:09:01:ae:66:fc:
11:7f:2c:27:8c:97:f2:d1:76:91:7e:b2:67:86:42:
8c:bd:e9:a9:a7:dc:6a:97:f4:e1:3a:99:0d:08:6e:
3b:24:fc:71:96:f2:ef:13:e8:33:11:84:7b:07:ec:
e3:09:be:61:cd:0c:a0:b4:28:cf:df:eb:09:ac:d1:
8d:a0:0c:b8:40:33:9c:e5:43:14:be:d3:91:07:fd:
ab:0e:dd:3a:6e:1c:71:78:dc:34:8b:b8:0f:ee:c8:
c1:71:4e:b3:5b:9b:e6:11:d6:0a:6d:6e:5c:56:9c:
8f:49:44:91:11:f1:3a:47:8c:19:8d:22:e4:6b:24:
43:8d:27:56:77:0a:da:a1:74:ad:51:6f:8b:6d:7b:
70:d3:b7:7c:bd:4a:33:13:01:b4:13:44:83:fc:4f:
74:92:14:2d:37:38:c6:57:ca:b6:00:4d:6e:51:04:
a5:cf:4d:c4:07:b2:27:73:e0:32:1c:62:90:e5:65:
05:d7:76:e8:aa:4c:03:f6:ee:7c:ed:2c:3c:fd:b5:
4f:30:7d:02:bb:d3:b3:30:6d:c0:a4:56:f5:13:e5:
28:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:14:D7:CF:0E:B9:4B:A4:80:29:B1:76:CA:96:E7:41:1F:1F:94:16
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/0xTXzw65S6SAKbF2ypbnQR8flBY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4007:fff2::/48
Signature Algorithm: sha256WithRSAEncryption
c0:a3:d3:37:a1:92:e5:7f:51:60:a4:83:80:0a:c6:5b:68:c7:
2b:61:14:cb:87:8b:72:b9:30:3f:24:b9:d6:dc:a1:04:42:0f:
f0:af:bd:fe:be:4a:7c:18:12:9e:47:c3:da:8e:fd:b2:af:ff:
ac:bd:8b:71:bd:b9:ed:93:c2:5b:50:58:e3:c8:5e:1a:30:e9:
e6:76:5b:97:cc:85:f3:b5:6d:2b:61:60:0d:c9:4c:fc:9b:be:
83:7e:43:4a:1b:8f:c4:97:94:00:30:5c:8c:91:da:9c:9e:75:
87:65:02:8d:1c:40:58:20:01:85:aa:88:4b:3c:32:49:e1:d1:
fd:cc:83:d8:b9:4a:06:ed:6d:67:94:1b:36:fe:47:23:48:38:
de:59:40:2c:77:52:aa:4a:06:91:33:3c:b9:02:e8:3c:5a:19:
5d:ae:17:4f:87:c2:b4:a9:a6:3a:7c:91:78:a3:70:b9:14:66:
b8:41:45:67:a0:5f:fe:c5:2c:9e:ce:03:67:b0:14:b5:4c:58:
94:70:dc:0a:22:85:6e:38:a3:14:00:4a:6e:6b:a4:0c:2f:7d:
da:07:6e:15:d8:e7:7e:65:b9:e3:af:94:30:1a:49:e5:7a:43:
a1:66:26:c9:f6:b8:21:59:68:2c:82:27:08:22:aa:db:ec:c3:
4d:15:5e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:17:05 2026 by rpki-client