Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/BKcITDKaED0cGQdWAamGXP2H6VQ.roa
File: BKcITDKaED0cGQdWAamGXP2H6VQ.roa (raw, json)
Hash identifier: oxdjRtXrDb5brd5dPagdNNJkmg5Fehu5EkVlamNhiwA=
Subject key identifier: 04:A7:08:4C:32:9A:10:3D:1C:19:07:56:01:A9:86:5C:FD:87:E9:54
Certificate issuer: /CN=e4995a4a91bc29c8d7ed104a0384019a4fe59e0e
Certificate serial: 01A0F802A99F95C9C97FFCB01B1D9D36EE12
Authority key identifier: E4:99:5A:4A:91:BC:29:C8:D7:ED:10:4A:03:84:01:9A:4F:E5:9E:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/BKcITDKaED0cGQdWAamGXP2H6VQ.roa
Signing time: Thu 01 Oct 2026 15:08:39 +0000
ROA not before: Thu 01 Oct 2026 15:08:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199580
IP address blocks: 2001:678:11d4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 10:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:02:a9:9f:95:c9:c9:7f:fc:b0:1b:1d:9d:36:ee:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4995a4a91bc29c8d7ed104a0384019a4fe59e0e
Validity
Not Before: Oct 1 15:08:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=04a7084c329a103d1c19075601a9865cfd87e954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cc:9d:0e:c1:2f:7e:53:a1:32:b8:05:ab:58:
ce:c4:3a:2f:64:66:5b:cd:ff:a1:18:96:3c:99:fa:
dc:12:df:aa:7a:e3:b5:3f:89:3c:ba:e0:39:f2:9c:
2c:ec:4d:5e:47:f7:2a:20:e8:04:d2:9f:0f:b7:c2:
33:93:74:21:b4:6b:9f:6d:8c:1e:71:c8:d8:40:bf:
25:c5:78:f7:31:5e:47:c0:09:d6:64:a9:03:6b:de:
1b:20:b7:9c:85:83:49:28:f1:78:1b:19:04:ee:c2:
81:d3:18:77:ed:99:ee:25:48:54:50:97:19:c0:80:
5f:03:6b:9f:06:a5:60:ea:cc:2b:7f:ff:f5:b6:cc:
77:5a:ad:b7:a7:c1:0b:f4:19:ef:76:12:e6:e3:2f:
09:2f:a4:e7:a0:f1:99:0f:00:ef:36:6e:2f:fd:b1:
19:50:f3:e9:dd:ce:6a:28:d0:c4:db:e5:b6:7b:3c:
ad:d4:37:dc:b1:33:42:ce:63:6b:d6:bd:df:29:da:
50:29:05:5f:5a:84:d5:e3:47:7a:34:65:6e:6b:14:
e3:2a:25:1c:b8:bd:97:c8:89:e7:36:3f:e3:aa:3a:
18:4b:f0:24:b5:06:84:b5:31:a6:cc:8b:82:e5:aa:
f9:79:72:40:a4:12:49:ed:c7:b6:05:7f:59:24:8e:
a0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A7:08:4C:32:9A:10:3D:1C:19:07:56:01:A9:86:5C:FD:87:E9:54
X509v3 Authority Key Identifier:
keyid:E4:99:5A:4A:91:BC:29:C8:D7:ED:10:4A:03:84:01:9A:4F:E5:9E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JlaSpG8KcjX7RBKA4QBmk_lng4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/BKcITDKaED0cGQdWAamGXP2H6VQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/def9c7-f3e5-42f7-8def-9df4bb18fb06/1/5JlaSpG8KcjX7RBKA4QBmk_lng4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:11d4::/48
Signature Algorithm: sha256WithRSAEncryption
62:74:e1:ec:6d:67:52:22:e0:2e:55:bc:f8:15:29:74:07:63:
1c:e0:2e:42:04:db:74:b1:14:3d:a5:d8:f8:15:36:6e:ce:e3:
33:fd:4e:7d:6f:98:70:82:dc:e3:0f:f3:14:47:e4:58:81:33:
15:ce:2a:ed:d4:6b:be:25:de:ce:2b:ef:ae:4a:44:ee:42:08:
f1:93:4f:ad:04:82:29:da:35:fd:82:18:85:51:d0:54:f1:04:
29:8f:56:95:11:11:1b:a5:63:13:e2:d0:7c:3c:c4:b1:4d:31:
62:08:89:d0:a3:a9:58:d5:d9:cb:01:db:45:a1:5c:92:06:3f:
97:39:55:78:e3:f4:69:2a:fd:a7:7f:0e:2b:62:08:bf:90:d8:
48:bf:f9:15:e2:f4:eb:75:fb:9b:1c:73:65:de:35:b4:b0:ee:
6d:61:26:cd:e1:16:b5:2c:b7:05:36:7b:b7:41:74:9b:00:f3:
b3:07:99:af:dd:b4:ab:68:67:a4:df:92:09:37:a9:1c:11:7e:
e0:9d:00:01:df:6f:cc:1c:42:dd:78:e1:99:43:d8:69:3d:b4:
54:e0:6f:76:cb:b0:58:ce:05:1a:42:a3:8d:d5:a0:3c:37:9f:
14:df:d9:b9:b5:92:37:d8:62:95:bc:2e:1f:a5:38:f0:29:ef:
f7:cc:48:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:12:09 2026 by rpki-client