Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/vQp8JDZu2Q14WObOPwXlpzsuRww.roa
File: vQp8JDZu2Q14WObOPwXlpzsuRww.roa (raw, json)
Hash identifier: NnSb+dE0t2g/eGL7iPYNNWKpsRvGqFDLvEe0bjWAn3E=
Subject key identifier: BD:0A:7C:24:36:6E:D9:0D:78:58:E6:CE:3F:05:E5:A7:3B:2E:47:0C
Certificate issuer: /CN=6a0e16cc2a8b91cb483f451e813b678ae97582b0
Certificate serial: 01A1843441E54B574A89A964BE24EB967AA3
Authority key identifier: 6A:0E:16:CC:2A:8B:91:CB:48:3F:45:1E:81:3B:67:8A:E9:75:82:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/vQp8JDZu2Q14WObOPwXlpzsuRww.roa
Signing time: Wed 28 Oct 2026 20:29:39 +0000
ROA not before: Wed 28 Oct 2026 20:29:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 86.110.58.0/24 maxlen: 24
86.110.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 21:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:34:41:e5:4b:57:4a:89:a9:64:be:24:eb:96:7a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0e16cc2a8b91cb483f451e813b678ae97582b0
Validity
Not Before: Oct 28 20:29:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd0a7c24366ed90d7858e6ce3f05e5a73b2e470c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:32:4f:a8:7f:fc:c5:db:0d:58:59:16:f7:5e:
28:8f:79:84:d5:9c:56:90:a4:14:bf:53:d0:52:0f:
2d:87:59:43:8a:c4:8e:e7:df:d4:08:06:a7:65:6b:
5c:61:e0:25:86:b2:13:60:0c:15:58:9f:ed:17:50:
82:79:95:1c:5d:36:a4:86:76:c5:ed:db:6b:d3:de:
43:c5:2b:e6:74:d9:87:28:56:8a:ca:1d:15:5c:2a:
91:42:a5:93:64:37:4c:2b:c4:07:07:44:22:e1:28:
9b:da:ba:d3:95:b9:0f:9f:c9:95:fe:82:c2:3e:24:
6e:2d:47:ce:35:65:d5:35:c4:34:da:53:bd:6d:df:
6f:bf:c1:6c:0f:c3:e2:80:ad:e2:64:e5:1d:40:5a:
18:b2:b8:3e:86:b0:56:6f:e6:2c:a9:68:e1:23:8b:
ac:3b:59:e0:e7:e4:bc:21:91:94:d4:dc:98:e3:22:
00:89:88:a9:ed:5b:fa:98:9b:41:71:f0:e2:b5:1d:
a6:3c:5d:17:94:33:96:2d:01:eb:12:7c:f0:eb:49:
a0:e4:10:44:a1:58:b2:f7:b1:aa:ec:1f:e2:b1:fc:
ff:fb:53:93:05:88:36:c1:31:ee:ae:3e:50:67:ef:
a8:a4:10:50:6e:b3:a3:25:6e:34:e1:90:d2:ff:32:
d3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0A:7C:24:36:6E:D9:0D:78:58:E6:CE:3F:05:E5:A7:3B:2E:47:0C
X509v3 Authority Key Identifier:
keyid:6A:0E:16:CC:2A:8B:91:CB:48:3F:45:1E:81:3B:67:8A:E9:75:82:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/vQp8JDZu2Q14WObOPwXlpzsuRww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.58.0/24
86.110.63.0/24
Signature Algorithm: sha256WithRSAEncryption
13:6b:20:c3:1a:7c:ba:6a:3e:7d:21:1e:89:e7:cd:88:ae:b5:
07:cf:a2:92:83:c3:08:3e:68:21:0a:47:db:49:75:06:6b:8e:
ec:eb:a0:a0:31:5b:b4:ad:2a:45:74:a6:a3:ff:2d:88:94:66:
66:ee:a6:c3:12:15:cd:16:80:05:8b:ef:dc:2d:18:e8:89:6b:
ae:b8:d4:e5:ac:12:b5:1d:70:27:86:16:6c:03:bf:07:8c:d6:
dd:a7:24:5c:f6:8a:d5:46:75:45:12:0c:5c:fb:4e:38:42:1e:
9e:7e:43:13:65:a6:74:9a:81:b3:3c:eb:cf:bb:a4:6b:bc:35:
c3:4c:1c:5f:13:54:35:50:11:ad:75:9b:d4:79:9c:94:ae:28:
70:72:b6:48:3a:c1:24:09:b1:6a:1d:c3:25:46:b8:6b:21:fe:
3d:69:a8:fd:98:61:58:e9:82:88:80:08:df:e4:de:e7:06:77:
d3:50:80:55:e2:56:63:b9:5a:34:f9:40:f6:ec:99:51:23:60:
1c:2c:a2:dc:95:4f:10:46:96:ba:b2:75:c9:ca:da:fa:f7:cf:
69:be:e6:36:e7:49:15:aa:31:c8:0f:ac:e6:aa:81:64:af:7e:
5a:85:d9:21:33:1a:37:87:7f:66:71:28:e7:85:40:15:4b:4d:
72:aa:cb:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 04:22:10 2026 by rpki-client