Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/34a175-3b20-4d78-bf4b-cf7ec7ab6a86/1/bp25hsDC2CGyXpiV1ROq3FiBd_A.roa
File: bp25hsDC2CGyXpiV1ROq3FiBd_A.roa (raw, json)
Hash identifier: upHFlabmT+bC7Dsf9iVbA0urWcprDDGrdqS+6c0uiKY=
Subject key identifier: 6E:9D:B9:86:C0:C2:D8:21:B2:5E:98:95:D5:13:AA:DC:58:81:77:F0
Certificate issuer: /CN=15a457601c8db5efa650d0b8742f066ee570cede
Certificate serial: 01A0D363E4F69F1AEE67B38A2B2CB7A00821
Authority key identifier: 15:A4:57:60:1C:8D:B5:EF:A6:50:D0:B8:74:2F:06:6E:E5:70:CE:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FaRXYByNte-mUNC4dC8GbuVwzt4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/34a175-3b20-4d78-bf4b-cf7ec7ab6a86/1/bp25hsDC2CGyXpiV1ROq3FiBd_A.roa
Signing time: Thu 24 Sep 2026 12:28:54 +0000
ROA not before: Thu 24 Sep 2026 12:28:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48918
IP address blocks: 212.58.64.0/19 maxlen: 19
2a00:fb80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/34a175-3b20-4d78-bf4b-cf7ec7ab6a86/1/FaRXYByNte-mUNC4dC8GbuVwzt4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/34a175-3b20-4d78-bf4b-cf7ec7ab6a86/1/FaRXYByNte-mUNC4dC8GbuVwzt4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FaRXYByNte-mUNC4dC8GbuVwzt4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 06:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:63:e4:f6:9f:1a:ee:67:b3:8a:2b:2c:b7:a0:08:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15a457601c8db5efa650d0b8742f066ee570cede
Validity
Not Before: Sep 24 12:28:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6e9db986c0c2d821b25e9895d513aadc588177f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6f:87:d6:7c:df:a1:f6:5e:d9:a6:ae:99:99:
72:bb:ff:bc:3e:80:b9:6e:3d:da:f0:01:62:fc:d7:
c0:24:51:fd:e2:06:05:dd:95:a0:a0:0a:21:dc:c7:
ae:ed:62:4f:49:9d:8c:32:9c:9a:cb:24:94:88:2c:
f0:76:b3:18:5c:f9:ce:a3:37:52:b5:3d:51:6a:24:
07:ac:10:e9:bd:d6:82:25:48:a4:47:64:ff:20:a6:
b3:ef:6f:07:86:16:83:2f:05:87:88:51:9d:69:09:
eb:9a:54:b0:1a:de:72:0a:83:90:cf:1d:47:19:23:
45:ee:43:dc:b0:cc:d4:a0:be:83:da:61:7c:f7:fd:
22:a9:1f:72:c5:b8:f0:14:5d:21:5b:e1:d0:9d:75:
00:0a:75:28:de:8b:81:6c:a2:e2:e3:4e:55:4c:aa:
09:e0:69:6c:2e:0b:95:a0:ce:5b:0f:81:f9:29:be:
60:64:dd:d0:2f:19:14:19:14:3c:13:31:9a:ab:25:
19:0d:b6:48:c4:a8:8a:a5:30:37:37:8c:bc:b5:80:
69:ca:f2:e2:5a:15:e1:a1:38:d2:17:e9:80:ae:d3:
88:e3:3f:e4:55:54:48:32:52:02:3e:db:87:6c:69:
cc:36:b1:a7:4c:31:b4:04:92:ae:cf:09:c9:b2:db:
77:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:9D:B9:86:C0:C2:D8:21:B2:5E:98:95:D5:13:AA:DC:58:81:77:F0
X509v3 Authority Key Identifier:
