Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/VQc0FAGcWi7tFOOT1EZ8xwQMnPA.roa
File: VQc0FAGcWi7tFOOT1EZ8xwQMnPA.roa (raw, json)
Hash identifier: 2YVNBcpff05npYOIkA+dX+eL3kyElPWJENUp8s5hRc0=
Subject key identifier: 55:07:34:14:01:9C:5A:2E:ED:14:E3:93:D4:46:7C:C7:04:0C:9C:F0
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019FEFB78C83F207400202110FB65E58D748
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/VQc0FAGcWi7tFOOT1EZ8xwQMnPA.roa
Signing time: Tue 11 Aug 2026 07:26:51 +0000
ROA not before: Tue 11 Aug 2026 07:26:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219302
IP address blocks: 2a0d:d940:a010::/48 maxlen: 48
2a0d:d940:a011::/48 maxlen: 48
2a0d:d940:a012::/48 maxlen: 48
2a0d:d940:a013::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ef:b7:8c:83:f2:07:40:02:02:11:0f:b6:5e:58:d7:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Aug 11 07:26:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55073414019c5a2eed14e393d4467cc7040c9cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8b:63:3a:a0:16:2f:00:b1:a2:be:e6:a9:3b:
73:29:df:1a:50:93:d8:b1:fd:79:b7:15:cc:c6:b3:
e4:3c:cb:58:f3:63:14:60:1e:54:fd:ce:c0:7d:8e:
c5:bd:69:30:1e:26:e9:4e:fb:37:89:a9:b0:86:36:
b7:cb:d4:d2:87:6f:b7:88:5b:dd:b8:ea:97:cd:6b:
6f:8e:a6:ce:40:4c:47:1d:b1:e6:14:46:69:3c:24:
79:4e:cc:e2:6f:41:08:0d:a9:ab:9a:bc:ed:76:43:
1d:f5:b1:65:38:98:91:fe:e6:25:30:7c:2f:3b:51:
4a:f7:f4:ba:65:78:7a:86:85:1b:35:cf:60:4b:e3:
c5:b8:14:a9:2e:d1:e4:6a:a9:10:54:74:c4:10:de:
d4:6e:52:95:32:63:51:07:c7:72:df:0c:c8:da:ef:
94:6d:52:52:46:c9:09:4d:5a:b9:c4:ae:c8:19:bf:
b0:ea:0d:1f:5e:31:ae:54:08:83:4b:09:0a:fb:a2:
7f:d3:b4:e1:2c:63:a6:3e:4a:81:8e:4a:78:4d:e1:
d4:10:9f:d0:1f:59:ca:a4:ca:8a:da:46:f9:d9:21:
cb:21:d4:6c:43:1c:d8:96:db:f6:84:4b:10:27:03:
4f:7b:d9:f8:3e:4f:7a:ec:90:f3:bc:6e:dd:39:90:
d7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:07:34:14:01:9C:5A:2E:ED:14:E3:93:D4:46:7C:C7:04:0C:9C:F0
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/VQc0FAGcWi7tFOOT1EZ8xwQMnPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:a010::/46
Signature Algorithm: sha256WithRSAEncryption
71:36:df:fb:bc:14:e3:4d:25:09:12:23:48:a2:f1:9b:ee:40:
67:a0:c5:cb:51:57:87:6f:39:eb:a5:20:9d:db:3d:75:fb:4e:
ae:5d:88:a2:50:d5:ca:f2:da:90:19:6e:fc:ac:df:07:da:b3:
45:78:d2:32:86:d9:51:8a:22:a9:de:fe:be:e4:d0:89:1b:b2:
a4:ef:8e:a3:c0:0d:ae:fa:db:83:7c:d6:1b:bb:c9:4a:44:5b:
11:7b:33:f8:5b:83:64:b4:bc:14:c2:d8:41:11:96:33:a2:fa:
3c:3e:b0:4e:09:5a:c1:98:df:e0:cb:64:12:8b:36:81:3d:08:
d8:d2:58:be:1f:ab:13:b7:cd:f9:c6:d2:15:72:2b:da:2a:99:
da:71:e3:10:ce:4b:32:74:82:f5:5d:f5:bf:07:04:9d:b2:8e:
90:ab:e3:31:81:07:d2:03:e1:29:0e:9c:0c:1b:42:cb:7e:bc:
b7:c7:ef:e8:e8:5c:f6:fc:cf:24:ef:f0:c4:08:98:f8:4e:51:
1a:78:31:74:26:0c:d5:f2:b8:a5:c4:47:a1:59:63:77:8b:2f:
9f:86:5e:7b:8d:c5:8d:d6:98:5c:20:85:db:3f:94:3e:30:7b:
28:bc:78:52:e6:54:ec:8d:6f:28:f2:c9:d7:a7:54:3f:05:31:
2d:8a:5c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 17:44:00 2026 by rpki-client