Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/59ec58-e996-43e5-b297-3345abcc763c/1/fvkJ0ifrgF7TJl0TCC51jf9urS0.roa
File: fvkJ0ifrgF7TJl0TCC51jf9urS0.roa (raw, json)
Hash identifier: EPt0/Jxa3QgEGXaEWYhHu7f10Ncde3McHFgm8GB2WK0=
Subject key identifier: 7E:F9:09:D2:27:EB:80:5E:D3:26:5D:13:08:2E:75:8D:FF:6E:AD:2D
Certificate issuer: /CN=60b3b4a7daddddf93bb81acc8ab52cd5f487df49
Certificate serial: 01A153246E1FF9F3D1FB5FC9CF0CB87705A6
Authority key identifier: 60:B3:B4:A7:DA:DD:DD:F9:3B:B8:1A:CC:8A:B5:2C:D5:F4:87:DF:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLO0p9rd3fk7uBrMirUs1fSH30k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/59ec58-e996-43e5-b297-3345abcc763c/1/fvkJ0ifrgF7TJl0TCC51jf9urS0.roa
Signing time: Mon 19 Oct 2026 07:50:58 +0000
ROA not before: Mon 19 Oct 2026 07:50:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205676
IP address blocks: 2a0b:1d40::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/59ec58-e996-43e5-b297-3345abcc763c/1/YLO0p9rd3fk7uBrMirUs1fSH30k.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/59ec58-e996-43e5-b297-3345abcc763c/1/YLO0p9rd3fk7uBrMirUs1fSH30k.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLO0p9rd3fk7uBrMirUs1fSH30k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:24:6e:1f:f9:f3:d1:fb:5f:c9:cf:0c:b8:77:05:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b3b4a7daddddf93bb81acc8ab52cd5f487df49
Validity
Not Before: Oct 19 07:50:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ef909d227eb805ed3265d13082e758dff6ead2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:87:ab:d5:7c:8f:8b:76:6a:a0:b5:a4:0b:f5:
ad:18:5f:84:4b:39:01:5b:d9:0c:45:d5:53:68:f0:
fe:21:62:f1:96:e9:50:14:5a:1b:26:e3:99:6b:fd:
1d:16:bf:ef:eb:19:b1:d2:25:09:34:c4:5a:df:a4:
1b:69:a9:8d:3e:53:6a:a3:50:0b:20:91:e7:12:4a:
62:60:8d:71:af:83:00:bf:32:0f:b2:60:ed:68:ca:
39:81:78:4a:cf:11:c6:f5:6c:a7:6b:5f:8a:f3:08:
d7:f8:c0:eb:34:08:c9:82:3e:7d:e6:fa:bc:b2:95:
41:5a:7c:30:43:9d:4d:79:ec:9c:34:c8:9b:4d:92:
e0:bf:88:d5:7a:0f:8b:af:44:71:c2:e9:12:bd:c3:
a7:f5:33:83:75:b7:19:81:d6:dd:c1:d0:dd:b0:e8:
ac:c0:ec:8a:50:5e:13:40:5f:02:10:ab:85:a2:6c:
c5:cb:02:ac:0b:25:d6:f7:84:f4:45:71:72:92:c0:
0a:b6:ac:5c:9d:3d:83:ca:1c:aa:14:52:a7:f0:03:
05:d2:4b:f8:83:0b:a9:d8:d6:ea:9e:09:15:fc:d0:
44:85:d2:73:be:7c:b8:f8:4b:ff:a7:90:64:20:48:
a3:c1:6d:01:01:8d:1c:a8:c4:30:cb:d5:17:b6:89:
a7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F9:09:D2:27:EB:80:5E:D3:26:5D:13:08:2E:75:8D:FF:6E:AD:2D
X509v3 Authority Key Identifier:
keyid:60:B3:B4:A7:DA:DD:DD:F9:3B:B8:1A:CC:8A:B5:2C:D5:F4:87:DF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLO0p9rd3fk7uBrMirUs1fSH30k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59ec58-e996-43e5-b297-3345abcc763c/1/fvkJ0ifrgF7TJl0TCC51jf9urS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59ec58-e996-43e5-b297-3345abcc763c/1/YLO0p9rd3fk7uBrMirUs1fSH30k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:1d40::/36
Signature Algorithm: sha256WithRSAEncryption
6d:02:37:89:fc:f2:99:a3:0d:05:eb:16:30:f1:ae:15:9c:54:
4f:f9:c5:61:f6:1d:7a:ed:f9:e2:a2:70:f6:f1:de:06:50:1a:
72:9a:c9:fd:c8:87:cd:f0:b2:c3:50:77:38:b2:2f:22:e2:43:
d8:7c:de:66:67:57:46:82:47:07:9b:22:8c:f4:d5:d1:9d:70:
e9:58:a8:3a:31:ee:df:8c:8a:85:6f:e6:70:5a:d5:cf:a4:14:
dd:10:c9:1c:38:24:89:e5:a9:12:ad:01:8c:80:9b:03:15:0d:
73:61:db:56:28:9e:99:eb:a5:14:2b:8b:a0:c9:b2:55:3c:d7:
c1:bf:41:f8:ce:17:f6:f9:f6:f5:0f:e1:d6:15:17:29:ac:d3:
fb:d9:0a:c1:04:b2:ed:93:03:af:8b:51:32:86:ef:c9:74:a4:
70:49:c6:09:fb:f2:52:47:a1:ae:6c:c2:4c:b5:62:24:05:1a:
1c:42:29:ae:69:4b:4d:c7:73:1f:4d:66:77:27:8a:5f:2f:3a:
42:f4:99:85:f5:04:e2:02:00:82:9f:46:33:4d:e6:a7:7a:f7:
12:11:72:56:5f:75:5d:a2:02:b5:f8:f1:08:ce:14:61:cc:f8:
46:6b:33:cc:89:b0:bc:1c:d5:56:49:c0:bf:d2:d6:00:07:d8:
11:60:d4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 04:00:09 2026 by rpki-client