Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/vcJsXSmebygkiO1u98sDd5yvTS4.roa
File: vcJsXSmebygkiO1u98sDd5yvTS4.roa (raw, json)
Hash identifier: E+7qJmCAiPJjSB0MZl/CtlkcxsQXp3zBWufxUli/XlQ=
Subject key identifier: BD:C2:6C:5D:29:9E:6F:28:24:88:ED:6E:F7:CB:03:77:9C:AF:4D:2E
Certificate issuer: /CN=95608722905d8352a40caa46a06112ea6a44600e
Certificate serial: 019F2368C74AEB092D1FB4D0EB5691CBA8B1
Authority key identifier: 95:60:87:22:90:5D:83:52:A4:0C:AA:46:A0:61:12:EA:6A:44:60:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lWCHIpBdg1KkDKpGoGES6mpEYA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/vcJsXSmebygkiO1u98sDd5yvTS4.roa
Signing time: Thu 02 Jul 2026 15:18:16 +0000
ROA not before: Thu 02 Jul 2026 15:18:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31898
IP address blocks: 2a09:a447:ac1e::/48 maxlen: 64
2a09:a447:ac1f::/48 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/lWCHIpBdg1KkDKpGoGES6mpEYA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/lWCHIpBdg1KkDKpGoGES6mpEYA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lWCHIpBdg1KkDKpGoGES6mpEYA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 18:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c7:4a:eb:09:2d:1f:b4:d0:eb:56:91:cb:a8:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95608722905d8352a40caa46a06112ea6a44600e
Validity
Not Before: Jul 2 15:18:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bdc26c5d299e6f282488ed6ef7cb03779caf4d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:83:03:1d:6a:c9:00:60:83:b4:44:7e:76:4d:
38:0d:88:d8:c1:2f:52:e0:da:60:c3:55:28:ec:f2:
e1:d9:dd:dc:04:26:80:a2:31:8a:e7:0e:a3:fc:4c:
e2:68:eb:6a:89:99:5d:00:f0:e2:1d:fa:05:b7:86:
f7:9e:f5:3a:a2:c9:db:50:6a:29:cf:b6:31:7e:07:
c5:19:27:37:78:e0:c1:e7:bd:cd:21:46:c2:48:9b:
25:43:01:b1:a4:ed:66:d8:64:a5:d8:63:57:ca:0e:
1f:90:ef:7e:b4:fe:db:ab:3b:f4:0f:64:ed:16:93:
11:3a:e4:e3:d7:3b:bd:b9:6d:48:0b:d3:75:63:1e:
3f:45:61:94:09:1b:ea:cf:51:a6:60:97:25:8e:db:
ff:5c:b0:94:a6:a7:1a:ad:b6:74:11:71:17:45:5c:
c4:6d:aa:0e:81:1e:72:07:b0:2f:f8:cc:ae:cb:de:
9d:28:9e:62:cc:db:f9:ae:bb:12:43:6d:e8:af:e6:
a7:b7:30:41:9f:d5:0a:0b:ea:17:f2:f7:ec:41:2a:
09:23:d4:2b:1b:d8:07:9d:ad:8a:0a:7b:cd:2d:62:
17:a5:4b:b3:41:c3:6f:53:c9:1e:ed:17:9c:b6:d1:
38:aa:00:66:68:fe:90:14:c5:f7:08:06:4f:bd:8a:
de:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C2:6C:5D:29:9E:6F:28:24:88:ED:6E:F7:CB:03:77:9C:AF:4D:2E
X509v3 Authority Key Identifier:
keyid:95:60:87:22:90:5D:83:52:A4:0C:AA:46:A0:61:12:EA:6A:44:60:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lWCHIpBdg1KkDKpGoGES6mpEYA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/vcJsXSmebygkiO1u98sDd5yvTS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/24149d-d115-4330-bd49-cb56ed3ea7fa/1/lWCHIpBdg1KkDKpGoGES6mpEYA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:a447:ac1e::/47
Signature Algorithm: sha256WithRSAEncryption
92:ff:63:39:05:ee:e6:f3:a0:5e:b6:37:e3:6f:86:5e:b6:f6:
0a:83:4b:1c:f1:de:89:75:5a:d5:6b:a7:de:c5:2d:ad:dc:6d:
23:ec:ce:be:90:ad:ca:39:42:9a:a8:54:43:a3:52:ce:34:a1:
42:0b:cb:7f:1a:6e:df:1d:a3:f2:85:06:2a:77:ef:32:c1:9f:
1f:3d:c7:48:e2:7f:46:6e:14:2a:8d:21:5d:02:0c:b5:11:d3:
5f:b7:5e:da:30:92:5c:31:e8:8c:48:97:06:73:a4:b9:03:fe:
6a:9a:e2:f6:be:b4:72:c3:eb:d3:ba:fa:95:0d:35:d3:68:2d:
7a:87:ed:87:20:dd:f2:22:f4:c4:e9:f4:1f:a0:ee:b9:be:22:
ac:29:13:58:bb:ca:8c:cb:91:9a:c5:d8:e0:40:9c:3a:5f:7c:
c5:23:77:3c:7a:30:29:13:36:31:d4:1f:1b:a3:cf:bd:ad:44:
d7:d6:ff:22:83:c1:a7:4d:e4:c7:dd:0b:7d:a4:8a:bd:b9:7e:
70:3c:08:d8:35:da:5d:61:d3:c6:93:bd:39:10:23:d1:36:99:
16:31:9f:0d:bb:90:7f:11:57:cc:31:7a:c0:57:7c:8b:b7:ef:
0d:43:c0:b5:37:ca:a6:ce:98:e5:6b:33:6f:af:d9:ba:d6:d8:
56:cc:23:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:44:42 2026 by rpki-client