Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/1-vrSVPJjHsHCicR_GtDdwEFDtw8.roa
File: 1-vrSVPJjHsHCicR_GtDdwEFDtw8.roa (raw, json)
Hash identifier: B9LV4sGDcVyY55MmnLt3NH9uMZXfXuDgYMm/m+0wgf0=
Subject key identifier: FA:FA:D2:54:F2:63:1E:C1:C2:89:C4:7F:1A:D0:DD:C0:41:43:B7:0F
Certificate issuer: /CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Certificate serial: 01A0FBCC6303F1572431BF116485B2D41FC3
Authority key identifier: EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/1-vrSVPJjHsHCicR_GtDdwEFDtw8.roa
Signing time: Fri 02 Oct 2026 08:47:50 +0000
ROA not before: Fri 02 Oct 2026 08:47:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209061
IP address blocks: 84.21.180.0/22 maxlen: 24
212.40.64.0/22 maxlen: 24
212.40.68.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fb:cc:63:03:f1:57:24:31:bf:11:64:85:b2:d4:1f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Validity
Not Before: Oct 2 08:47:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fafad254f2631ec1c289c47f1ad0ddc04143b70f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bf:3b:e8:c6:6d:c9:04:56:d0:bb:6b:a6:0d:
d8:6e:81:bb:2f:e3:7f:51:e3:7e:da:ab:7b:8e:f8:
d7:c9:81:fc:10:62:31:86:31:d4:f6:6b:e2:46:77:
12:8f:2d:b8:8c:11:46:05:24:82:4c:0e:c3:62:69:
a9:a8:3a:cd:41:38:69:fb:1a:78:77:e8:a4:8e:a9:
ed:3b:54:f1:b6:90:4f:fc:a5:78:c5:3e:27:a0:0a:
54:09:1e:11:7c:b6:88:88:18:71:74:51:34:16:78:
54:57:5c:12:d7:35:3b:ce:11:86:c6:00:47:f5:34:
5c:d9:7f:ee:ad:a5:46:69:13:32:a9:5a:56:5c:a8:
a8:74:34:ff:4c:b0:b7:db:8a:38:4c:43:b3:c6:aa:
a2:7c:35:ab:31:a8:19:d1:52:63:25:cd:f5:6f:cc:
c7:58:02:b2:22:45:da:de:f6:40:95:07:cb:a3:7f:
20:19:f8:de:08:ff:f2:7e:9c:13:88:38:4f:69:5b:
0b:6c:cf:a1:22:d9:91:56:2c:33:8d:02:3a:7b:6f:
9f:d4:8b:8b:93:be:c5:6d:db:51:8c:b6:f9:17:5f:
45:0a:ae:ab:2b:96:84:cf:05:e7:7a:39:f3:aa:77:
52:93:8f:5f:dd:95:42:ea:e6:13:36:d4:a2:e9:6f:
e4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FA:D2:54:F2:63:1E:C1:C2:89:C4:7F:1A:D0:DD:C0:41:43:B7:0F
X509v3 Authority Key Identifier:
keyid:EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/1-vrSVPJjHsHCicR_GtDdwEFDtw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.21.180.0/22
212.40.64.0-212.40.69.255
Signature Algorithm: sha256WithRSAEncryption
10:94:c4:30:0c:b4:19:18:2f:f9:d2:7f:91:62:3a:2e:e8:58:
80:83:af:10:bd:4c:64:65:47:5b:7d:f8:6d:67:83:69:31:32:
7e:d1:eb:8c:6a:d1:e7:91:f0:7f:fe:9a:43:ed:f3:52:bc:2a:
51:39:cc:42:99:98:0a:e6:a0:f6:ea:e7:a0:95:aa:17:d1:1e:
69:b8:4b:b8:bc:b1:f7:1b:5d:bc:b4:12:b2:b9:45:7e:c2:76:
31:9c:da:be:b7:6e:26:b3:36:1e:78:28:56:25:23:8c:42:1c:
1b:bb:86:36:fb:c9:78:e8:46:22:87:65:36:25:21:d7:7e:5f:
7d:58:21:e2:08:26:e9:2b:bd:8d:50:02:1c:7e:1d:ef:56:c0:
af:85:50:76:23:57:2f:f5:12:ba:47:f3:61:5b:14:91:de:f4:
27:23:f8:2d:d1:27:9f:cc:bf:ff:a4:5c:1d:d4:9e:26:1f:af:
cc:43:ac:25:18:c8:a2:55:3d:bd:c5:61:91:87:a4:75:36:19:
d3:56:e4:41:61:98:c1:95:28:fe:a9:29:4f:10:f2:3a:f5:9f:
09:94:10:fe:c6:48:23:2f:2f:fa:45:6b:92:ef:9e:2f:dc:0a:
ed:83:3a:a3:bb:e3:ff:67:ce:45:9c:5b:32:54:f1:b4:9b:dc:
7f:62:73:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:59:50 2026 by rpki-client