keyid:15:A4:57:60:1C:8D:B5:EF:A6:50:D0:B8:74:2F:06:6E:E5:70:CE:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FaRXYByNte-mUNC4dC8GbuVwzt4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/34a175-3b20-4d78-bf4b-cf7ec7ab6a86/1/bp25hsDC2CGyXpiV1ROq3FiBd_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/34a175-3b20-4d78-bf4b-cf7ec7ab6a86/1/FaRXYByNte-mUNC4dC8GbuVwzt4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.58.64.0/19
IPv6:
2a00:fb80::/48
Signature Algorithm: sha256WithRSAEncryption
76:d9:b7:e5:4d:19:39:20:30:0d:1b:f4:ad:53:99:bc:da:c8:
7c:f4:41:d5:7f:cc:ba:b8:e9:c6:23:6e:da:ec:be:a5:ae:d7:
d6:2e:81:b0:b6:ce:37:67:e3:b0:98:d0:b6:30:e5:eb:10:4d:
12:90:41:cd:1f:75:5e:61:e5:8f:fb:d6:fe:62:f1:87:e0:4c:
e2:50:dd:b4:bb:cf:0f:5c:c1:c9:dc:ae:fe:c3:b6:7f:aa:77:
07:76:bc:41:88:f2:3d:2c:0f:a1:ef:ae:25:28:7e:bb:bd:35:
b4:14:4c:d6:d8:65:e8:12:06:19:50:6e:b2:3c:e8:82:37:42:
59:db:d9:09:40:1c:b0:a0:d6:39:79:a2:f1:ba:79:98:b4:5d:
0d:0f:14:d8:0b:97:61:a9:f0:06:7f:44:08:9c:ac:0f:5e:49:
66:9d:9d:ae:0e:3c:28:29:21:59:6c:9c:a7:3a:ed:2a:f8:c2:
01:1a:b7:fd:86:05:0a:cc:2e:36:51:a6:02:31:ab:28:79:5e:
d6:72:e5:4a:fd:61:f8:05:33:9e:03:bc:6f:f8:ce:58:a3:b9:
5b:53:d9:2a:fd:d0:06:14:19:73:4d:dd:54:b5:87:4f:92:49:
8e:fd:32:eb:ad:46:dd:84:25:ed:10:fe:b4:33:ab:cd:26:7d:
40:ce:31:09
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAaDTY+T2nxruZ7OKKyy3oAghMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1YTQ1NzYwMWM4ZGI1ZWZhNjUwZDBiODc0MmYwNjZlZTU3
MGNlZGUwHhcNMjYwOTI0MTIyODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTlkYjk4NmMwYzJkODIxYjI1ZTk4OTVkNTEzYWFkYzU4ODE3N2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1G+H1nzfofZe2aaumZlyu/+8PoC5
bj3a8AFi/NfAJFH94gYF3ZWgoAoh3Meu7WJPSZ2MMpyayySUiCzwdrMYXPnOozdS
tT1RaiQHrBDpvdaCJUikR2T/IKaz728HhhaDLwWHiFGdaQnrmlSwGt5yCoOQzx1H
GSNF7kPcsMzUoL6D2mF89/0iqR9yxbjwFF0hW+HQnXUACnUo3ouBbKLi405VTKoJ
4GlsLguVoM5bD4H5Kb5gZN3QLxkUGRQ8EzGaqyUZDbZIxKiKpTA3N4y8tYBpyvLi
WhXhoTjSF+mArtOI4z/kVVRIMlICPtuHbGnMNrGnTDG0BJKuzwnJstt3UwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFG6duYbAwtghsl6YldUTqtxYgXfwMB8GA1UdIwQY
MBaAFBWkV2AcjbXvplDQuHQvBm7lcM7eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmFSWFlCeU50ZS1tVU5DNGRDOEdidVZ3enQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8zNGExNzUtM2IyMC00ZDc4LWJmNGIt
Y2Y3ZWM3YWI2YTg2LzEvYnAyNWhzREMyQ0d5WHBpVjFST3EzRmlCZF9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8zNGExNzUtM2IyMC00ZDc4LWJmNGItY2Y3ZWM3YWI2YTg2
LzEvRmFSWFlCeU50ZS1tVU5DNGRDOEdidVZ3enQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQF1DpAMA8E
AgACMAkDBwAqAPuAAAAwDQYJKoZIhvcNAQELBQADggEBAHbZt+VNGTkgMA0b9K1T
mbzayHz0QdV/zLq46cYjbtrsvqWu19YugbC2zjdn47CY0LYw5esQTRKQQc0fdV5h
5Y/71v5i8YfgTOJQ3bS7zw9cwcncrv7Dtn+qdwd2vEGI8j0sD6HvriUofru9NbQU
TNbYZegSBhlQbrI86II3Qlnb2QlAHLCg1jl5ovG6eZi0XQ0PFNgLl2Gp8AZ/RAic
rA9eSWadna4OPCgpIVlsnKc67Sr4wgEat/2GBQrMLjZRpgIxqyh5XtZy5Ur9YfgF
M54DvG/4zlijuVtT2Sr90AYUGXNN3VS1h0+SSY79MuutRt2EJe0Q/rQzq80mfUDO
MQk=
-----END CERTIFICATE-----
Generated at Fri Sep 25 18:01:54 2026 by rpki-client