Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Vrc4JrB5XELOSqxDuqNgYlRwZHY.roa
File: Vrc4JrB5XELOSqxDuqNgYlRwZHY.roa (raw, json)
Hash identifier: ootb0bfga+QzFkKZnoZiRcPIZ+1dM3VURm1C7Sd8U7U=
Subject key identifier: 56:B7:38:26:B0:79:5C:42:CE:4A:AC:43:BA:A3:60:62:54:70:64:76
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09ECC4BDB04BFA6E913B98E53FE8115EC
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Vrc4JrB5XELOSqxDuqNgYlRwZHY.roa
Signing time: Mon 14 Sep 2026 07:23:03 +0000
ROA not before: Mon 14 Sep 2026 07:23:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202673
IP address blocks: 2a0e:97c0:c40::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 20:52:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:cc:4b:db:04:bf:a6:e9:13:b9:8e:53:fe:81:15:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 14 07:23:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56b73826b0795c42ce4aac43baa3606254706476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:46:3e:ea:b4:a4:cf:fd:57:b6:83:e6:bb:c9:
54:84:ef:d1:b3:78:cd:80:37:5b:8e:1c:85:03:93:
8e:40:17:5f:91:27:09:34:79:02:f2:59:b0:18:ab:
1e:c9:8e:7a:c0:62:c5:81:82:e3:8d:ff:6e:63:19:
5f:f4:0e:a3:e6:75:71:03:8f:2f:cd:42:13:34:21:
1a:a9:75:13:92:2e:f2:2f:c6:d9:67:ac:ea:c0:40:
aa:61:29:04:7c:b2:ae:2e:4c:10:d8:ff:41:a9:49:
52:57:dd:02:30:36:9f:40:dd:4e:14:43:63:70:f0:
39:71:2c:4a:8a:44:c2:3f:c3:8e:1d:e1:1c:28:91:
d9:e2:6d:28:91:dc:a4:f6:c1:05:66:4b:c5:07:45:
4f:c6:0a:98:dc:79:87:f1:d6:db:c0:69:c5:68:03:
47:86:3e:d9:e9:f5:9a:ad:eb:13:33:ce:0d:b2:45:
ac:50:60:76:9e:25:5c:c8:38:b5:b6:33:09:07:64:
b0:bb:0a:2a:98:c2:80:e0:88:b1:0f:90:22:f0:00:
12:41:c5:41:a2:ef:82:43:1a:99:b0:22:99:1d:00:
4a:53:f8:e0:af:4f:94:28:0e:31:ca:4e:52:72:67:
fc:47:17:68:57:e1:33:68:fb:9c:54:be:02:88:0e:
75:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B7:38:26:B0:79:5C:42:CE:4A:AC:43:BA:A3:60:62:54:70:64:76
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Vrc4JrB5XELOSqxDuqNgYlRwZHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:c40::/44
Signature Algorithm: sha256WithRSAEncryption
a1:af:9f:72:ea:c5:ce:a0:01:af:cc:b6:e3:49:4a:23:ef:92:
71:26:73:ea:e6:97:91:11:28:99:de:dd:d0:26:30:e1:0a:f0:
a1:b2:87:00:76:a0:56:91:5a:2e:71:c5:88:4b:fb:17:ff:83:
85:69:09:48:84:d6:0e:79:7e:b0:f9:16:31:fd:31:8e:84:f8:
e3:47:43:38:55:27:d8:5f:fa:c3:9d:00:b4:d5:4e:75:d0:d9:
d9:ce:12:7f:21:4e:9a:4f:ba:5a:56:7b:60:55:e9:f4:45:80:
97:9e:94:d1:0a:86:a9:06:83:c3:28:12:17:0a:42:d7:3c:fe:
2b:95:3d:2c:20:93:ea:35:de:1f:45:49:d0:c3:1a:79:ee:cc:
4f:b3:b2:4d:06:a9:e0:be:be:5a:ba:c6:b1:c6:18:1d:91:15:
f9:2d:a2:cc:fc:29:41:fe:25:cd:dd:b9:e0:5a:9a:08:42:4c:
61:7c:88:be:6e:60:07:51:81:84:ac:1b:3e:ef:43:6c:0c:36:
53:e7:98:a6:de:8f:db:0d:c0:f7:df:39:c8:00:84:fb:ea:10:
9b:c7:bf:d1:4d:1c:13:ee:6b:41:b5:5c:d5:48:b4:73:dd:a5:
fa:c4:87:a2:39:c8:65:20:e7:b0:91:6e:a5:8b:3d:56:18:b2:
f3:b7:ba:62
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaCezEvbBL+m6RO5jlP+gRXsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjYwOTE0MDcyMzAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NmI3MzgyNmIwNzk1YzQyY2U0YWFjNDNiYWEzNjA2MjU0NzA2NDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EY+6rSkz/1XtoPmu8lUhO/Rs3jN
gDdbjhyFA5OOQBdfkScJNHkC8lmwGKseyY56wGLFgYLjjf9uYxlf9A6j5nVxA48v
zUITNCEaqXUTki7yL8bZZ6zqwECqYSkEfLKuLkwQ2P9BqUlSV90CMDafQN1OFENj
cPA5cSxKikTCP8OOHeEcKJHZ4m0okdyk9sEFZkvFB0VPxgqY3HmH8dbbwGnFaANH
hj7Z6fWaresTM84NskWsUGB2niVcyDi1tjMJB2SwuwoqmMKA4IixD5Ai8AASQcVB
ou+CQxqZsCKZHQBKU/jgr0+UKA4xyk5Scmf8RxdoV+EzaPucVL4CiA519QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFa3OCaweVxCzkqsQ7qjYGJUcGR2MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvVnJjNEpyQjVYRUxPU3F4RHVxTmdZbFJ3WkhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6XwAxA
MA0GCSqGSIb3DQEBCwUAA4IBAQChr59y6sXOoAGvzLbjSUoj75JxJnPq5peRESiZ
3t3QJjDhCvChsocAdqBWkVouccWIS/sX/4OFaQlIhNYOeX6w+RYx/TGOhPjjR0M4
VSfYX/rDnQC01U510NnZzhJ/IU6aT7paVntgVen0RYCXnpTRCoapBoPDKBIXCkLX
PP4rlT0sIJPqNd4fRUnQwxp57sxPs7JNBqngvr5ausaxxhgdkRX5LaLM/ClB/iXN
3bngWpoIQkxhfIi+bmAHUYGErBs+70NsDDZT55im3o/bDcD33znIAIT76hCbx7/R
TRwT7mtBtVzVSLRz3aX6xIeiOchlIOewkW6liz1WGLLzt7pi
-----END CERTIFICATE-----
Generated at Tue Sep 15 01:23:57 2026 by rpki-client