Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/vWVk-2G162FZH0zKeBDg_laMvsE.roa
File: vWVk-2G162FZH0zKeBDg_laMvsE.roa (raw, json)
Hash identifier: 5gbra9DICWSN2Ea49cRSYhSGSisxh8Njun0zDP/hjP4=
Subject key identifier: BD:65:64:FB:61:B5:EB:61:59:1F:4C:CA:78:10:E0:FE:56:8C:BE:C1
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 01A12B617BE4B2118CD608D296EBE0F24F59
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/vWVk-2G162FZH0zKeBDg_laMvsE.roa
Signing time: Sun 11 Oct 2026 14:32:51 +0000
ROA not before: Sun 11 Oct 2026 14:32:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219308
IP address blocks: 2a05:4140:29::/48 maxlen: 48
2a05:4140:61::/48 maxlen: 48
2a05:4140:6d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:61:7b:e4:b2:11:8c:d6:08:d2:96:eb:e0:f2:4f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Oct 11 14:32:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd6564fb61b5eb61591f4cca7810e0fe568cbec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ac:98:58:8f:44:c4:c8:e0:ee:12:a2:89:45:
0a:87:2d:fc:ac:09:ec:f8:7b:5c:80:63:dc:d7:b6:
1c:5d:66:36:35:01:d6:6c:a7:95:d2:58:ec:6f:66:
1d:1d:9c:4f:ef:39:f7:90:a1:6e:7a:dc:3f:57:0b:
d6:89:dd:fc:e1:77:85:b4:e5:6c:f4:7e:d4:2e:da:
a8:97:86:a0:de:c5:6c:ad:2e:a5:ba:7f:48:ed:20:
4c:0a:2e:80:8c:04:b7:15:5b:a4:d9:66:a5:15:bd:
f6:d0:22:54:07:15:c2:73:03:36:80:91:0a:0c:cc:
72:d3:96:6c:31:f3:87:62:e5:ed:6b:04:d1:18:62:
82:f8:5e:70:9d:8e:aa:d6:da:0a:9f:d4:19:19:c1:
57:41:bf:c3:97:cc:18:18:50:16:07:ef:98:95:79:
97:1e:1c:94:fc:66:bb:c6:63:32:9f:66:25:32:2b:
11:5a:4d:0a:9f:21:4a:b9:5b:91:65:b8:49:fb:28:
fc:a3:3c:9d:8d:63:0f:86:d5:e1:10:e3:13:23:74:
71:ea:11:e6:ba:d8:18:55:39:10:9a:27:ae:32:a3:
f7:08:dc:0a:1d:1f:30:9b:ec:f4:ae:b2:74:91:4d:
8b:ed:e8:00:9c:ea:80:d3:9c:00:90:81:f6:e0:70:
fa:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:65:64:FB:61:B5:EB:61:59:1F:4C:CA:78:10:E0:FE:56:8C:BE:C1
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/vWVk-2G162FZH0zKeBDg_laMvsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4140:29::/48
2a05:4140:61::/48
2a05:4140:6d::/48
Signature Algorithm: sha256WithRSAEncryption
77:33:d6:03:0d:91:fb:a4:36:aa:27:04:45:3c:22:25:8a:03:
a2:5a:2c:6f:ae:43:06:0b:3e:8e:e3:3f:2d:b7:2c:5b:89:2a:
16:88:f2:b0:c8:92:01:d5:e1:41:d5:c3:95:4d:94:62:cc:51:
1f:ac:b9:64:ef:41:e7:d4:df:c0:0a:42:95:e6:f4:80:53:35:
b9:89:2a:77:7c:48:43:d4:bd:5b:7a:68:3d:44:85:f9:48:d2:
14:fc:75:8f:4b:10:8d:92:dc:d9:86:a1:82:05:05:47:fc:fd:
a2:31:68:1c:c1:19:cf:b3:a7:fd:0d:bc:cf:cb:22:e9:24:e8:
5e:37:56:4f:7f:65:12:45:94:5b:7c:64:4e:6c:7a:d9:03:78:
f1:f9:d2:a7:91:a1:0c:61:ba:a3:26:9c:f8:97:66:0f:7e:97:
b9:00:d6:ef:86:e8:78:9c:3f:ba:0f:7b:07:6b:a2:f7:ed:84:
27:14:26:9c:95:e6:fd:8c:33:7c:ad:95:f9:e5:74:0f:ad:0c:
b5:c0:cf:16:1d:92:cc:f9:c8:4d:7e:59:f3:8a:e3:ed:15:1b:
16:0d:53:1a:c7:45:ad:75:c5:d3:07:09:09:b0:c4:ee:2f:ab:
10:1d:a3:9d:65:b0:16:71:d4:59:ae:bc:dc:3b:6e:71:04:ea:
4e:a5:e9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 09:13:16 2026 by rpki-client