Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/BvWi_prgpQ4xmsTSYkxqDymPSk8.roa
File: BvWi_prgpQ4xmsTSYkxqDymPSk8.roa (raw, json)
Hash identifier: kUoDqEmFZtDE3rPlyTOF+g7wShU2q8sLjiAAqE6gNkI=
Subject key identifier: 06:F5:A2:FE:9A:E0:A5:0E:31:9A:C4:D2:62:4C:6A:0F:29:8F:4A:4F
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A0FDD29345C390FCE8688D85AF5CAFBF84
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/BvWi_prgpQ4xmsTSYkxqDymPSk8.roa
Signing time: Fri 02 Oct 2026 18:13:50 +0000
ROA not before: Fri 02 Oct 2026 18:13:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 2a10:fa80:3::/48 maxlen: 48
2a10:fa80:19::/48 maxlen: 48
2a10:fa81:1800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 21:13:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fd:d2:93:45:c3:90:fc:e8:68:8d:85:af:5c:af:bf:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Oct 2 18:13:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06f5a2fe9ae0a50e319ac4d2624c6a0f298f4a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7f:4e:bd:47:b8:56:9f:f0:bd:e2:b1:e3:bf:
ac:14:9e:eb:bb:8e:38:cc:bd:a9:89:08:97:f8:1d:
a7:f6:79:9a:30:9d:77:7f:02:05:93:9c:d9:c7:eb:
4c:6b:72:d3:c2:6e:dc:54:2d:97:30:49:e1:28:68:
73:da:37:f7:05:c7:1b:74:e9:0f:92:22:0b:2f:19:
fe:b3:01:4b:0d:b1:ce:72:06:c2:14:6d:ca:47:de:
5d:18:56:06:38:1d:b6:62:42:30:24:a3:00:bc:a1:
c2:31:97:a6:75:45:c9:be:f9:a5:1d:09:ee:5d:c0:
52:18:9a:0b:b8:10:b9:93:84:6d:9e:6b:9b:6d:d1:
a7:a2:04:eb:22:a0:e6:c5:70:1b:7c:f6:63:a5:72:
b1:7b:0c:ae:e6:8c:7d:79:cb:a2:fc:41:35:ba:c6:
df:16:49:37:74:e6:e8:8f:eb:bd:0a:0b:b8:bc:fc:
4b:e0:e4:aa:36:f9:43:5d:ae:81:b8:a6:e4:20:b2:
2a:9d:b3:1b:51:ab:5e:06:7f:c2:d1:ad:c4:53:87:
59:fd:75:8c:eb:13:d3:56:4d:84:1e:fd:74:06:04:
61:a9:de:dd:93:80:4d:92:7d:d1:a9:91:3c:86:90:
0d:18:62:72:8a:45:f0:72:a0:30:c2:cd:9e:93:ec:
5b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F5:A2:FE:9A:E0:A5:0E:31:9A:C4:D2:62:4C:6A:0F:29:8F:4A:4F
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/BvWi_prgpQ4xmsTSYkxqDymPSk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa80:3::/48
2a10:fa80:19::/48
2a10:fa81:1800::/40
Signature Algorithm: sha256WithRSAEncryption
79:1b:e6:90:c6:6a:1d:bb:12:7e:ca:38:d2:1c:b0:e2:99:d0:
9a:ff:58:1f:fd:69:33:95:d3:29:98:c9:df:85:b4:5b:46:44:
7a:2c:ad:4a:f9:fb:38:d2:47:e3:cd:3b:74:55:98:bb:5b:4b:
ce:09:09:ad:ad:de:3a:8e:22:1e:5a:89:0b:0d:61:c2:f1:af:
46:d3:c6:7c:21:d5:73:e7:49:29:98:eb:0d:78:2c:f4:85:51:
bc:53:d6:a2:cb:2a:39:9a:b7:78:c4:86:0e:ea:dd:7d:ed:c1:
39:ff:8e:fe:60:3b:6d:b8:e3:46:eb:58:1c:11:16:9a:90:fd:
81:a0:7b:1d:eb:f5:09:d1:e2:f9:1a:0e:aa:a2:b5:e8:19:6e:
0d:1b:be:e4:0e:22:47:3e:8d:68:94:ad:34:d4:20:85:7e:06:
90:54:e0:c7:ce:39:9e:86:ac:a9:0b:a0:e6:85:e7:51:c0:29:
7e:73:46:28:41:0e:7d:44:92:e8:54:06:2c:53:53:c3:a4:60:
1a:6e:77:7b:b0:86:c8:d5:06:6f:42:81:8f:b1:a4:9e:63:e2:
60:e0:e5:00:12:a1:f3:82:4e:51:04:94:98:24:fa:f4:47:51:
d6:11:d8:a6:a3:66:49:bd:c9:b9:48:9f:b9:09:dd:a6:a6:f2:
e0:97:0b:18
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAaD90pNFw5D86GiNha9cr7+EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2NTliMGJhODQwN2JlMTFjZmM5MTFiZDMxZWQxNDBjZDFj
NjA0NmMwHhcNMjYxMDAyMTgxMzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNmY1YTJmZTlhZTBhNTBlMzE5YWM0ZDI2MjRjNmEwZjI5OGY0YTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkX9OvUe4Vp/wveKx47+sFJ7ru444
zL2piQiX+B2n9nmaMJ13fwIFk5zZx+tMa3LTwm7cVC2XMEnhKGhz2jf3BccbdOkP
kiILLxn+swFLDbHOcgbCFG3KR95dGFYGOB22YkIwJKMAvKHCMZemdUXJvvmlHQnu
XcBSGJoLuBC5k4RtnmubbdGnogTrIqDmxXAbfPZjpXKxewyu5ox9ecui/EE1usbf
Fkk3dOboj+u9Cgu4vPxL4OSqNvlDXa6BuKbkILIqnbMbUateBn/C0a3EU4dZ/XWM
6xPTVk2EHv10BgRhqd7dk4BNkn3RqZE8hpANGGJyikXwcqAwws2ek+xbqQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFAb1ov6a4KUOMZrE0mJMag8pj0pPMB8GA1UdIwQY
MBaAFFZZsLqEB74Rz8kRvTHtFAzRxgRsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEt
MjM5NGM2NjAwMDIyLzEvQnZXaV9wcmdwUTR4bXNUU1lreHFEeW1QU2s4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEtMjM5NGM2NjAwMDIy
LzEvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAAjAaAwcAKhD6gAAD
AwcAKhD6gAAZAwYAKhD6gRgwDQYJKoZIhvcNAQELBQADggEBAHkb5pDGah27En7K
ONIcsOKZ0Jr/WB/9aTOV0ymYyd+FtFtGRHosrUr5+zjSR+PNO3RVmLtbS84JCa2t
3jqOIh5aiQsNYcLxr0bTxnwh1XPnSSmY6w14LPSFUbxT1qLLKjmat3jEhg7q3X3t
wTn/jv5gO22440brWBwRFpqQ/YGgex3r9QnR4vkaDqqitegZbg0bvuQOIkc+jWiU
rTTUIIV+BpBU4MfOOZ6GrKkLoOaF51HAKX5zRihBDn1EkuhUBixTU8OkYBpud3uw
hsjVBm9CgY+xpJ5j4mDg5QASofOCTlEElJgk+vRHUdYR2KajZkm9yblIn7kJ3aam
8uCXCxg=
-----END CERTIFICATE-----
Generated at Mon Oct 5 06:57:22 2026 by rpki-client