Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/bQUhLLeZD5_BVPTEU5OZ6GVitEE.roa
File: bQUhLLeZD5_BVPTEU5OZ6GVitEE.roa (raw, json)
Hash identifier: mcos7VIbsJDQ+g0yOJO5Wl5/6LXCM52NILj4tcgFTes=
Subject key identifier: 6D:05:21:2C:B7:99:0F:9F:C1:54:F4:C4:53:93:99:E8:65:62:B4:41
Certificate issuer: /CN=07594568618898a9fb720ae09bed0ed1be4f857e
Certificate serial: 01A17E80157503F60A49568A521ACAFED8DF
Authority key identifier: 07:59:45:68:61:88:98:A9:FB:72:0A:E0:9B:ED:0E:D1:BE:4F:85:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/bQUhLLeZD5_BVPTEU5OZ6GVitEE.roa
Signing time: Tue 27 Oct 2026 17:54:45 +0000
ROA not before: Tue 27 Oct 2026 17:54:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207208
IP address blocks: 2a11:b100:e100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:80:15:75:03:f6:0a:49:56:8a:52:1a:ca:fe:d8:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07594568618898a9fb720ae09bed0ed1be4f857e
Validity
Not Before: Oct 27 17:54:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d05212cb7990f9fc154f4c4539399e86562b441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5c:2b:ce:d3:60:7d:8a:0c:16:81:95:bd:54:
86:cd:73:82:3e:84:d2:a5:46:64:81:ac:d2:5b:12:
db:98:81:21:70:6f:ef:af:db:38:15:f4:6f:88:86:
57:a8:ec:b6:5a:42:21:e5:cb:1c:9d:44:91:04:20:
f9:68:32:da:92:cd:e3:bf:b1:f1:72:dc:e4:26:5f:
12:af:6c:4e:b0:11:a7:34:5d:16:13:54:9b:01:7f:
0f:23:5e:91:7d:61:cd:04:1d:2e:e2:64:15:1f:0b:
be:42:b3:de:ec:cb:ed:de:2a:76:9b:18:b6:74:f3:
0b:eb:64:55:f8:76:57:4d:ab:de:a1:16:9e:e5:b2:
43:1e:6f:13:7b:4e:7e:f3:1f:6b:0e:03:0a:d5:2f:
90:94:ea:e5:d9:c2:8e:25:ab:5a:e0:ba:9a:46:5e:
58:1a:16:bc:98:f2:87:77:c6:80:eb:70:04:b2:ba:
4d:50:6a:0a:a1:46:51:08:5d:d8:0c:ae:80:64:19:
89:af:14:ad:0d:d1:34:d7:3a:75:f8:42:9e:a3:c7:
f4:1c:9b:a1:f2:2d:4a:02:20:bc:01:94:ce:0d:41:
dc:64:48:3b:9e:26:a0:06:b1:eb:79:b3:65:1c:a9:
b1:90:76:28:9d:d6:1d:e9:67:8a:06:6a:03:f8:46:
9b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:05:21:2C:B7:99:0F:9F:C1:54:F4:C4:53:93:99:E8:65:62:B4:41
X509v3 Authority Key Identifier:
keyid:07:59:45:68:61:88:98:A9:FB:72:0A:E0:9B:ED:0E:D1:BE:4F:85:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1lFaGGImKn7cgrgm-0O0b5PhX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/bQUhLLeZD5_BVPTEU5OZ6GVitEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9fada1-60f9-4ef7-81d8-1eccbe67c661/1/B1lFaGGImKn7cgrgm-0O0b5PhX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:b100:e100::/48
Signature Algorithm: sha256WithRSAEncryption
99:ad:fa:21:78:fa:2a:b6:fb:38:34:bd:1e:7f:15:99:39:a6:
d7:11:ae:29:8a:3d:97:ec:ec:12:41:89:20:12:6a:c6:ad:b5:
14:a6:02:2e:0e:12:b0:57:45:cf:8b:0e:ab:fa:b1:e1:b9:0f:
d2:df:19:7d:51:d6:bb:bc:98:3e:b2:57:ca:02:87:d7:77:ea:
15:32:94:4c:23:bc:92:80:89:db:b5:90:0c:28:0d:04:18:58:
b4:fb:91:0e:e0:5c:c5:f2:05:83:ef:ba:68:11:72:76:a1:42:
09:22:9e:7b:d6:ae:9f:8b:4f:4d:67:85:61:ac:4d:d2:cd:b4:
22:03:b2:7c:cd:a9:3c:cf:81:b4:99:d7:21:7d:10:10:70:63:
28:bc:c8:d9:f0:5a:e5:7d:02:9f:42:f8:cf:60:9c:7c:9a:44:
2f:b4:60:b4:03:a3:0a:1e:ed:0e:7e:a1:4e:36:24:5a:d2:14:
3f:c6:e7:50:ca:22:07:21:6f:b6:41:82:1d:ff:7c:d8:be:b1:
13:60:3e:47:ab:87:d9:e1:48:9b:76:c7:f2:f7:14:b2:97:c2:
ed:7a:7c:8e:d7:26:d2:7f:35:a5:fb:dd:8b:54:f4:ac:20:3d:
ab:b0:8a:27:8c:dd:34:56:8e:9d:34:48:29:98:17:f6:b5:29:
84:68:d7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:04:53 2026 by rpki-client