Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/vdOItt0NRl8oYwX0hxSy63F1xZs.roa
File: vdOItt0NRl8oYwX0hxSy63F1xZs.roa (raw, json)
Hash identifier: Zq1tLwPTrE7BcDZXoAFZpQVN25Hw5Ih3oRmd0KGz7fo=
Subject key identifier: BD:D3:88:B6:DD:0D:46:5F:28:63:05:F4:87:14:B2:EB:71:75:C5:9B
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 01A13018DFF5EC1CCF8EDD26C151BFAA8B59
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/vdOItt0NRl8oYwX0hxSy63F1xZs.roa
Signing time: Mon 12 Oct 2026 12:31:38 +0000
ROA not before: Mon 12 Oct 2026 12:31:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152726
IP address blocks: 212.102.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:18:df:f5:ec:1c:cf:8e:dd:26:c1:51:bf:aa:8b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Oct 12 12:31:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bdd388b6dd0d465f286305f48714b2eb7175c59b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:83:3c:cd:37:8e:83:9c:7e:8d:04:0d:30:58:
fe:52:b5:f0:8f:fd:18:72:c0:6e:05:08:24:84:7f:
c3:f7:6d:ab:b8:53:b8:32:43:9f:a5:f3:04:62:35:
bf:57:ac:a8:0d:78:c4:31:e9:a3:5e:8c:6a:2e:ba:
15:be:3e:cf:7e:e7:46:63:b6:20:31:31:43:be:10:
38:41:9f:41:41:76:b5:b1:8b:d2:cf:5a:73:02:1e:
47:18:77:55:94:86:0a:04:57:1a:84:fb:e6:af:b5:
a2:93:55:f9:b2:25:ac:e7:45:17:59:fd:4a:23:7b:
da:12:65:55:7a:dc:58:10:ea:22:da:5a:db:34:bd:
82:d6:a2:f0:7d:a4:d4:7e:16:d6:69:13:e8:4d:13:
a9:e0:9e:8f:37:6a:c5:af:c4:3c:98:a6:96:f1:74:
1c:08:e6:cd:3c:08:13:f7:02:8e:35:53:49:2c:76:
7c:16:c9:d0:04:70:bd:3a:d6:26:37:61:4c:09:d9:
ad:0c:71:4e:20:f2:72:f6:0c:b1:89:67:52:39:6b:
00:1b:56:d4:06:e3:e0:00:c5:a6:ad:38:c9:44:8e:
ee:3c:4b:de:b3:78:e8:92:9b:12:0a:01:20:54:49:
87:82:ad:fc:c3:64:52:b3:b5:af:08:b3:f1:76:3b:
84:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D3:88:B6:DD:0D:46:5F:28:63:05:F4:87:14:B2:EB:71:75:C5:9B
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/vdOItt0NRl8oYwX0hxSy63F1xZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.102.113.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:55:8e:b4:bb:70:3f:34:71:56:e3:21:e2:4f:e2:8a:5e:90:
32:e1:47:99:75:c0:63:e8:c0:8c:50:91:7b:a0:bb:06:cc:5a:
9a:55:8e:14:c9:ef:99:1e:c4:e3:3c:19:e4:8c:7c:bd:01:a7:
25:3a:4b:9f:cb:c8:fe:3e:d2:2e:7f:5e:74:3d:3f:d8:f7:64:
2d:36:c6:ff:c5:91:a4:d3:0c:75:8f:b7:aa:26:88:ac:47:fd:
dd:cb:2b:fe:12:fb:ca:aa:3a:13:97:15:3e:55:f3:b8:27:d9:
21:4a:61:21:cf:fd:ce:4d:b0:dc:07:e7:31:0e:b5:51:81:b9:
d9:0e:36:66:fa:4f:85:ce:c6:f3:50:6b:ee:90:e7:96:c2:a7:
6f:9f:e0:0f:9f:c9:ec:fa:fc:01:8c:30:42:2f:16:31:61:22:
a1:21:af:c8:20:ea:91:89:04:6c:09:37:8f:32:36:fd:ae:b6:
10:d3:9a:6e:15:84:81:91:41:24:be:5e:27:89:9f:9d:40:e8:
a0:22:ee:80:30:d1:eb:37:ad:e9:84:b8:d6:75:e3:b0:95:da:
13:4c:d7:bf:bb:24:fd:5c:1a:6e:c7:07:18:e6:e7:e2:9b:80:
8c:bc:0a:13:6f:0d:8a:6f:ac:35:96:6f:67:42:56:74:3e:56:
aa:2c:86:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 22:46:58 2026 by rpki-client