Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/VbWx7_gdGTQEFyrHq9Z1wNTGJBI.roa
File: VbWx7_gdGTQEFyrHq9Z1wNTGJBI.roa (raw, json)
Hash identifier: O/tTPwAFDDlGjaJN2wA1niRdyUG3ksGK8mbvpOSJz8Q=
Subject key identifier: 55:B5:B1:EF:F8:1D:19:34:04:17:2A:C7:AB:D6:75:C0:D4:C6:24:12
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 019E89F83E47C9A7B20892BFA2B5B5C51D12
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/VbWx7_gdGTQEFyrHq9Z1wNTGJBI.roa
Signing time: Tue 02 Jun 2026 20:13:27 +0000
ROA not before: Tue 02 Jun 2026 20:13:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209131
IP address blocks: 2a0c:9a40:88a0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 17:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:89:f8:3e:47:c9:a7:b2:08:92:bf:a2:b5:b5:c5:1d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jun 2 20:13:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55b5b1eff81d193404172ac7abd675c0d4c62412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:79:14:de:8f:6a:60:49:47:5c:da:b5:ab:be:
69:08:b4:dd:7e:95:a7:e1:b4:2c:b2:09:72:38:3f:
d8:24:76:55:75:ab:77:17:ac:73:4d:89:43:bd:56:
ba:90:7a:7d:fc:82:45:93:7b:e7:11:ec:38:88:cc:
c7:58:17:32:53:1c:43:b0:2a:3b:f6:af:1d:91:6a:
46:c4:b5:ce:82:9f:5c:bf:53:8b:83:c9:19:e5:c8:
b1:8d:e8:e1:bb:a2:f8:2c:5d:cd:9f:64:84:11:53:
a0:8d:04:19:c7:d2:60:d5:92:0f:cc:08:f6:3f:2a:
3f:2a:75:da:11:f8:27:9e:3f:2e:e0:63:83:f7:e0:
f7:e3:6e:7f:e1:7b:95:d6:a2:82:db:13:8c:cc:52:
a0:4c:3e:8a:0b:91:da:0e:ff:d0:43:ac:82:03:2a:
bc:70:3a:96:35:f0:42:3f:24:b7:34:42:b9:54:31:
06:7a:32:a6:1c:76:0c:cf:10:f4:db:19:d9:a8:e6:
20:f7:3b:e6:35:3c:e8:87:1c:5a:5d:ed:ec:1f:7a:
f4:49:fa:1a:80:60:1c:63:e0:84:e4:67:d4:2d:99:
60:1c:c7:9f:80:6b:c5:cc:0e:07:4a:e2:db:d5:a9:
e7:d5:8c:d1:67:5e:d4:8f:0e:72:6c:2b:60:76:b2:
f8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B5:B1:EF:F8:1D:19:34:04:17:2A:C7:AB:D6:75:C0:D4:C6:24:12
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/VbWx7_gdGTQEFyrHq9Z1wNTGJBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:88a0::/48
Signature Algorithm: sha256WithRSAEncryption
97:d8:9f:f5:b4:1d:c1:ac:0f:ef:6b:01:e4:d1:54:e5:8f:c1:
07:a1:95:82:c9:c5:0e:b4:fc:51:8c:29:dd:ce:b2:d5:80:8d:
0b:fd:96:2d:3e:9c:5f:54:4b:a2:72:0c:5a:a2:dd:38:42:19:
a8:31:1b:43:b3:28:ed:0c:0b:12:e8:df:0e:87:45:58:7e:7d:
3a:36:73:d1:40:d7:79:25:ee:f8:67:ce:55:10:e7:d6:3b:a6:
c6:ab:f4:39:8a:d7:ed:01:1b:99:e6:bd:9a:59:f9:95:2c:cc:
a0:90:fc:56:5a:f0:33:5c:fc:01:eb:32:97:07:45:df:71:95:
2c:c0:08:46:31:15:10:e9:bc:de:f7:ab:21:02:b0:f8:b1:c0:
a8:91:f5:f3:bb:c9:05:7c:cf:8f:b6:b1:3d:78:ba:d5:4a:07:
90:85:0a:c1:27:31:9a:21:da:cf:14:08:28:36:52:a9:f2:8d:
0e:16:63:7e:db:6b:80:d8:84:ff:49:94:d1:f8:fc:e9:24:35:
85:0e:fc:5f:b1:db:7b:3f:b0:78:e8:73:41:9b:28:96:8a:f6:
14:a1:21:63:9d:02:13:5c:d0:32:d4:95:5b:0d:b8:b0:e6:17:
ce:dc:7a:cc:78:7f:b4:d4:55:6b:38:95:5d:c7:96:a8:f0:4e:
0c:0b:81:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:29:10 2026 by rpki-client