Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/bC64RPz8cp83LwJCcZ1pp689ocY.roa
File: bC64RPz8cp83LwJCcZ1pp689ocY.roa (raw, json)
Hash identifier: L09sTaTE9itiNynRrYJ1UnrLcQ/v0q7KKKkIFFXLs6k=
Subject key identifier: 6C:2E:B8:44:FC:FC:72:9F:37:2F:02:42:71:9D:69:A7:AF:3D:A1:C6
Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad
Certificate serial: 01A13AC8143A3327CEB62A074CCB3313222B
Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/bC64RPz8cp83LwJCcZ1pp689ocY.roa
Signing time: Wed 14 Oct 2026 14:19:13 +0000
ROA not before: Wed 14 Oct 2026 14:19:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219209
IP address blocks: 72.56.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:c8:14:3a:33:27:ce:b6:2a:07:4c:cb:33:13:22:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad
Validity
Not Before: Oct 14 14:19:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6c2eb844fcfc729f372f0242719d69a7af3da1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0f:80:85:27:b4:7d:16:4f:05:fc:74:71:30:
08:4f:01:f7:24:1c:aa:9b:08:f0:26:6b:7f:2a:19:
14:73:3a:93:4e:d6:bf:cb:45:bf:2b:15:08:aa:cf:
4b:6b:5b:b7:0c:ba:ea:11:e6:96:e8:06:3b:a7:ff:
a4:d9:57:8a:05:e0:8e:fb:45:f1:2c:b1:27:d1:fe:
6a:d5:9e:c9:62:9c:da:4f:3f:17:d0:56:cf:8b:27:
2d:53:67:81:ae:2f:9e:cb:d5:4b:e3:3a:39:06:1a:
78:48:3f:24:17:33:1b:cf:5c:f8:78:50:c4:50:9f:
12:0c:81:1a:58:1e:4a:b4:f6:94:0c:db:18:ee:e7:
53:91:97:bf:41:cc:04:9c:ed:52:a7:66:09:e6:dd:
b1:c5:8e:79:0d:6a:e5:50:a0:7a:9b:69:50:2a:b6:
df:3f:ed:da:4f:bc:29:a5:8d:dc:ed:d0:eb:fb:e2:
7c:92:d2:c5:19:72:09:5f:8f:cc:a4:29:83:72:66:
5a:35:94:19:4a:22:19:cd:86:f1:2a:0d:e8:f7:2f:
22:48:02:62:6f:9a:f4:13:c8:e0:07:29:e7:2b:a7:
e7:a7:47:f5:c2:b3:c9:98:c9:9a:4e:1b:a8:5a:dc:
62:d4:f5:d4:c0:e0:9f:78:38:f1:1d:b0:6a:34:b8:
13:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2E:B8:44:FC:FC:72:9F:37:2F:02:42:71:9D:69:A7:AF:3D:A1:C6
X509v3 Authority Key Identifier:
keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/bC64RPz8cp83LwJCcZ1pp689ocY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
72.56.224.0/24
Signature Algorithm: sha256WithRSAEncryption
14:31:5f:81:d1:ee:ca:96:c7:8d:8e:16:9d:47:ea:30:c1:d4:
5a:7e:08:27:9e:0f:a0:53:2f:76:6a:c0:3a:43:a0:94:05:54:
f0:36:29:c5:13:b1:44:8b:15:0e:ab:17:08:04:75:79:26:b0:
19:6b:dc:e4:ce:f7:0f:c9:13:89:7d:40:42:3e:26:c4:71:89:
11:01:f4:00:4d:90:03:95:68:4f:23:73:6a:a8:bc:d6:42:2a:
65:8d:1d:a7:6b:b7:de:8d:c0:ef:ea:f4:8c:31:4f:1c:6c:5a:
56:83:6e:a3:54:7d:85:24:71:49:b4:de:d0:03:7a:cb:86:b0:
f5:a6:e7:78:08:82:21:78:68:91:3c:51:6e:22:37:9b:75:4d:
fb:37:3d:d5:78:18:dc:b8:f0:89:1e:fb:33:77:8c:b1:8d:df:
e4:c9:4d:42:14:f4:14:cb:e4:c9:6f:38:eb:90:eb:be:2a:73:
2f:e3:c9:9d:c4:24:89:a4:1f:cd:d6:f4:e2:4a:7c:88:16:a6:
21:69:37:c4:d4:31:f0:e2:70:10:fa:54:44:5e:fc:64:37:25:
d3:bb:e0:91:a7:4d:b7:30:91:90:f8:14:35:59:36:ad:44:3f:
7d:38:56:28:c3:fd:6d:05:2b:40:88:64:08:ff:a7:49:15:0d:
8a:5c:bf:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 23:22:49 2026 by rpki-client