Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/vpbWYivs0Dwq8rmTylRILBF9wLI.roa
File: vpbWYivs0Dwq8rmTylRILBF9wLI.roa (raw, json)
Hash identifier: AtwsBWU1DJPPUogwKIqdwF56iZ3mc/gnTYpD7JH4Yug=
Subject key identifier: BE:96:D6:62:2B:EC:D0:3C:2A:F2:B9:93:CA:54:48:2C:11:7D:C0:B2
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019E87E0A6C343B5A5C62E14347A2FB74FF9
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/vpbWYivs0Dwq8rmTylRILBF9wLI.roa
Signing time: Tue 02 Jun 2026 10:28:27 +0000
ROA not before: Tue 02 Jun 2026 10:28:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 272105
IP address blocks: 153.51.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 00:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:87:e0:a6:c3:43:b5:a5:c6:2e:14:34:7a:2f:b7:4f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jun 2 10:28:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be96d6622becd03c2af2b993ca54482c117dc0b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b4:50:56:4e:94:b9:af:c5:7b:7a:c3:60:61:
6d:ea:a6:72:5c:25:00:a0:22:5e:9a:c2:57:41:c5:
ac:c9:e3:b0:fd:1c:38:bb:22:21:84:c7:0a:99:e6:
ae:af:13:c0:e7:0c:a2:53:f1:bf:ce:1b:42:a9:e8:
05:b3:ab:50:55:d5:dd:1d:17:b3:69:e6:54:65:8a:
f9:9c:f6:17:c0:ee:7e:61:d3:c7:83:96:e7:2c:d6:
9b:85:6d:3d:83:66:4a:e2:21:ee:4d:b1:32:b1:a5:
55:c3:77:50:05:90:a9:00:49:ad:59:4c:d7:a7:ee:
df:b4:93:a9:f2:56:c7:da:7d:e8:f1:da:45:e2:5e:
e9:03:60:e2:2f:84:e4:ab:cc:d5:1e:f2:ce:87:0b:
56:95:0f:24:41:1c:bf:e3:ce:ba:3f:4e:dd:02:51:
99:cb:69:2f:b6:a0:c1:02:d5:12:98:0e:88:2e:43:
2e:62:53:ee:b5:31:5e:63:bb:04:63:ca:65:63:05:
b6:f1:f2:88:64:09:78:60:0a:e8:91:d0:fa:50:f3:
b7:59:7d:2e:51:05:c9:1d:45:87:f2:30:e4:bf:d0:
aa:06:91:3a:cd:62:24:39:27:f1:75:be:3b:4f:81:
70:d7:9b:c9:87:0c:38:e8:a7:1a:ba:a5:db:45:06:
ec:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:96:D6:62:2B:EC:D0:3C:2A:F2:B9:93:CA:54:48:2C:11:7D:C0:B2
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/vpbWYivs0Dwq8rmTylRILBF9wLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.51.220.0/22
Signature Algorithm: sha256WithRSAEncryption
69:fb:3c:75:d8:02:88:6f:30:9f:cd:09:8f:6c:34:f9:2a:8e:
fe:7c:7a:fd:66:40:04:55:ba:58:0d:ec:a2:78:6b:b7:8b:03:
37:73:e7:ab:a8:d5:ee:59:24:de:54:36:ca:57:83:d4:61:1e:
af:35:31:dc:72:ba:82:9b:7c:66:34:9b:e2:29:44:29:a4:a0:
1b:8b:fa:27:6d:02:4a:c6:1f:7b:ee:4e:2f:b9:0e:bd:88:3a:
39:1b:38:34:e2:7a:84:6d:4a:09:1f:87:6c:e3:c3:f5:ac:a4:
3d:93:8f:d0:56:0f:21:a6:d2:04:ad:80:67:4c:f4:87:de:63:
f4:1e:49:14:48:1d:cf:3a:57:97:7b:09:8e:d5:6c:a9:1c:b5:
1f:b4:1e:f5:ab:95:48:09:91:a0:21:46:56:3d:71:87:a2:f1:
66:fd:ff:9e:cf:d7:b2:7a:9c:f1:b8:29:fb:a8:dd:0d:34:b0:
4d:8e:64:f2:c7:0d:69:67:e5:cd:f6:3a:fd:ec:f6:bb:ca:02:
09:4b:78:03:86:39:c6:47:f3:09:ce:08:a1:ec:85:c4:0a:36:
a5:11:e3:c9:d5:b0:a0:a8:a4:c5:89:b6:ab:f7:d4:e3:b9:fc:
06:35:3a:3b:7d:eb:f6:f7:1c:a3:19:1c:1f:f9:9f:c8:79:f8:
39:8e:a4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 09:43:49 2026 by rpki-client