Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/vT9q_7Kbw1nzjTiiL-Qyb_xxthw.roa
File: vT9q_7Kbw1nzjTiiL-Qyb_xxthw.roa (raw, json)
Hash identifier: wIzS+V276HA2+RbtI3bi97WOTD3ODV7DOF0uzSV/Wnc=
Subject key identifier: BD:3F:6A:FF:B2:9B:C3:59:F3:8D:38:A2:2F:E4:32:6F:FC:71:B6:1C
Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial: 019FFA378804AC8F2BBAEED74BDC675E2EAA
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/vT9q_7Kbw1nzjTiiL-Qyb_xxthw.roa
Signing time: Thu 13 Aug 2026 08:22:51 +0000
ROA not before: Thu 13 Aug 2026 08:22:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61047
IP address blocks: 2a01:240:1904::/48 maxlen: 48
2a01:240:1905::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:37:88:04:ac:8f:2b:ba:ee:d7:4b:dc:67:5e:2e:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
Validity
Not Before: Aug 13 08:22:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd3f6affb29bc359f38d38a22fe4326ffc71b61c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:05:a6:8e:c1:dd:05:0d:d0:14:c9:8f:10:b4:
0e:cb:02:2a:d9:c5:2d:cf:15:76:0e:dc:97:68:76:
6e:c8:ee:26:69:af:72:45:16:32:1f:b1:bd:d2:d2:
95:1c:ef:c2:95:10:09:fa:d3:8e:01:dc:7d:f5:04:
83:77:18:26:52:c4:eb:42:9f:20:60:e0:99:4a:99:
c5:24:65:74:86:bc:bf:09:0e:18:41:59:4a:43:0a:
c0:45:53:94:52:79:9d:4e:4a:7c:3d:c9:da:0f:12:
7c:16:56:fe:4f:55:22:c1:dd:e8:45:e5:51:aa:4a:
e7:c4:a6:81:fe:f6:5a:3b:b9:c6:d0:ad:61:8b:b5:
fc:25:77:25:25:1a:49:5d:57:74:bf:d1:c3:18:60:
68:a6:54:10:0a:b9:62:d1:86:d3:3a:96:8c:c7:b6:
ac:df:cd:fa:00:51:dd:df:47:d5:b1:db:a6:64:63:
c8:3e:e8:ba:af:23:13:33:46:c8:22:d5:ab:0c:cd:
d8:d3:fe:2b:c3:09:0a:10:9c:64:e5:7c:d4:ed:c3:
64:96:88:4e:10:cd:52:ae:76:ce:e4:0d:e5:b7:cd:
e0:67:56:83:0a:7b:8f:0f:46:42:bc:6a:62:40:33:
fa:76:5b:13:00:24:19:96:29:f3:c4:ca:d3:6f:5f:
4d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:3F:6A:FF:B2:9B:C3:59:F3:8D:38:A2:2F:E4:32:6F:FC:71:B6:1C
X509v3 Authority Key Identifier:
keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/vT9q_7Kbw1nzjTiiL-Qyb_xxthw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:240:1904::/47
Signature Algorithm: sha256WithRSAEncryption
3c:06:46:a7:4c:cd:9b:59:b9:b3:03:98:f3:7b:f4:7e:ac:67:
98:da:e3:86:e8:73:8c:52:fa:c7:4c:01:91:d3:7e:be:84:59:
fd:f4:e5:c4:b7:36:8e:26:75:10:e5:7e:6d:88:ae:48:fc:91:
86:bd:57:20:6b:c8:3a:fd:c4:c1:3c:5c:de:31:96:23:5e:db:
07:fb:c3:50:79:fa:5f:b0:a9:30:80:77:32:b7:31:ae:f5:ff:
cd:83:3c:cb:eb:4d:dd:81:86:83:1b:2c:b1:b8:a0:90:e3:c8:
10:36:c1:f8:12:6a:1b:87:fd:78:e3:3c:b3:9d:77:87:6e:fe:
c8:f0:9c:19:59:55:2d:dc:67:48:a0:cb:22:f0:8b:70:08:58:
6e:6c:e6:d8:ad:b2:49:f8:51:86:d2:1c:02:ba:69:ef:3a:1c:
78:ab:a4:c1:97:96:aa:57:1d:dd:8b:7b:f7:1a:85:d0:bb:68:
41:0d:fd:06:85:c4:d1:3a:51:f8:6a:b5:74:b3:f5:21:d0:d7:
e0:1f:de:da:ab:d4:5d:78:86:3e:7d:2f:0d:af:26:f3:59:c5:
98:d9:75:0e:b4:42:0b:54:45:23:f3:8c:87:c8:a0:77:4e:f4:
72:c1:ba:e2:01:61:94:fa:b9:f7:c1:6a:8e:b0:f7:b3:b1:24:
51:28:24:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:30:06 2026 by rpki-client