Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/toBgBy-wXt9ztACvTMgMCKihycU.roa
File: toBgBy-wXt9ztACvTMgMCKihycU.roa (raw, json)
Hash identifier: yb1GpybJZ+YI1CnQBecKiIQImUYJAW98skB9t8+FlLI=
Subject key identifier: B6:80:60:07:2F:B0:5E:DF:73:B4:00:AF:4C:C8:0C:08:A8:A1:C9:C5
Certificate issuer: /CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Certificate serial: 019CFCBC12252E9A753928068F2C798B5699
Authority key identifier: F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/toBgBy-wXt9ztACvTMgMCKihycU.roa
Signing time: Tue 17 Mar 2026 16:58:29 +0000
ROA not before: Tue 17 Mar 2026 16:58:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61049
IP address blocks: 2a00:19e9::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fc:bc:12:25:2e:9a:75:39:28:06:8f:2c:79:8b:56:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Validity
Not Before: Mar 17 16:58:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b68060072fb05edf73b400af4cc80c08a8a1c9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:12:41:f6:d0:26:e9:91:8b:e5:89:a2:38:a1:
c1:b3:61:bd:65:80:d5:a6:72:78:78:c4:f6:d2:17:
d9:d7:7f:9a:0b:56:c5:bf:d8:bb:3d:81:31:6f:a5:
aa:fa:b7:d7:8a:51:ed:c3:10:b7:4b:69:8d:d1:0d:
0a:62:51:5e:36:11:38:e0:9a:45:a8:b9:f9:93:1a:
92:c3:43:44:02:c3:36:e8:01:d0:e2:a2:39:dc:89:
14:24:7b:3b:c3:24:d6:45:c8:11:a4:87:83:36:10:
1c:e0:54:5f:3a:b3:86:bf:2b:85:9d:a0:9c:78:1b:
d1:50:22:6b:b5:1d:77:f5:dc:8c:7f:55:31:1d:77:
e7:88:87:d7:34:1b:10:a6:51:e9:19:e2:a8:0e:b3:
f6:6b:0f:80:ed:51:63:bf:fa:30:b4:48:09:9c:76:
a8:5a:e2:20:52:93:3f:fc:4a:2e:0b:62:14:0c:36:
b7:fe:28:c1:70:1b:25:07:9f:84:9f:ad:62:d1:69:
03:2f:80:0e:df:d0:15:e1:a5:66:20:80:bf:fd:16:
fc:e5:b1:08:07:37:d6:d2:6e:65:45:7a:f8:01:11:
82:99:de:33:65:20:1e:6b:17:73:6b:cc:39:ca:9b:
3e:97:b2:43:43:cb:28:8f:6d:99:2a:d1:93:c5:d1:
76:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:80:60:07:2F:B0:5E:DF:73:B4:00:AF:4C:C8:0C:08:A8:A1:C9:C5
X509v3 Authority Key Identifier:
keyid:F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/toBgBy-wXt9ztACvTMgMCKihycU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:19e9::/32
Signature Algorithm: sha256WithRSAEncryption
6d:a9:cc:c5:c6:b5:f8:6f:4f:87:f1:e4:e9:28:53:0a:61:3e:
b2:32:fd:43:75:bf:94:24:1a:04:e8:fb:0f:b8:55:b9:80:de:
a1:d5:fd:a5:8b:fa:cb:f0:46:71:b1:7b:29:49:c0:55:54:72:
88:c6:83:f6:54:11:86:5b:0f:69:32:d9:3e:13:27:bc:3b:e4:
ef:9c:92:e7:05:dc:7a:52:f8:fd:65:53:ad:c8:f5:7e:00:01:
63:d7:8f:4a:e4:a4:c0:1f:46:39:aa:fa:3c:0d:70:3d:e4:ee:
ee:8a:ca:ea:e2:74:12:93:be:8f:2a:f8:01:46:0e:c9:4f:32:
70:ac:9d:fc:36:29:a6:43:02:6b:73:74:06:fb:64:04:d6:10:
65:4e:a1:0a:f2:bb:7f:23:3d:13:af:1a:3a:1a:0c:5a:18:5b:
e1:6b:f9:aa:99:2c:83:45:53:4e:86:71:4b:9e:d0:df:e1:89:
af:c3:f7:76:1e:50:12:e9:07:49:5e:78:8d:e8:fa:99:03:b7:
cc:3d:26:4d:fc:c0:b8:e8:b1:80:2b:b4:4d:0e:eb:b5:38:ef:
bf:36:6f:ff:f4:0e:86:cf:6d:d2:51:6d:db:a0:76:8f:dd:4c:
ea:82:2f:2e:8a:a3:4a:f1:c8:80:81:68:6d:7c:df:82:c9:9e:
de:f8:e4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:03:14 2026 by rpki-client