Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/VTvDdxCNdn_BPeZovGaO3zvHn-c.roa
File: VTvDdxCNdn_BPeZovGaO3zvHn-c.roa (raw, json)
Hash identifier: /82kfcvdmxFyaaXRLhtB6elmf3XA4bQBsOc05JD7WPw=
Subject key identifier: 55:3B:C3:77:10:8D:76:7F:C1:3D:E6:68:BC:66:8E:DF:3B:C7:9F:E7
Certificate issuer: /CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1
Certificate serial: 019EB0B990B3B73AAD10A8D57C80E6F283DE
Authority key identifier: F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/VTvDdxCNdn_BPeZovGaO3zvHn-c.roa
Signing time: Wed 10 Jun 2026 08:50:11 +0000
ROA not before: Wed 10 Jun 2026 08:50:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219498
IP address blocks: 2a10:ab80:3ed::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b0:b9:90:b3:b7:3a:ad:10:a8:d5:7c:80:e6:f2:83:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1
Validity
Not Before: Jun 10 08:50:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=553bc377108d767fc13de668bc668edf3bc79fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7e:c0:2f:10:a5:c8:c6:3f:c7:36:86:7c:06:
4c:9a:23:a6:cc:a9:be:8c:6e:f9:a4:6e:4b:b0:8a:
fc:51:9d:9b:b1:e8:fa:ad:7b:4c:c9:a9:50:64:91:
a2:ae:54:99:49:13:b3:3b:28:58:95:bf:0d:0a:52:
fa:70:a0:b0:55:f2:8c:47:b5:5e:9e:ba:a3:ca:20:
d6:b5:99:32:f4:02:01:7e:ca:87:27:1b:4b:42:e5:
d0:42:7a:30:a3:c2:2d:08:2c:c7:93:9b:e2:d8:b1:
cb:7f:77:7f:38:82:26:86:0e:c1:5e:99:18:b6:10:
74:ef:40:58:78:e8:89:f4:bd:6b:5a:b7:86:76:60:
df:e8:10:90:a9:94:65:a1:06:b8:a6:c5:f1:5b:a7:
3a:d6:7a:4d:dd:c2:a7:1b:2f:3b:cd:e7:15:19:22:
6e:23:6d:d2:eb:88:42:8a:9a:ee:b2:86:09:30:aa:
f3:ea:e1:cd:b6:e0:0c:d1:be:18:6d:52:48:9e:04:
1e:5c:25:96:f6:53:83:8e:67:b1:2e:97:fc:96:4d:
ae:59:df:d9:81:9a:ac:65:c6:37:c7:ed:35:00:f3:
3e:cc:8c:a5:da:07:1a:fa:01:37:16:6a:c7:ba:ae:
a4:a4:74:97:16:bb:e5:98:25:7d:8d:ce:39:6e:bb:
51:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:3B:C3:77:10:8D:76:7F:C1:3D:E6:68:BC:66:8E:DF:3B:C7:9F:E7
X509v3 Authority Key Identifier:
keyid:F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/VTvDdxCNdn_BPeZovGaO3zvHn-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ab80:3ed::/48
Signature Algorithm: sha256WithRSAEncryption
2d:a4:75:4d:22:0a:81:4b:55:27:54:f8:57:9b:54:a4:10:df:
d0:ef:98:07:dc:5b:bb:e5:5c:e9:24:9b:d6:cb:73:df:cf:74:
71:b4:a4:f3:62:c7:c8:6f:c4:19:94:99:ea:a7:4b:06:8e:09:
67:24:6a:0f:3a:fe:09:c7:9f:72:49:79:21:01:5a:49:1c:4f:
d0:6c:cd:01:d1:21:da:21:0b:ce:af:1a:c0:72:1d:63:63:35:
ce:fe:9d:9d:e6:59:b6:15:e0:68:1f:b7:2f:1a:0f:e3:25:07:
fc:3d:a3:1e:b3:2b:3a:96:ed:cd:b4:3e:99:30:eb:cd:be:4e:
15:c0:f2:23:aa:6c:d4:58:f6:2a:1f:77:f8:55:01:82:02:81:
25:a8:9f:ff:aa:7d:c1:63:76:0b:31:cf:0e:61:48:dc:40:7a:
a7:15:70:7b:4a:17:99:d9:24:93:0b:30:c3:8c:71:72:28:f1:
06:6a:76:09:a6:ff:71:6b:d0:d0:d1:6a:c2:0f:9d:f0:94:59:
65:db:12:4f:ab:ce:b5:14:09:c5:df:ec:9b:fd:a3:73:46:b5:
1e:c8:90:b2:fd:84:d2:51:ee:aa:e4:6c:ec:83:93:a6:b4:4c:
e5:5b:64:7f:9f:20:54:a1:84:79:59:0c:15:71:bc:15:fe:9c:
21:f2:b7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:40:47 2026 by rpki-client