Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/vkMFwtq4YF4EVCLGJI8W54e9cDU.roa
File: vkMFwtq4YF4EVCLGJI8W54e9cDU.roa (raw, json)
Hash identifier: fYkoWxoHIoRzoqnLvhuQiUpyD9UJxfV83j77hWPTRPw=
Subject key identifier: BE:43:05:C2:DA:B8:60:5E:04:54:22:C6:24:8F:16:E7:87:BD:70:35
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019F806905FD9C41FAB3F5721E4CF3CDA1D1
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/vkMFwtq4YF4EVCLGJI8W54e9cDU.roa
Signing time: Mon 20 Jul 2026 16:43:14 +0000
ROA not before: Mon 20 Jul 2026 16:43:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219378
IP address blocks: 2a0e:4005:ff00::/40 maxlen: 40
2a0e:4005:ff10::/48 maxlen: 48
2a0e:4005:ff12::/48 maxlen: 48
2a0e:4005:ff13::/48 maxlen: 48
2a0e:4005:ff20::/48 maxlen: 48
2a0e:4005:ff41::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:80:69:05:fd:9c:41:fa:b3:f5:72:1e:4c:f3:cd:a1:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jul 20 16:43:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be4305c2dab8605e045422c6248f16e787bd7035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0b:ef:7e:8f:24:ed:04:6e:f7:be:24:c8:bc:
54:3c:84:06:5c:66:99:3f:a0:7d:39:6c:d9:21:a4:
2e:47:a3:d0:68:f8:dd:7a:09:0c:f8:68:cb:a7:a7:
8e:d6:e7:22:d4:c7:25:82:c4:1a:54:16:f6:2e:09:
cf:25:b9:d2:d4:b1:6d:05:c0:4d:53:0a:a8:4b:39:
7c:2e:dd:55:27:c4:e6:b6:34:e9:0a:f5:d2:7d:4d:
cc:d5:97:e2:1f:f7:c3:94:3d:be:a1:e8:21:55:49:
92:af:29:db:a8:d5:56:a6:ba:5e:78:1c:76:dc:b0:
6b:ef:00:a4:93:40:ac:89:78:7f:e5:8b:7d:c1:5f:
b5:f1:69:89:56:39:d0:73:01:99:8e:2d:d5:58:01:
00:81:95:7c:ee:00:1b:66:0c:ca:da:90:d2:01:16:
13:af:2f:71:ae:8a:bf:28:bc:6b:56:94:a9:a7:ae:
bc:cd:82:36:65:82:4d:ab:ee:75:9d:7b:32:a9:1e:
fd:07:29:2b:bb:ee:28:7b:52:f0:9e:5c:76:f0:fc:
65:69:48:c0:f9:e3:a7:98:e4:94:27:18:4b:68:0d:
8a:e6:d9:99:68:96:b3:ca:de:4d:e1:86:b0:30:e9:
20:67:c7:f1:85:2d:27:be:7b:bb:b7:74:53:a6:76:
1a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:43:05:C2:DA:B8:60:5E:04:54:22:C6:24:8F:16:E7:87:BD:70:35
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/vkMFwtq4YF4EVCLGJI8W54e9cDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4005:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
22:33:a4:a4:bb:2c:76:8a:32:9c:bd:82:f3:89:14:74:03:b6:
af:c2:19:47:a7:aa:7d:16:1d:6c:db:87:84:f1:bf:58:f0:f2:
29:f7:1d:c0:be:40:f7:67:24:51:91:6a:db:50:31:1b:9b:a5:
63:55:3e:6a:e6:94:84:e8:f3:1f:f9:e9:d0:5f:e0:a6:25:0f:
28:35:e9:ca:86:a6:a6:55:9d:e5:54:75:96:ca:a7:2b:4f:af:
46:05:13:78:84:ef:97:81:c4:ad:6d:45:12:9f:d4:df:77:85:
71:3e:10:34:e3:53:50:b4:ae:b9:53:eb:1c:be:21:15:bb:8e:
07:f0:1f:1a:0a:d7:2e:fb:cc:f4:69:d1:50:11:47:2a:51:99:
f8:48:93:29:1e:69:97:fb:47:e1:a7:20:e9:30:3b:2d:a7:b1:
3b:e0:72:30:9d:b3:69:98:a6:68:97:02:c0:51:3a:5a:b0:94:
a7:d4:8c:59:22:07:de:2e:55:ea:3c:ae:12:79:c4:a7:d9:2e:
92:41:22:b3:e4:25:60:38:8b:dd:6e:79:6b:4f:90:a5:45:c2:
06:16:09:fe:91:16:b5:34:c4:fa:a9:5f:d9:0d:07:87:b7:12:
17:7e:6c:4e:ba:74:8a:8d:b8:1a:76:69:e1:99:26:4e:ec:56:
ad:78:21:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:25:52 2026 by rpki-client