Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/vgWMM6Vwuk5BNlKUtwZfw9vBpR4.roa
File: vgWMM6Vwuk5BNlKUtwZfw9vBpR4.roa (raw, json)
Hash identifier: WXW87tGNdrSWOMD5SoiG3gG628xTYRHI69gizPB1Q80=
Subject key identifier: BE:05:8C:33:A5:70:BA:4E:41:36:52:94:B7:06:5F:C3:DB:C1:A5:1E
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 019ED04A688C61A6BF93B60F593BBAB9EA75
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/vgWMM6Vwuk5BNlKUtwZfw9vBpR4.roa
Signing time: Tue 16 Jun 2026 11:56:37 +0000
ROA not before: Tue 16 Jun 2026 11:56:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219428
IP address blocks: 2a0c:b641:de0::/44 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d0:4a:68:8c:61:a6:bf:93:b6:0f:59:3b:ba:b9:ea:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jun 16 11:56:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be058c33a570ba4e41365294b7065fc3dbc1a51e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:02:5d:d3:5e:e7:05:e6:1d:54:a1:ce:52:c2:
31:05:63:57:4a:ae:a1:1c:67:da:34:65:0e:c1:8e:
e9:1d:92:01:6b:40:d3:6f:ae:94:a1:c3:ab:2a:66:
fa:2a:d5:07:4d:e6:e5:e1:ad:c3:f4:6e:38:cd:a6:
0a:03:8c:78:8c:d7:9b:76:53:83:b0:c1:46:6e:b8:
1e:ba:76:3a:90:ae:2a:fd:99:98:db:00:21:86:28:
d3:2f:c5:9f:69:4c:f4:6b:ef:d3:e3:e9:f5:e3:79:
ca:09:87:c9:14:5d:29:e7:ba:75:9f:ad:7b:c9:5c:
34:d2:e9:37:ce:28:75:08:05:7d:6e:e9:09:ef:3e:
a1:7b:7f:9f:ef:03:92:7d:e8:bf:64:a0:e0:32:f7:
bf:17:28:da:0c:26:d5:7b:b3:96:ad:e2:65:b1:c6:
74:a3:d1:cc:52:1c:23:72:aa:5c:77:a1:a3:6c:fe:
9d:2c:53:8b:9a:6f:3d:43:f1:52:9f:4f:c0:e6:0f:
f5:41:32:41:95:80:72:51:85:07:ad:01:22:5a:62:
41:14:d6:19:8f:58:67:93:a9:15:d9:52:ca:ef:93:
eb:6b:71:f3:c8:cb:32:26:6d:be:a1:81:50:46:1d:
57:0c:b9:7f:5a:c5:b7:ec:c3:7b:66:63:d0:e6:d8:
b7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:05:8C:33:A5:70:BA:4E:41:36:52:94:B7:06:5F:C3:DB:C1:A5:1E
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/vgWMM6Vwuk5BNlKUtwZfw9vBpR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:de0::/44
Signature Algorithm: sha256WithRSAEncryption
41:30:0e:ff:4a:51:fe:d2:14:e1:cf:4f:e9:e2:5a:99:7b:b9:
70:65:4e:56:86:72:27:19:f8:af:bb:8a:1d:69:f0:02:32:95:
8b:7b:e2:c1:01:cf:d9:2d:71:fd:c1:3e:e1:a3:0f:ea:1b:4b:
75:1a:1e:48:a2:c8:47:62:ee:c8:1f:42:21:36:cc:9d:da:17:
b4:af:20:3d:52:2d:64:85:1a:69:21:1c:49:67:43:39:84:87:
3b:be:f3:98:02:89:53:b2:68:10:ce:5e:5b:8b:70:5f:c1:d1:
65:f7:af:94:d6:7a:c9:fd:c9:a6:71:cb:da:29:a1:af:8b:ba:
6e:62:50:ea:32:c2:2c:3f:fe:21:89:86:4f:ce:d4:8e:21:2a:
d8:4b:f9:c6:70:be:48:60:16:c5:c2:c1:01:08:ce:0f:15:ed:
2d:51:53:a7:85:ca:8a:35:ee:20:8c:2a:98:48:91:cc:ad:74:
60:cc:a7:24:58:4e:6c:9a:67:75:ad:01:0c:1c:8a:7d:83:41:
b5:bf:f5:40:42:12:0b:97:34:05:76:ca:c1:85:75:e0:f2:1d:
bd:0e:52:0e:9d:68:2e:6e:eb:b4:19:6e:e9:d5:3b:dc:19:03:
39:ba:35:ba:ab:b8:c3:e5:af:04:b6:19:be:4b:44:b9:92:c9:
53:61:14:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:40:07 2026 by rpki-client