Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/7b17fb-8539-4608-9531-13504dc65ca7/1/i50NmcyQMGdskhjKk-gvhk7GyKY.roa
File: i50NmcyQMGdskhjKk-gvhk7GyKY.roa (raw, json)
Hash identifier: n+34beDDYuuAAxA6l+S5RkIHrnGK4GV1cKpqRzaZaAM=
Subject key identifier: 8B:9D:0D:99:CC:90:30:67:6C:92:18:CA:93:E8:2F:86:4E:C6:C8:A6
Certificate issuer: /CN=546509e3248d65dfe0331fd7b99d2845f4ac7dff
Certificate serial: 019FF671B0B64FDD1C39DF439139DC8341B3
Authority key identifier: 54:65:09:E3:24:8D:65:DF:E0:33:1F:D7:B9:9D:28:45:F4:AC:7D:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGUJ4ySNZd_gMx_XuZ0oRfSsff8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/7b17fb-8539-4608-9531-13504dc65ca7/1/i50NmcyQMGdskhjKk-gvhk7GyKY.roa
Signing time: Wed 12 Aug 2026 14:47:53 +0000
ROA not before: Wed 12 Aug 2026 14:47:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218976
IP address blocks: 2a03:db40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/7b17fb-8539-4608-9531-13504dc65ca7/1/VGUJ4ySNZd_gMx_XuZ0oRfSsff8.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/7b17fb-8539-4608-9531-13504dc65ca7/1/VGUJ4ySNZd_gMx_XuZ0oRfSsff8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGUJ4ySNZd_gMx_XuZ0oRfSsff8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 23:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f6:71:b0:b6:4f:dd:1c:39:df:43:91:39:dc:83:41:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546509e3248d65dfe0331fd7b99d2845f4ac7dff
Validity
Not Before: Aug 12 14:47:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b9d0d99cc9030676c9218ca93e82f864ec6c8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:97:b1:50:f0:24:fe:2e:4f:c7:55:78:ef:35:
4b:07:9a:ef:40:4c:c7:0d:a6:31:c0:e7:c9:36:25:
2d:2d:44:40:c8:e8:6b:29:7e:8b:e0:0b:7d:47:2d:
1c:15:0a:19:58:0e:4c:a2:a0:5c:0a:cf:50:e0:2e:
fa:22:ba:24:f0:85:57:7d:ac:1b:38:72:af:8e:79:
0f:3d:3b:fc:67:cf:c2:2c:fb:2c:7f:a8:c1:2a:cc:
c9:fa:d6:31:9f:a4:6b:56:22:38:f5:8b:e7:c8:b2:
23:27:d2:4e:21:fe:d6:1f:3f:b2:0f:7b:1d:e7:5b:
e9:1f:6f:1e:f9:de:7d:76:18:d0:94:7d:a4:53:bc:
fc:31:b3:b7:65:27:f5:af:ef:0f:6e:9f:42:12:7f:
a9:12:1d:ee:cf:d4:b4:82:1c:2d:97:34:51:38:0f:
84:4c:dc:14:78:b9:68:56:f2:e7:a3:66:b0:0c:b8:
bb:34:ec:6e:e8:ea:b0:ec:f7:51:6d:df:e4:63:3c:
25:ec:fd:39:06:03:4e:5a:85:69:77:9d:52:b8:52:
0a:08:33:58:e9:9a:9b:3f:32:c5:c6:d6:62:f2:b3:
73:17:a5:67:49:21:e3:c2:2b:87:ee:cf:94:15:75:
26:09:d6:2f:f2:bb:38:58:01:50:2a:e7:d2:79:86:
99:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9D:0D:99:CC:90:30:67:6C:92:18:CA:93:E8:2F:86:4E:C6:C8:A6
X509v3 Authority Key Identifier:
keyid:54:65:09:E3:24:8D:65:DF:E0:33:1F:D7:B9:9D:28:45:F4:AC:7D:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGUJ4ySNZd_gMx_XuZ0oRfSsff8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7b17fb-8539-4608-9531-13504dc65ca7/1/i50NmcyQMGdskhjKk-gvhk7GyKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7b17fb-8539-4608-9531-13504dc65ca7/1/VGUJ4ySNZd_gMx_XuZ0oRfSsff8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:db40::/48
Signature Algorithm: sha256WithRSAEncryption
4a:1b:8e:0f:79:53:a0:f5:3a:ed:a1:88:bf:56:6b:c8:3a:32:
52:74:32:a1:1e:23:09:b2:d0:a6:a1:5f:94:cb:98:fc:b8:88:
9d:39:cc:79:b5:7b:7d:53:31:d2:68:7c:28:19:c6:c7:1c:ba:
ad:56:4a:24:a2:54:36:0b:b7:d6:e7:16:b3:6b:53:93:7d:58:
2b:1f:36:4e:1e:5d:c1:b4:f4:f8:95:6a:b8:30:19:be:47:23:
5a:9a:69:14:00:52:16:6e:08:59:25:0f:01:c9:81:71:fc:ab:
96:a9:a5:c0:e2:d4:d3:b2:23:c3:b7:69:7c:38:f3:66:06:31:
30:79:80:05:94:6b:d0:d1:ca:88:5a:5c:85:aa:a4:e6:cc:d3:
85:94:83:01:5d:64:05:b1:f8:de:06:93:f7:d6:72:b3:56:73:
ae:ed:06:0b:80:73:b4:12:5c:e0:fe:c6:a8:5c:02:3d:41:0a:
3e:15:ac:a4:3b:f3:74:a5:ed:dd:79:1b:ca:d8:7c:e3:40:de:
a1:59:1f:2a:22:41:e7:2d:91:69:c8:be:8d:15:85:e4:93:81:
55:3d:a5:8b:7d:a0:bc:cd:96:a6:62:46:51:d1:43:08:95:27:
22:0d:59:b5:52:fc:4e:5f:f5:7a:20:0a:81:be:bb:c0:01:06:
9f:dc:b3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:58:22 2026 by rpki-client