Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/vzidGM-MJjldkGGDVWaxyGxbVlE.roa
File: vzidGM-MJjldkGGDVWaxyGxbVlE.roa (raw, json)
Hash identifier: yoJENfRbWs+TKZhJt2OSgIUYi9IpVHltrW6bYU1ft9s=
Subject key identifier: BF:38:9D:18:CF:8C:26:39:5D:90:61:83:55:66:B1:C8:6C:5B:56:51
Certificate issuer: /CN=351a14ce9d25239b92fe5abce532515044c1aba4
Certificate serial: 01A07B5D0D69B55CC019EFA1D5A12A33F53B
Authority key identifier: 35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/vzidGM-MJjldkGGDVWaxyGxbVlE.roa
Signing time: Mon 07 Sep 2026 10:14:50 +0000
ROA not before: Mon 07 Sep 2026 10:14:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218851
IP address blocks: 2a05:91c3:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7b:5d:0d:69:b5:5c:c0:19:ef:a1:d5:a1:2a:33:f5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a14ce9d25239b92fe5abce532515044c1aba4
Validity
Not Before: Sep 7 10:14:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf389d18cf8c26395d9061835566b1c86c5b5651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:50:83:f8:c7:8c:ce:23:e8:68:21:b9:be:fb:
66:03:ad:82:f0:85:59:93:ae:36:00:0d:fb:b4:86:
eb:71:84:d8:c3:60:71:98:ea:27:75:98:97:34:93:
c5:e3:3a:fa:ec:9f:80:91:a2:c4:19:f8:83:d8:02:
c2:e8:cd:f8:62:80:9e:61:dd:eb:c4:82:99:c5:68:
9b:3e:a0:c1:ca:5a:da:60:a2:fa:e4:f7:61:1d:aa:
8d:80:57:38:15:97:5a:a5:be:74:4d:e3:d1:90:e4:
6c:48:5e:ae:a8:7d:e2:4f:a2:74:b7:d6:02:fb:27:
ec:e0:5e:3c:67:cb:1e:e4:c0:1c:ac:71:9a:03:b4:
53:d4:77:71:47:82:22:f5:bd:4d:bb:3f:80:59:5d:
82:11:c2:22:ac:42:c9:6e:af:62:f4:63:34:71:a1:
be:1d:e2:82:79:63:c1:03:88:69:af:77:a3:13:90:
85:3b:36:91:66:32:12:e3:df:59:9c:28:e7:d3:ae:
4b:ef:f4:a9:46:17:ac:89:56:79:92:95:6c:41:ad:
eb:f0:64:05:db:89:c6:77:c4:7b:8f:d3:8c:02:1d:
b1:da:8f:6b:92:1c:51:33:cb:d7:b4:4c:ed:03:d7:
09:6c:08:be:f9:8e:81:c6:df:73:93:c4:ac:3d:0d:
ef:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:38:9D:18:CF:8C:26:39:5D:90:61:83:55:66:B1:C8:6C:5B:56:51
X509v3 Authority Key Identifier:
keyid:35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/vzidGM-MJjldkGGDVWaxyGxbVlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:91c3:2::/48
Signature Algorithm: sha256WithRSAEncryption
95:ee:ff:14:71:12:f3:e0:b1:21:22:fe:45:74:51:96:88:9a:
4c:19:55:f5:f1:06:f5:2f:8b:81:5e:34:93:96:6a:4d:7e:7f:
90:0e:92:72:d1:1c:c8:de:fd:3d:ac:c7:03:ab:83:a4:e5:bc:
72:ef:9c:52:71:e0:eb:66:1e:74:19:ca:6c:bc:0d:a0:71:8a:
b0:c4:c4:a1:3d:5e:c7:ce:b5:15:80:a7:18:db:93:5a:b4:fb:
03:6e:98:62:3c:4e:43:df:a0:03:aa:7c:64:21:2f:0d:d2:f5:
37:e2:68:7a:23:38:a8:a9:2d:d0:6d:18:36:cf:c2:39:27:ed:
1c:69:ac:26:d3:51:ec:9f:84:7d:59:f7:ee:d4:97:fc:ee:b8:
85:9c:18:39:cb:65:85:5a:8b:c5:fe:d7:7a:80:40:41:4a:1a:
80:ac:5c:d7:02:3a:4e:74:3c:9f:80:cb:50:71:88:2d:98:c4:
c1:8b:99:6e:79:f8:77:4f:8b:b0:e9:48:48:67:21:0e:b5:33:
9e:bd:8c:50:ee:81:67:1a:de:35:c1:34:bf:2c:a1:f8:c9:5c:
7a:ab:01:e0:82:0d:ea:46:38:c3:21:7d:52:81:7b:9f:54:44:
6e:df:90:5b:e6:05:48:91:f2:bc:ef:ea:9c:e3:5b:e5:db:d1:
a3:fb:ba:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:56:12 2026 by rpki-client