Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/Vc48rKL3rg5h-ZOkYPMqFhAt-nY.roa
File: Vc48rKL3rg5h-ZOkYPMqFhAt-nY.roa (raw, json)
Hash identifier: kggOhBvOEFBZS+rMyd+otPlcng38mjnoQvO7twIO76Q=
Subject key identifier: 55:CE:3C:AC:A2:F7:AE:0E:61:F9:93:A4:60:F3:2A:16:10:2D:FA:76
Certificate issuer: /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial: 019F093A7EF5B4C4BBD5CB7D99FF24B07CEF
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/Vc48rKL3rg5h-ZOkYPMqFhAt-nY.roa
Signing time: Sat 27 Jun 2026 13:17:36 +0000
ROA not before: Sat 27 Jun 2026 13:17:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213850
IP address blocks: 2a09:3f00:3100::/48 maxlen: 48
2a09:3f00:3101::/48 maxlen: 48
2a09:3f00:3102::/48 maxlen: 48
2a09:3f00:3103::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 18:43:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:09:3a:7e:f5:b4:c4:bb:d5:cb:7d:99:ff:24:b0:7c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367160181739568e578e1b5f57976a60398062e6
Validity
Not Before: Jun 27 13:17:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55ce3caca2f7ae0e61f993a460f32a16102dfa76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1e:3b:7a:e2:0b:22:fb:ed:96:5e:ed:c3:76:
5c:e1:69:63:b7:40:7f:2d:f2:1e:4f:b5:c8:5e:76:
f2:40:4c:1d:50:95:97:af:96:d5:3f:af:a8:75:e4:
cd:d6:9f:1c:c2:be:f4:fc:5b:45:a0:47:f0:5b:7c:
12:7b:c4:f0:d6:3e:2c:2b:6a:c3:55:0b:1b:bc:d8:
8c:7e:e4:72:ce:a9:f8:11:22:c4:2b:26:4b:01:c9:
76:63:0e:b1:8d:27:98:5e:87:b0:15:e8:f6:e5:66:
38:97:0f:96:5b:5f:a4:b8:60:62:a9:52:7e:07:cd:
01:40:2f:f2:8a:28:a9:c8:83:ff:74:28:42:2b:15:
84:c6:8a:16:a3:a5:ad:16:f9:81:73:2a:34:eb:a8:
6d:76:2a:9e:a9:2d:8d:84:ea:ca:1c:48:54:05:da:
29:89:79:0f:80:18:95:97:63:11:eb:af:a8:a4:8e:
2b:d0:e1:c3:57:45:81:0c:24:b3:20:73:0b:51:cb:
e5:57:9b:22:96:95:6a:96:b0:d9:03:b0:99:91:90:
9b:b1:c2:a0:d0:9c:3b:b2:e4:8b:b6:58:d0:c2:60:
8f:01:79:da:cb:31:d8:d9:df:d8:db:3a:17:47:0e:
74:a7:90:c6:fa:38:ad:be:ae:c5:52:9a:98:22:dc:
bd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:CE:3C:AC:A2:F7:AE:0E:61:F9:93:A4:60:F3:2A:16:10:2D:FA:76
X509v3 Authority Key Identifier:
keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/Vc48rKL3rg5h-ZOkYPMqFhAt-nY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3f00:3100::/46
Signature Algorithm: sha256WithRSAEncryption
67:73:c6:a0:15:cc:5d:de:10:9b:5f:b7:34:0e:76:dc:ee:99:
41:e4:d9:cf:1c:28:b9:fd:46:e9:35:2b:c3:6d:ca:23:25:3f:
d3:d5:16:08:48:2c:81:43:21:54:d1:82:11:9c:1b:66:39:d0:
c9:60:91:ea:4a:98:5a:4d:5a:3d:63:9c:23:3b:3f:7a:4e:cb:
c2:80:95:dd:3c:f4:d9:2a:54:c2:64:a0:61:d8:20:49:5f:b8:
4c:96:91:29:64:dd:ee:b8:76:87:cc:61:ff:fc:0c:9b:3a:a1:
63:86:92:93:1f:78:b2:a3:bb:3f:01:4b:72:35:aa:c0:66:b9:
a4:9e:69:73:cb:95:94:51:b4:aa:cc:b5:7b:a2:c8:96:57:79:
97:e5:e4:de:7d:a7:3a:19:d4:fa:64:eb:8b:8c:20:3a:80:6a:
d8:08:4b:79:b1:31:87:c1:8a:32:a5:3d:cb:83:68:ea:79:7c:
12:33:9c:5f:6c:79:e8:d5:b5:96:1b:ce:97:90:1c:c9:3e:93:
64:60:cd:25:18:ef:e3:11:44:9e:3a:34:17:e4:38:d0:fb:ab:
22:4f:96:60:fb:2b:49:55:74:61:30:84:f7:63:50:6f:f3:e9:
8a:b4:80:cb:44:bb:dc:4f:ed:4b:52:9a:30:03:22:80:e8:3f:
97:b9:69:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 01:59:11 2026 by rpki-client