Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/vyoTMReVhXUjwvkVhrT_snWF1Oo.roa
File: vyoTMReVhXUjwvkVhrT_snWF1Oo.roa (raw, json)
Hash identifier: S9wQse4db0rp6iWzOUMq3DPW7tSsfTuKYuU7VD5Wi0k=
Subject key identifier: BF:2A:13:31:17:95:85:75:23:C2:F9:15:86:B4:FF:B2:75:85:D4:EA
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019F22A805BCFF0E9952D5F4F5A58B4F39B2
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/vyoTMReVhXUjwvkVhrT_snWF1Oo.roa
Signing time: Thu 02 Jul 2026 11:47:44 +0000
ROA not before: Thu 02 Jul 2026 11:47:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 2a0a:2d07:cc::/48 maxlen: 48
2a0e:1a84::/32 maxlen: 32
2a0f:7d00:1::/48 maxlen: 48
2a0f:bc00:a1c4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:a8:05:bc:ff:0e:99:52:d5:f4:f5:a5:8b:4f:39:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 2 11:47:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf2a13311795857523c2f91586b4ffb27585d4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:37:d2:54:ad:c3:62:d6:c0:b8:46:28:d5:b8:
7f:ec:be:73:8c:9a:c1:89:ab:8e:9d:fd:0e:bf:84:
64:af:d8:42:9d:f5:4a:90:18:a1:88:46:11:01:f7:
c3:4f:24:f8:70:5f:66:8d:25:43:c3:e7:82:d3:4f:
03:aa:08:ae:2b:0a:1f:92:3a:97:d5:cf:a0:26:d1:
65:71:2e:b4:45:44:b8:38:f1:01:e2:4f:29:73:70:
da:13:c6:12:5b:a2:18:a0:6c:c3:53:bc:ae:1b:02:
e7:b2:ad:9a:1f:54:88:79:9f:f0:2b:15:f4:ed:71:
51:2b:8b:2f:f3:11:05:c2:ee:e8:24:4f:94:e6:dd:
f5:c2:f7:0e:42:d6:11:c3:65:94:e0:8b:eb:5e:b1:
77:72:f3:c2:ab:bb:f4:78:b0:47:e6:fd:73:a8:03:
62:a4:9f:8b:bb:8f:6c:9f:7e:32:c6:5f:e6:7f:51:
5d:72:44:fb:a5:0d:a7:50:ad:14:aa:a9:2f:dc:84:
88:2c:13:bd:9e:3c:d0:93:5f:c8:2e:2d:fb:11:63:
9e:10:1b:69:b1:ed:a2:65:0f:ef:a9:c6:de:30:16:
dc:16:0b:4e:df:89:c4:78:b2:f2:a5:e4:5c:f7:14:
f6:46:bd:15:59:29:b3:79:28:b2:90:9c:ce:80:c0:
ec:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2A:13:31:17:95:85:75:23:C2:F9:15:86:B4:FF:B2:75:85:D4:EA
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/vyoTMReVhXUjwvkVhrT_snWF1Oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2d07:cc::/48
2a0e:1a84::/32
2a0f:7d00:1::/48
2a0f:bc00:a1c4::/48
Signature Algorithm: sha256WithRSAEncryption
19:e0:ba:51:1e:99:9f:55:5d:26:46:6b:26:ed:9c:fd:0a:cf:
23:31:09:70:b1:d8:b5:0c:17:af:5a:d6:41:f5:95:c0:1e:29:
12:34:83:c4:f3:5f:7b:85:fc:3d:d9:0c:52:f5:c9:41:87:d6:
07:7e:e8:7b:61:f4:c2:b5:a9:cf:c0:ab:cc:33:8e:e7:2b:92:
35:dd:c7:24:a9:84:36:f8:c7:d7:5f:f0:ae:57:70:49:83:2a:
4d:35:c6:73:e5:8a:8f:88:1e:84:3b:af:ee:e8:36:fd:85:e5:
e1:28:a7:43:a3:d4:96:df:5a:3e:c3:f5:2c:7c:86:bd:80:84:
1a:06:2e:90:5f:89:56:7c:71:23:44:aa:77:f1:20:b1:e5:94:
b3:27:e5:ac:5e:9e:a2:36:49:ce:67:f0:7b:e4:5f:e5:97:a1:
d0:85:2e:48:4b:45:ba:71:84:0d:bd:20:13:20:5b:66:d4:bb:
3a:fa:65:d0:1f:cc:5f:96:b0:1b:48:0a:3f:53:f2:e7:43:9d:
bd:5f:85:5d:79:14:0f:d3:6f:73:92:70:dd:fe:bd:50:c6:fa:
b4:1f:5b:22:1b:90:68:b8:c8:f0:85:dc:30:b6:b2:0f:56:30:
ea:c9:2e:da:99:77:92:5c:1b:3e:0a:4e:7d:1c:f0:0e:91:64:
84:82:91:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:42 2026 by rpki-client