Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/2d59fc-4353-4b72-8fa2-5d13d14bc3ac/1/VG1H7KfM4gbbgBNVo0JXMLT5F84.roa
File: VG1H7KfM4gbbgBNVo0JXMLT5F84.roa (raw, json)
Hash identifier: WloXTObsOdhrASI5B+AAtL3e64BFo/Ki1+PoI99EzsA=
Subject key identifier: 54:6D:47:EC:A7:CC:E2:06:DB:80:13:55:A3:42:57:30:B4:F9:17:CE
Certificate issuer: /CN=8242cde8355d539e9852c2b5ab8b224ea9815a6b
Certificate serial: 01A0FBE7D8D35482482C9681C291BBF0D2AA
Authority key identifier: 82:42:CD:E8:35:5D:53:9E:98:52:C2:B5:AB:8B:22:4E:A9:81:5A:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gkLN6DVdU56YUsK1q4siTqmBWms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/2d59fc-4353-4b72-8fa2-5d13d14bc3ac/1/VG1H7KfM4gbbgBNVo0JXMLT5F84.roa
Signing time: Fri 02 Oct 2026 09:17:50 +0000
ROA not before: Fri 02 Oct 2026 09:17:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19738
IP address blocks: 2a10:49c0::/32 maxlen: 32
2a10:49c0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/2d59fc-4353-4b72-8fa2-5d13d14bc3ac/1/gkLN6DVdU56YUsK1q4siTqmBWms.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/2d59fc-4353-4b72-8fa2-5d13d14bc3ac/1/gkLN6DVdU56YUsK1q4siTqmBWms.mft
rsync://rpki.ripe.net/repository/DEFAULT/gkLN6DVdU56YUsK1q4siTqmBWms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fb:e7:d8:d3:54:82:48:2c:96:81:c2:91:bb:f0:d2:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8242cde8355d539e9852c2b5ab8b224ea9815a6b
Validity
Not Before: Oct 2 09:17:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=546d47eca7cce206db801355a3425730b4f917ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:08:d7:d6:39:61:29:4e:81:ca:94:4f:57:ef:
f6:c9:65:b8:57:6a:2e:ab:1e:f7:7d:28:69:ca:00:
ce:1f:d8:e7:f5:80:85:0c:c9:dd:fd:53:62:b5:90:
79:65:cf:e8:f5:68:24:94:17:38:dd:ce:df:67:ac:
9d:78:a6:c1:2a:1d:64:6a:ec:7f:46:91:06:16:7b:
af:ff:6b:8a:5a:85:1f:2e:1d:8a:48:ee:cf:63:eb:
a9:02:e6:2a:75:c4:37:2d:f1:34:3a:fa:58:fd:ae:
b1:6f:cc:1b:d3:f1:64:0d:86:44:14:67:e0:e9:7e:
55:f4:c5:cf:1e:38:80:f3:cd:cf:de:f7:0e:9e:47:
50:46:30:23:aa:72:63:95:64:33:1c:bb:bd:25:04:
fa:94:8c:88:72:7e:43:5f:94:04:e2:fd:2a:e5:53:
fb:c6:fb:7c:2f:21:ef:cc:e3:c6:6b:55:33:6e:0c:
2a:c2:ff:b0:9a:80:82:c5:fa:3c:8d:37:e5:38:10:
c9:0c:52:fb:fd:f0:31:8f:20:8f:30:47:e0:54:7e:
ce:49:b8:e2:17:5f:55:49:a7:07:24:ce:a9:73:db:
1c:2d:db:48:d2:de:1d:c4:ed:2b:1d:ef:c4:d5:3c:
a2:99:da:8b:b0:df:82:00:e2:52:1d:02:32:a2:bd:
d9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:6D:47:EC:A7:CC:E2:06:DB:80:13:55:A3:42:57:30:B4:F9:17:CE
X509v3 Authority Key Identifier:
keyid:82:42:CD:E8:35:5D:53:9E:98:52:C2:B5:AB:8B:22:4E:A9:81:5A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gkLN6DVdU56YUsK1q4siTqmBWms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2d59fc-4353-4b72-8fa2-5d13d14bc3ac/1/VG1H7KfM4gbbgBNVo0JXMLT5F84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/2d59fc-4353-4b72-8fa2-5d13d14bc3ac/1/gkLN6DVdU56YUsK1q4siTqmBWms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:49c0::/32
Signature Algorithm: sha256WithRSAEncryption
79:3e:55:2e:ec:d9:c7:91:a2:6d:55:d2:2d:33:c8:42:c5:96:
3b:2c:a7:3b:17:8a:af:f7:b5:1c:00:46:8f:de:4b:2d:14:1c:
5c:a7:c9:5a:13:24:47:84:b8:48:bf:01:41:85:4b:e2:da:63:
10:da:33:3d:6a:74:0f:f7:63:ce:f6:00:9c:b3:8f:b1:23:7d:
5d:c0:11:4f:4c:09:eb:bd:58:9b:cf:f0:90:40:d9:bd:c8:ce:
2f:42:9d:8c:b6:86:0f:6b:07:cf:b4:c0:2f:4f:d5:3a:c6:7e:
5c:c4:8b:70:0b:08:41:0d:bc:f0:48:e3:2e:ca:25:d2:4c:fd:
fe:65:0b:bc:4e:fd:b6:9c:46:3c:d9:0e:55:6f:59:fa:f0:78:
b1:2d:28:d2:fd:b4:75:d7:13:aa:e0:02:e5:a3:09:a2:2f:3d:
65:7e:da:88:5b:93:ab:8f:8e:1d:b0:62:60:56:01:da:58:e9:
e9:e6:10:8c:78:f4:c9:76:19:e2:93:a0:95:64:05:bf:7c:73:
a3:1c:33:7e:38:14:19:f9:12:31:08:d1:cf:80:a7:68:ac:ed:
d9:dc:5b:8c:15:9e:a9:c8:0a:03:50:54:6b:bf:21:20:0d:01:
a5:c7:10:9c:35:03:54:18:eb:92:18:75:68:6d:8c:11:a8:2b:
48:01:22:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 17:59:21 2026 by rpki-client