Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/vA8cjUgWKblUs16qmLgC49xp27Q.roa
File: vA8cjUgWKblUs16qmLgC49xp27Q.roa (raw, json)
Hash identifier: bRbImL9Nt4NQww6cwsIlVVnoKeN3OCjuZ+ChE7B3mp4=
Subject key identifier: BC:0F:1C:8D:48:16:29:B9:54:B3:5E:AA:98:B8:02:E3:DC:69:DB:B4
Certificate issuer: /CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Certificate serial: 019FD235D1B4E9E441BE0E36EA80376A4B1C
Authority key identifier: B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/vA8cjUgWKblUs16qmLgC49xp27Q.roa
Signing time: Wed 05 Aug 2026 13:56:10 +0000
ROA not before: Wed 05 Aug 2026 13:56:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48108
IP address blocks: 2001:678:e30::/48 maxlen: 48
2a0a:2e80::/32 maxlen: 32
2a0a:2e81::/32 maxlen: 32
2a0a:2e81::/36 maxlen: 36
2a0a:2e82::/32 maxlen: 32
2a11:7e40::/32 maxlen: 32
2a11:7e40::/48 maxlen: 48
2a11:7e40:1::/48 maxlen: 48
2a11:7e40:2::/48 maxlen: 48
2a11:7e40:3::/48 maxlen: 48
2a11:7e40:4::/48 maxlen: 48
2a11:7e40:1000::/36 maxlen: 36
2a11:7e42::/36 maxlen: 36
2a11:7e46::/32 maxlen: 32
2a11:7e47:1000::/48 maxlen: 48
2a11:7e47:2000::/48 maxlen: 48
2a11:7e47:3000::/48 maxlen: 48
2a11:7e47:4000::/48 maxlen: 48
2a11:7e47:5000::/48 maxlen: 48
2a11:7e47:6000::/48 maxlen: 48
2a11:7e47:7000::/48 maxlen: 48
2a11:7e47:8000::/48 maxlen: 48
2a11:7e47:9000::/48 maxlen: 48
2a11:7e47:a000::/48 maxlen: 48
2a11:7e47:b000::/48 maxlen: 48
2a11:7e47:b002::/48 maxlen: 48
2a11:7e47:b003::/48 maxlen: 48
2a11:8480::/32 maxlen: 32
2a11:8481::/32 maxlen: 32
2a11:8482::/32 maxlen: 32
2a11:8485::/32 maxlen: 32
2a12:6702::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d2:35:d1:b4:e9:e4:41:be:0e:36:ea:80:37:6a:4b:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Validity
Not Before: Aug 5 13:56:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc0f1c8d481629b954b35eaa98b802e3dc69dbb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:97:68:25:9a:c8:93:ca:e5:f0:a3:b9:47:57:
cb:2e:ff:ad:90:8a:15:10:40:44:a3:60:e1:06:33:
71:da:07:ac:c7:34:2c:ef:45:b8:b5:2a:2e:1c:a2:
0b:ec:5f:52:8b:1e:83:0f:12:54:56:3c:9a:13:99:
1a:79:e0:49:df:e2:f4:a3:3d:9e:9d:87:d7:9e:95:
7a:eb:08:fd:3c:c9:ab:ba:b2:aa:96:17:1f:10:01:
1b:90:ff:9c:46:6f:56:89:a8:67:6b:93:f1:2e:d0:
a5:ea:24:3c:f5:6c:96:c5:f5:f0:84:79:10:d1:ba:
35:1c:07:ca:b8:b7:db:92:56:d1:2e:e2:06:f6:e0:
62:47:9d:80:9e:0b:1b:e2:eb:4c:40:dc:d2:c5:51:
0e:c0:e5:6f:b2:61:60:27:a6:c1:95:53:40:08:2c:
26:62:75:a8:42:a4:46:c9:b8:06:00:ec:56:76:36:
2a:b7:91:ba:7e:eb:84:40:50:d2:ba:80:63:47:d8:
84:79:9d:ed:4a:d1:26:f9:30:88:40:41:f1:1b:0e:
6e:48:ce:4c:1b:c2:31:b1:af:32:84:06:e4:41:bb:
ca:57:0b:17:35:3a:11:01:81:ef:08:4e:47:49:aa:
a0:95:f2:78:2f:aa:83:b2:7b:d4:29:36:39:fb:35:
6f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:0F:1C:8D:48:16:29:B9:54:B3:5E:AA:98:B8:02:E3:DC:69:DB:B4
X509v3 Authority Key Identifier:
keyid:B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/vA8cjUgWKblUs16qmLgC49xp27Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:e30::/48
2a0a:2e80::-2a0a:2e82:ffff:ffff:ffff:ffff:ffff:ffff
2a11:7e40::/32
2a11:7e42::/36
2a11:7e46::/32
2a11:7e47:1000::/48
2a11:7e47:2000::/48
2a11:7e47:3000::/48
2a11:7e47:4000::/48
2a11:7e47:5000::/48
2a11:7e47:6000::/48
2a11:7e47:7000::/48
2a11:7e47:8000::/48
2a11:7e47:9000::/48
2a11:7e47:a000::/48
2a11:7e47:b000::/48
2a11:7e47:b002::/47
2a11:8480::-2a11:8482:ffff:ffff:ffff:ffff:ffff:ffff
2a11:8485::/32
2a12:6702::/32
Signature Algorithm: sha256WithRSAEncryption
62:3d:ed:e4:72:dc:65:4f:c0:10:48:ee:ea:cd:ce:bc:85:da:
eb:14:f5:b2:6f:f0:88:b7:7b:51:1d:8e:10:ac:47:8d:96:93:
d3:8f:d2:0e:fe:2d:16:90:50:e6:d3:1a:b0:5a:6c:60:64:6b:
35:3a:68:87:75:33:07:4e:d7:ed:af:19:d7:1f:bc:c7:44:8c:
f5:41:2c:72:5d:bc:a8:3e:ce:e1:9e:df:10:d6:7f:6c:86:d6:
ff:f9:93:ee:cf:f0:90:56:7c:0b:87:bf:44:1b:49:51:51:be:
5f:12:9e:3d:61:fb:7e:39:3b:12:b0:cb:53:bc:77:df:93:67:
f3:a9:60:3a:05:4b:dc:e6:25:22:37:14:46:8e:b4:3c:c0:a2:
e8:65:c5:51:51:a4:2e:de:e2:e3:95:ac:d8:f5:01:0c:d5:6d:
d8:aa:8d:e1:e0:70:91:5e:b8:94:e1:0d:3a:98:3f:98:3f:47:
44:4c:35:4f:04:82:12:94:5c:8c:21:c6:1f:71:95:8d:3e:63:
c8:a1:88:c4:9b:e0:6a:73:9d:41:b0:7d:1d:14:bc:96:97:f6:
00:d8:a1:9d:50:e0:ca:d5:12:f9:c5:0b:9f:f9:31:88:0d:fc:
c8:71:78:b0:bb:e8:d6:40:25:08:aa:bf:05:62:ca:e9:8b:95:
c0:16:a0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:39:30 2026 by rpki-client