Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/vMczrGi6ORE-yZOgy2L6w0bjkXo.roa
File: vMczrGi6ORE-yZOgy2L6w0bjkXo.roa (raw, json)
Hash identifier: UyMf8i98c5uUzf93NivYGmFTli1Mo2kNliLFP7sjKr0=
Subject key identifier: BC:C7:33:AC:68:BA:39:11:3E:C9:93:A0:CB:62:FA:C3:46:E3:91:7A
Certificate issuer: /CN=2369cf693efc102c937faca7ba09cccaec574948
Certificate serial: 01A1534479C2745588E55C993EC27D7C6A70
Authority key identifier: 23:69:CF:69:3E:FC:10:2C:93:7F:AC:A7:BA:09:CC:CA:EC:57:49:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I2nPaT78ECyTf6ynugnMyuxXSUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/vMczrGi6ORE-yZOgy2L6w0bjkXo.roa
Signing time: Mon 19 Oct 2026 08:25:58 +0000
ROA not before: Mon 19 Oct 2026 08:25:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197210
IP address blocks: 2a0d:36c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I2nPaT78ECyTf6ynugnMyuxXSUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:44:79:c2:74:55:88:e5:5c:99:3e:c2:7d:7c:6a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2369cf693efc102c937faca7ba09cccaec574948
Validity
Not Before: Oct 19 08:25:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bcc733ac68ba39113ec993a0cb62fac346e3917a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3e:c8:19:4d:2b:b0:78:b2:21:6d:27:2f:8c:
a9:a2:0b:ef:4a:7a:74:aa:27:e4:ac:77:1b:d9:e2:
c2:c9:b1:22:6e:8b:be:0c:c1:39:4c:f6:b2:02:ae:
ce:30:fc:7d:11:1e:47:17:77:50:ad:48:ac:51:b6:
23:19:96:c0:b7:2d:6e:fb:12:42:75:f8:1a:6a:15:
94:44:11:f6:fe:ab:30:7c:7f:f8:22:b7:26:66:30:
a3:77:68:df:4a:cd:77:cc:bf:42:fa:81:87:2a:82:
3d:7a:63:35:c1:9c:9c:a2:e7:d4:d6:ea:07:60:69:
a4:74:6b:5a:a4:4d:f5:78:10:7f:d4:b2:80:fb:fe:
3b:4e:97:77:27:84:10:9e:8f:f6:d0:f2:7d:c8:df:
25:de:63:07:bf:0e:fd:f7:4f:2f:89:cf:1d:e8:16:
fa:9a:33:cc:70:fe:24:dd:c0:29:a2:30:e7:6f:b4:
cf:22:a5:ee:89:a4:d3:db:7d:22:c8:df:19:6d:9a:
3e:7b:6e:37:50:52:31:4e:99:23:54:39:6b:04:06:
62:61:37:28:6e:d1:e6:75:bc:eb:5e:1d:d2:42:a5:
24:ef:c8:a2:c4:2a:b4:47:c2:2a:4f:ea:83:a0:21:
ee:a5:16:a9:3b:83:05:e3:b0:df:e0:fd:f9:86:de:
2a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C7:33:AC:68:BA:39:11:3E:C9:93:A0:CB:62:FA:C3:46:E3:91:7A
X509v3 Authority Key Identifier:
keyid:23:69:CF:69:3E:FC:10:2C:93:7F:AC:A7:BA:09:CC:CA:EC:57:49:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2nPaT78ECyTf6ynugnMyuxXSUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/vMczrGi6ORE-yZOgy2L6w0bjkXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/60eb19-95fc-4d71-bc91-1dfd5d977adb/1/I2nPaT78ECyTf6ynugnMyuxXSUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:36c0::/29
Signature Algorithm: sha256WithRSAEncryption
7e:fa:ba:11:ad:2e:3f:73:a7:02:57:97:4a:e9:f9:0d:66:02:
4e:e1:ef:8a:f1:e0:ce:ec:de:ca:c0:2c:36:2b:e8:a9:d9:87:
ee:41:68:78:a9:55:03:20:06:6c:08:8d:31:57:62:2b:26:ba:
3a:a5:bd:95:90:79:16:b8:1a:f6:52:df:91:01:e1:f9:43:c7:
38:8c:bd:3d:e1:72:4d:65:cd:ef:e5:21:75:e1:52:2f:7e:7c:
bb:af:e7:f8:60:de:af:52:7a:cd:6a:ee:32:2e:0c:e4:11:6f:
49:70:ff:9b:6a:23:6b:69:54:04:b0:80:f1:45:15:67:6f:27:
a0:ff:05:c4:22:1e:a5:dd:63:1f:93:e9:2d:39:b9:9b:86:8e:
16:1c:c2:91:e6:d4:e6:9a:f3:61:31:c2:0d:16:0b:7e:eb:bb:
b2:fd:4d:b1:b9:06:5e:cd:30:9c:11:27:81:5e:b8:81:02:3a:
cd:68:04:89:fc:a0:12:84:25:46:78:b1:71:ba:9b:27:13:ab:
62:34:5f:10:d6:64:3a:3e:d9:95:6f:87:0e:2f:cc:6f:93:0c:
3d:50:94:08:d4:f9:65:bb:ce:4b:27:6f:90:85:d4:95:e6:11:
b9:2b:80:72:81:7f:bf:0f:36:96:93:03:4f:01:40:33:35:cc:
61:01:76:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 07:58:47 2026 by rpki-client