Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/vfWcK8a-lqUFEGgnfZHzkRjw3Iw.roa
File: vfWcK8a-lqUFEGgnfZHzkRjw3Iw.roa (raw, json)
Hash identifier: 6fRC1YhRUz8gfLL5/MDflYBoachHziSArQyhmC+0N3w=
Subject key identifier: BD:F5:9C:2B:C6:BE:96:A5:05:10:68:27:7D:91:F3:91:18:F0:DC:8C
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 01A02056B413CD7675D5E080C8263BF7AA2D
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/vfWcK8a-lqUFEGgnfZHzkRjw3Iw.roa
Signing time: Thu 20 Aug 2026 18:02:27 +0000
ROA not before: Thu 20 Aug 2026 18:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218914
IP address blocks: 2a0d:d940:10b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 14:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:56:b4:13:cd:76:75:d5:e0:80:c8:26:3b:f7:aa:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Aug 20 18:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bdf59c2bc6be96a5051068277d91f39118f0dc8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:99:11:a9:73:c4:90:01:f2:a2:7a:e1:4a:ad:
6e:54:7e:64:72:f5:ac:fe:be:24:b8:93:25:6e:df:
c0:02:ba:db:3b:2b:67:0e:ed:a5:79:c0:22:30:aa:
d6:69:fb:a8:e6:94:e7:5d:85:3f:29:4e:87:90:2b:
e3:79:46:8a:8d:d9:ba:73:9e:48:75:2a:27:03:bd:
a8:d7:93:2e:a3:bf:db:c4:2a:05:32:80:8a:52:7c:
6b:cf:b9:98:00:53:5b:92:83:11:0e:54:6c:5a:bc:
f0:dd:b1:8e:02:5e:85:0e:13:5c:9b:12:3d:2b:8a:
af:87:cb:fc:c0:a9:c3:e3:a6:b3:18:d8:c0:e5:ed:
32:20:6a:5a:5e:d5:08:7c:46:60:6c:dc:f5:80:a6:
08:c9:3a:e8:84:8e:d6:cc:42:19:61:25:bc:05:13:
af:b2:ed:2e:19:e3:6d:cc:f6:d1:22:df:57:d9:be:
59:23:e9:63:50:a9:a6:47:76:c1:0b:24:36:74:90:
10:ac:57:a6:a3:1d:a8:b4:6b:1c:af:4a:a9:f5:d3:
07:22:69:e4:05:1b:f1:72:b7:58:f8:32:48:4c:a9:
04:b0:2b:61:f7:f4:53:de:21:ac:43:8c:e7:b1:72:
6e:5d:65:ff:4c:26:8a:db:6b:de:38:21:af:6c:f7:
0e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F5:9C:2B:C6:BE:96:A5:05:10:68:27:7D:91:F3:91:18:F0:DC:8C
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/vfWcK8a-lqUFEGgnfZHzkRjw3Iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:10b::/48
Signature Algorithm: sha256WithRSAEncryption
22:59:06:e4:d7:a4:54:f0:f3:87:49:2c:20:e0:65:cb:e6:08:
97:4b:9d:9c:8f:70:e3:88:a4:af:90:82:1b:0d:9d:cd:fb:5e:
ad:0a:e7:a7:c9:30:51:a2:be:bf:f4:a5:cc:0e:b1:21:aa:67:
22:dc:7b:c0:2d:3a:52:72:8c:14:b2:83:65:4a:f2:8e:fc:4d:
29:ac:56:33:db:89:14:7a:e3:32:cc:be:7c:fe:b7:64:cc:30:
73:45:99:d5:59:d0:a9:30:98:16:3e:b5:13:63:4f:13:11:01:
91:02:cf:0d:31:96:fe:e8:bd:c6:35:67:82:db:f4:c5:0b:f7:
1d:4b:67:17:07:91:ae:0e:01:d7:62:af:93:77:97:de:34:cd:
dd:bf:54:50:e7:15:68:85:cb:c2:05:26:cb:11:77:10:55:ca:
f7:1d:2a:bb:74:e8:7e:e2:f7:4d:eb:ed:8a:4d:0d:c9:b8:da:
63:ec:f1:61:67:b1:b7:ed:c4:48:89:ed:ef:33:f2:54:75:d4:
c0:33:81:71:00:3c:21:ad:eb:af:67:47:c0:14:2f:74:5f:c5:
ff:94:a6:6a:bb:de:e4:5f:7d:54:72:01:44:f7:ba:09:3d:70:
40:c5:28:45:f8:22:b9:80:05:6b:75:4f:99:20:c7:14:95:4e:
10:25:3c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 00:52:03 2026 by rpki-client