Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/af7c07-1aa9-4335-b10b-426ba426b754/1/bvLWmVey0xPg_aUL1dU6-0FOQIw.roa
File: bvLWmVey0xPg_aUL1dU6-0FOQIw.roa (raw, json)
Hash identifier: sp9y6qSuEhDfOpN90Pj5IV6bXuuoh7ArXUUp/iW4StA=
Subject key identifier: 6E:F2:D6:99:57:B2:D3:13:E0:FD:A5:0B:D5:D5:3A:FB:41:4E:40:8C
Certificate issuer: /CN=e92af4dda2fc01f8e14793084b0acc8965a7716c
Certificate serial: 019D201E70E54BDFD64085014D40BA5D5B6E
Authority key identifier: E9:2A:F4:DD:A2:FC:01:F8:E1:47:93:08:4B:0A:CC:89:65:A7:71:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Sr03aL8AfjhR5MISwrMiWWncWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/af7c07-1aa9-4335-b10b-426ba426b754/1/bvLWmVey0xPg_aUL1dU6-0FOQIw.roa
Signing time: Tue 24 Mar 2026 13:52:38 +0000
ROA not before: Tue 24 Mar 2026 13:52:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a14:b400::/128 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/af7c07-1aa9-4335-b10b-426ba426b754/1/6Sr03aL8AfjhR5MISwrMiWWncWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/af7c07-1aa9-4335-b10b-426ba426b754/1/6Sr03aL8AfjhR5MISwrMiWWncWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Sr03aL8AfjhR5MISwrMiWWncWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:20:1e:70:e5:4b:df:d6:40:85:01:4d:40:ba:5d:5b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e92af4dda2fc01f8e14793084b0acc8965a7716c
Validity
Not Before: Mar 24 13:52:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ef2d69957b2d313e0fda50bd5d53afb414e408c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4c:43:d3:82:81:00:9e:c5:d3:e0:13:e9:96:
2f:a9:32:23:ee:d5:09:4e:dc:60:c7:56:d4:12:8f:
df:c7:2a:ef:ad:d4:b6:99:12:c5:6e:fe:a4:de:76:
f7:17:2b:61:9c:e7:3f:40:36:f8:32:f8:0b:fb:81:
50:dc:2a:86:89:b4:c0:6a:3c:ac:db:43:4b:f1:7c:
26:46:fb:09:c5:7b:88:a8:b4:30:0f:ab:d6:6a:48:
74:81:32:a5:2d:2d:a4:cf:92:a0:04:1f:57:a8:f3:
08:1f:fb:17:1a:9a:6b:ef:1e:85:b2:5d:77:33:64:
36:52:51:13:eb:b4:24:ce:5c:fb:62:97:a9:08:f3:
4a:1e:cd:89:3f:36:05:ca:be:c9:7a:eb:13:83:b9:
2c:eb:56:e4:ab:43:3f:bd:da:a2:14:c8:fb:f1:8c:
8c:36:16:39:6b:6d:22:0b:a2:4e:a8:63:69:8e:a5:
61:52:34:ad:62:d9:c6:5e:82:e4:66:dd:02:0d:21:
1e:e8:75:c4:3c:cf:a0:2d:46:f1:3b:3e:15:fa:fa:
ff:29:1c:f9:97:b7:d1:27:8a:86:a8:6a:52:e2:ca:
63:5d:34:3b:94:a6:ff:13:de:48:d1:0e:0b:eb:4e:
26:d3:5f:48:55:d6:a1:0e:bc:bf:6d:70:52:00:d6:
2f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F2:D6:99:57:B2:D3:13:E0:FD:A5:0B:D5:D5:3A:FB:41:4E:40:8C
X509v3 Authority Key Identifier:
keyid:E9:2A:F4:DD:A2:FC:01:F8:E1:47:93:08:4B:0A:CC:89:65:A7:71:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Sr03aL8AfjhR5MISwrMiWWncWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/af7c07-1aa9-4335-b10b-426ba426b754/1/bvLWmVey0xPg_aUL1dU6-0FOQIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/af7c07-1aa9-4335-b10b-426ba426b754/1/6Sr03aL8AfjhR5MISwrMiWWncWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:b400::/128
Signature Algorithm: sha256WithRSAEncryption
d5:fb:42:2b:19:9c:81:42:7b:92:a0:e5:be:d4:df:1e:ca:c3:
3c:fe:fc:4d:fe:fd:b3:f9:69:22:a6:a6:66:d3:8a:ae:7e:5f:
bd:12:a2:82:58:18:39:33:ad:d2:24:27:bd:9f:6e:2f:c5:db:
1e:47:5c:74:37:29:b3:1c:18:c1:25:ba:78:81:b3:66:37:0a:
9e:dd:0f:5b:de:99:50:54:79:8b:00:16:ba:24:61:19:0e:f2:
7b:69:7a:f3:ef:0e:72:df:1d:95:7d:ab:6d:62:b5:3f:fa:8d:
70:71:05:8b:0d:f4:b7:4f:70:e5:30:e3:5b:93:ed:e7:68:d9:
fe:a6:fa:ac:fd:44:93:88:d7:32:0f:44:27:7b:db:45:d6:a2:
41:3c:bb:9a:d8:a9:37:aa:0c:62:54:4f:fb:9c:dd:55:fd:62:
06:1b:11:87:e9:53:7d:f3:96:fb:43:de:ad:c4:f7:37:e2:c7:
ea:11:64:70:99:76:d2:d9:ae:f4:e6:ef:25:58:0b:6a:6e:32:
21:09:05:36:4d:80:8c:2f:67:d1:ed:7b:bc:2b:b8:62:bc:a2:
b9:86:e1:39:53:c3:3d:38:21:27:a7:e3:c5:d2:4a:c8:33:8b:
8e:20:c3:18:4b:92:52:a2:0f:5d:ed:7e:2f:ab:50:65:e2:a5:
5b:ab:41:3e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 26 01:48:05 2026 by rpki-client