Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VRMDqGgJNAkkzV2QU5k7y3ameDM.roa
File: VRMDqGgJNAkkzV2QU5k7y3ameDM.roa (raw, json)
Hash identifier: +dcQEak+RgFEIETOwcJ9qNLzNVuw4mUqjHHzKz8y2Vg=
Subject key identifier: 55:13:03:A8:68:09:34:09:24:CD:5D:90:53:99:3B:CB:76:A6:78:33
Certificate issuer: /CN=554c24d437a0d56b9bd0be488a60cfd5ccc8f9bf
Certificate serial: 019C81C3A10D56F74A6994FFB57F067BF6C5
Authority key identifier: 55:4C:24:D4:37:A0:D5:6B:9B:D0:BE:48:8A:60:CF:D5:CC:C8:F9:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUwk1Deg1Wub0L5IimDP1czI-b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VRMDqGgJNAkkzV2QU5k7y3ameDM.roa
Signing time: Sat 21 Feb 2026 19:53:27 +0000
ROA not before: Sat 21 Feb 2026 19:53:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213507
IP address blocks: 2a14:e00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VUwk1Deg1Wub0L5IimDP1czI-b8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 15:05:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:81:c3:a1:0d:56:f7:4a:69:94:ff:b5:7f:06:7b:f6:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=554c24d437a0d56b9bd0be488a60cfd5ccc8f9bf
Validity
Not Before: Feb 21 19:53:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=551303a86809340924cd5d9053993bcb76a67833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2a:21:8a:bc:08:d7:06:b2:f4:f0:e8:fa:b8:
8c:34:02:3f:7f:5f:57:aa:2d:78:e8:2d:34:70:76:
19:a7:aa:5f:8a:22:eb:e7:46:f2:b5:50:4c:da:4d:
2e:cc:72:4f:1f:da:12:a0:cb:b2:8b:7a:99:50:8c:
b6:4c:db:9e:18:e4:00:9a:6e:fa:73:fb:9f:85:61:
5e:06:2b:e1:93:16:ba:72:5b:31:ac:6b:c0:1b:b7:
cd:16:b5:f8:20:93:6b:fe:8d:55:19:7b:98:49:ac:
a5:54:66:46:80:d5:ab:ee:93:f3:4e:9c:c7:8c:5b:
8a:3c:99:23:82:1a:1a:a8:b5:69:1e:e2:e8:2a:ce:
01:62:0e:b4:50:3c:ea:09:93:9b:09:90:d5:94:99:
e2:6d:ec:01:a8:be:4e:28:30:1b:81:28:68:fa:b7:
b9:ce:41:f0:86:a8:6a:96:b8:83:0c:aa:71:01:a5:
ad:0f:06:10:94:3d:fe:bd:66:1b:38:d4:31:81:41:
b0:d0:f2:0a:2b:9c:68:97:5a:8b:07:9d:44:bf:97:
94:3b:de:c6:a1:15:88:77:a5:d5:b4:ba:da:6c:a9:
91:c7:f8:21:6e:07:dc:06:af:8f:08:b4:9b:e4:59:
6c:8a:94:4b:e7:c1:c6:85:14:97:a8:f9:d9:d6:31:
02:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:13:03:A8:68:09:34:09:24:CD:5D:90:53:99:3B:CB:76:A6:78:33
X509v3 Authority Key Identifier:
keyid:55:4C:24:D4:37:A0:D5:6B:9B:D0:BE:48:8A:60:CF:D5:CC:C8:F9:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUwk1Deg1Wub0L5IimDP1czI-b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VRMDqGgJNAkkzV2QU5k7y3ameDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e282e7-4bf1-4cb8-ae6e-69baa11d578f/1/VUwk1Deg1Wub0L5IimDP1czI-b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:e00::/29
Signature Algorithm: sha256WithRSAEncryption
15:27:f0:b4:00:be:12:d7:74:e5:5a:91:a7:8d:06:4d:61:01:
21:82:92:c9:1a:14:b1:19:1c:74:9f:94:7e:ba:50:e6:1b:32:
31:7e:2d:4f:7d:1a:0c:c8:76:fd:a4:c0:e3:9c:e4:87:bd:10:
64:71:77:3d:15:e3:4e:5c:f0:a4:23:65:21:1e:6e:e6:ea:08:
18:3c:88:af:fb:55:cd:0f:d7:f3:fc:63:ce:c0:f6:4d:27:a1:
ca:79:5a:ad:fd:fc:44:e9:66:10:a1:b3:ce:a2:1f:49:05:a7:
4f:ba:22:7e:92:13:ce:03:fd:2f:48:c0:60:04:11:39:fa:1b:
0a:3e:5e:c5:3e:eb:ab:a7:4e:5f:71:0f:d4:1f:8f:ce:fd:b7:
86:15:42:d6:b6:20:21:f9:ad:23:81:c7:73:df:0d:a5:11:15:
24:96:3c:27:33:83:46:46:52:26:0c:ab:cf:a8:e8:02:5d:d3:
8a:8f:00:ba:b4:8c:ab:4c:d5:28:ee:41:31:ad:4a:f9:db:7a:
b9:8f:c8:d6:24:1d:38:47:ef:31:88:cb:15:1f:f9:b2:8e:ee:
cf:01:87:49:b8:13:50:8f:c3:69:f9:4c:91:f9:16:d5:8e:23:
d1:46:cb:50:d7:25:7a:d8:d3:26:42:6a:b4:18:33:d4:15:aa:
dc:1e:3f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 18:54:28 2026 by rpki-client