Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/vcuseHHUp2SFcc7WFCquL547C34.roa
File: vcuseHHUp2SFcc7WFCquL547C34.roa (raw, json)
Hash identifier: W+undj5Tz3EQlz8nELOD/EX3UtN6Yso7VOiTqtTp3ys=
Subject key identifier: BD:CB:AC:78:71:D4:A7:64:85:71:CE:D6:14:2A:AE:2F:9E:3B:0B:7E
Certificate issuer: /CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Certificate serial: 019F36C6C52CD0C69B1E9C940F0A271BDE7F
Authority key identifier: EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/vcuseHHUp2SFcc7WFCquL547C34.roa
Signing time: Mon 06 Jul 2026 09:33:43 +0000
ROA not before: Mon 06 Jul 2026 09:33:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61112
IP address blocks: 64.90.28.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 06:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:c6:c5:2c:d0:c6:9b:1e:9c:94:0f:0a:27:1b:de:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Validity
Not Before: Jul 6 09:33:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bdcbac7871d4a7648571ced6142aae2f9e3b0b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:46:2e:92:d6:58:e4:2d:8b:fa:57:01:f9:dc:
aa:b4:7d:18:c7:95:c5:85:24:12:cc:a4:80:9e:2a:
61:28:34:e2:90:49:4f:16:cd:c5:ba:47:4b:dd:76:
2c:bd:53:64:42:93:0e:e6:ff:60:81:a2:31:e7:dd:
03:bc:2e:a5:ae:58:c4:9a:a7:a3:d5:9e:f1:10:b6:
28:d3:ba:52:a9:ca:9c:c8:2f:a9:7f:3b:35:ac:81:
00:c3:2e:39:59:b3:4a:d6:8b:3d:39:bf:ee:fd:e4:
8f:d6:1a:ba:e8:4d:23:cf:88:6f:40:95:15:94:0a:
9f:6a:96:c8:13:c0:08:d2:fb:a0:55:f7:e8:b5:86:
c9:87:aa:cf:fe:70:95:69:9a:29:fa:75:9b:df:7f:
f3:67:c2:9a:ca:e8:56:62:f4:85:a1:12:90:b3:f7:
0c:7c:dc:23:a1:77:5b:aa:59:71:2a:ea:02:27:89:
e7:a7:62:e1:33:c7:36:21:e6:62:b4:19:9b:a4:1b:
9e:cb:41:18:a0:06:bf:e2:0c:dc:a4:0e:5d:c8:8a:
0c:a9:65:a7:fb:17:cc:a0:9b:96:a4:76:8b:3d:63:
bc:72:2e:59:7f:6a:95:f0:9e:e3:f7:80:20:49:79:
0a:93:48:ab:8b:23:87:7c:65:b6:cf:38:31:52:d5:
fc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CB:AC:78:71:D4:A7:64:85:71:CE:D6:14:2A:AE:2F:9E:3B:0B:7E
X509v3 Authority Key Identifier:
keyid:EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/vcuseHHUp2SFcc7WFCquL547C34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.90.28.0/23
Signature Algorithm: sha256WithRSAEncryption
23:1b:62:17:01:f9:e9:02:c1:46:25:87:88:b5:0b:b0:5e:80:
ef:4a:aa:8a:5d:37:f5:bc:79:f9:a2:f8:cc:2b:d0:81:b4:7e:
58:f6:cb:81:24:0e:01:e8:eb:ca:27:0b:6d:48:ac:47:cc:79:
1e:60:4d:77:e9:11:31:b9:e0:ed:9a:0b:d4:ee:d4:61:27:a8:
cf:fe:ef:8c:ac:6a:03:2e:3e:65:05:36:07:4b:37:2d:b8:fc:
7d:16:70:75:bb:77:53:ef:43:9d:81:f5:a0:48:3f:43:ee:e2:
a5:76:b7:57:80:d9:24:f1:53:56:5a:7e:d2:42:fc:e3:15:15:
a3:0b:3d:aa:30:c9:94:4a:ed:01:85:42:c6:e0:89:23:de:c2:
09:2c:1d:8a:bd:ed:d5:ac:35:f4:27:a5:cd:18:f6:8b:28:7b:
c7:41:8b:33:a2:54:99:d1:3f:51:3b:d2:5f:fc:12:13:a7:90:
97:70:7d:4c:35:b5:59:ae:1f:7e:cb:20:4b:d2:82:6f:01:2e:
f8:d1:71:79:f7:4a:4c:66:cb:8e:cd:32:b5:fc:6a:1e:c9:c4:
de:99:65:be:11:a6:e4:09:39:47:ba:f3:c0:42:b8:b7:ee:e1:
e8:1b:fc:8a:ca:4d:7e:b2:af:af:ef:b1:7c:60:f7:79:ae:08:
9c:a5:94:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 16:09:38 2026 by rpki-client