Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/vcGQBCURbj2L-uTMuaODdad6bpM.roa
File: vcGQBCURbj2L-uTMuaODdad6bpM.roa (raw, json)
Hash identifier: 8edgli6gjAqsAbbauaZPwf+GB5AGSQnsq/FwGpi7vQw=
Subject key identifier: BD:C1:90:04:25:11:6E:3D:8B:FA:E4:CC:B9:A3:83:75:A7:7A:6E:93
Certificate issuer: /CN=7af51229773af9157e317160f9dc800f381e0b2b
Certificate serial: 019F226C8256DCB3A8DC0671377A9B7D27C5
Authority key identifier: 7A:F5:12:29:77:3A:F9:15:7E:31:71:60:F9:DC:80:0F:38:1E:0B:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/vcGQBCURbj2L-uTMuaODdad6bpM.roa
Signing time: Thu 02 Jul 2026 10:42:44 +0000
ROA not before: Thu 02 Jul 2026 10:42:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9312
IP address blocks: 2a11::/32 maxlen: 48
2a11:3::/32 maxlen: 48
2a11:4::/30 maxlen: 48
2a11:8080::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.mft
rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:6c:82:56:dc:b3:a8:dc:06:71:37:7a:9b:7d:27:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af51229773af9157e317160f9dc800f381e0b2b
Validity
Not Before: Jul 2 10:42:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bdc1900425116e3d8bfae4ccb9a38375a77a6e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fb:0e:be:21:24:fe:04:bc:53:94:00:68:1b:
33:65:92:d3:97:91:03:75:46:b7:08:66:b7:76:95:
13:dd:6e:7c:0d:c2:f7:58:f5:72:06:c5:fc:49:87:
74:0d:6b:d6:1b:a4:de:4c:2d:26:4a:a1:c7:ef:c5:
91:49:63:9f:98:de:0b:60:9b:7c:fd:d4:02:d7:09:
10:6f:94:51:92:24:0a:60:1d:56:a2:7b:fb:91:15:
f7:c5:e4:dc:0c:04:be:8f:78:88:e5:3b:16:25:20:
45:28:e6:8c:39:1e:e1:0e:29:5c:20:93:10:78:a8:
f7:42:4c:c5:28:fd:1e:f6:27:03:e0:0e:2e:bf:96:
f9:6e:67:57:1a:aa:14:88:0f:3f:7d:77:f5:66:ab:
84:92:cd:ad:5e:ca:d7:2b:c2:58:d0:3f:d1:d4:6a:
5b:be:f5:d6:84:72:80:00:ca:9a:7d:8f:4f:20:00:
9c:d8:3a:08:7d:be:6f:87:43:2a:e0:93:03:f2:64:
52:a7:ec:c1:d9:b8:37:6a:4d:45:65:1d:2f:b9:8b:
8a:d8:e1:2c:1c:4a:0e:d5:5e:19:55:66:8b:61:c8:
a8:69:13:bc:c3:e2:9a:90:57:9f:c4:15:3c:df:a0:
71:1f:ee:30:1b:99:7a:7e:21:31:c2:e9:98:7b:c2:
09:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C1:90:04:25:11:6E:3D:8B:FA:E4:CC:B9:A3:83:75:A7:7A:6E:93
X509v3 Authority Key Identifier:
keyid:7A:F5:12:29:77:3A:F9:15:7E:31:71:60:F9:DC:80:0F:38:1E:0B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/vcGQBCURbj2L-uTMuaODdad6bpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11::/32
2a11:3::-2a11:7:ffff:ffff:ffff:ffff:ffff:ffff
2a11:8080::/29
Signature Algorithm: sha256WithRSAEncryption
a2:bc:da:fd:81:2e:65:d0:03:fa:d7:f9:69:84:52:a8:8a:58:
75:70:a9:63:06:03:09:8d:a0:1e:51:61:e4:e9:04:09:d3:53:
43:1a:79:75:bb:d0:79:27:cd:be:a9:01:94:33:17:b9:6b:3a:
9d:07:a2:b1:96:fd:08:40:a0:5e:91:31:cd:8d:84:30:33:2a:
c8:71:1f:54:c1:7b:67:7e:b3:5b:78:7d:8b:9c:6e:ee:86:fc:
1a:e2:2f:ee:81:2b:6d:8a:c3:53:ed:c8:95:01:32:c2:f2:0a:
15:3f:cd:d4:42:75:4b:af:79:85:8a:51:cd:21:8a:f2:1c:b9:
ce:7b:22:4b:3f:21:52:0b:94:e2:4f:2d:13:5f:cf:94:70:71:
d9:79:12:9b:83:df:04:7d:9b:7c:cc:5f:47:e5:13:d0:cc:9b:
60:9f:32:ae:2d:18:82:b0:51:ec:56:09:5c:34:f9:f4:5e:b0:
da:33:85:8d:fd:49:36:76:b3:7b:46:a9:32:90:81:6f:ae:ed:
f2:9b:c8:94:83:50:19:7b:7f:be:86:1a:87:48:b7:ef:89:53:
91:e1:78:5c:a2:bd:3b:cf:29:c6:f6:07:27:89:ce:5a:f0:db:
53:78:cd:ad:af:8f:e3:21:88:e4:0a:29:b9:76:44:ff:b7:fc:
67:3f:8f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 12:48:12 2026 by rpki-client