Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/SpuVImmyfDYf-AnG-Xu5ql735ew.roa
File: SpuVImmyfDYf-AnG-Xu5ql735ew.roa (raw, json)
Hash identifier: IDGvJ+njs5VD5jPOGvCOO0qVYQuE3PdGkye+wu3pyI4=
Subject key identifier: 4A:9B:95:22:69:B2:7C:36:1F:F8:09:C6:F9:7B:B9:AA:5E:F7:E5:EC
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 019F4431D28F96708A60EB4B4AD70117BF4E
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/SpuVImmyfDYf-AnG-Xu5ql735ew.roa
Signing time: Thu 09 Jul 2026 00:05:43 +0000
ROA not before: Thu 09 Jul 2026 00:05:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6517
IP address blocks: 2a10:fa81:b00::/40 maxlen: 48
2a10:fa85::/32 maxlen: 48
2a10:fa87::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Jul 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:44:31:d2:8f:96:70:8a:60:eb:4b:4a:d7:01:17:bf:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Jul 9 00:05:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a9b952269b27c361ff809c6f97bb9aa5ef7e5ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:31:fc:b7:9c:c8:b6:fd:b3:96:5c:97:24:fb:
73:9a:eb:76:2b:ca:3a:6d:4d:3f:91:83:68:6c:60:
e0:d1:19:1b:a0:f2:1a:b0:dc:c1:1b:af:ae:ee:90:
d8:7b:df:43:5d:7b:4c:32:b4:2f:9d:41:ad:c0:df:
aa:30:62:72:66:68:86:8e:ef:67:d7:1c:07:9f:8c:
89:a2:17:72:9b:c4:ff:28:3a:58:df:af:af:f6:40:
11:01:81:cf:79:42:aa:99:08:78:63:e4:1f:31:69:
c6:1b:de:e3:70:46:fd:00:69:9b:fe:3d:5d:eb:4d:
54:c8:5b:cb:89:bc:63:36:6c:6b:cd:46:8a:98:94:
70:08:e6:16:3c:54:c4:69:ce:c9:9d:93:1b:fa:1b:
a4:e7:13:07:a7:31:6c:bb:be:fc:04:6e:27:05:04:
bd:a2:c2:18:bb:67:e4:fe:ac:b4:d9:81:19:63:ff:
b7:98:06:82:bf:b6:32:44:d3:8e:07:e6:44:88:96:
1c:e3:5c:ed:d3:4a:9b:af:5e:2d:a2:86:99:e7:a7:
4f:ff:9f:86:b6:ce:a1:1c:27:3a:c6:af:c1:3c:3d:
f4:23:15:1e:42:fd:73:6c:1e:5e:03:d3:1d:67:fe:
2c:58:64:10:78:39:45:b6:17:8f:9d:41:3e:01:83:
02:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9B:95:22:69:B2:7C:36:1F:F8:09:C6:F9:7B:B9:AA:5E:F7:E5:EC
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/SpuVImmyfDYf-AnG-Xu5ql735ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa81:b00::/40
2a10:fa85::/32
2a10:fa87::/32
Signature Algorithm: sha256WithRSAEncryption
42:fc:01:c1:d7:81:e9:ab:ef:ea:9b:77:26:f5:39:e7:08:c2:
3b:61:23:f8:3a:1a:f1:cc:80:38:99:bf:a6:45:d1:ef:d7:87:
da:60:a4:69:06:46:ac:94:c5:e7:98:46:20:bd:88:cc:cb:7d:
cd:02:e3:5b:81:bc:7d:bc:4f:50:62:8d:f3:0c:a9:74:23:75:
2a:07:9d:fa:03:03:91:a3:b1:20:04:f3:df:ac:16:c5:b5:f5:
da:59:bf:39:1d:fa:13:c3:f3:9a:4b:ff:e6:4e:b3:e6:2e:75:
c5:19:a6:65:e4:49:10:9f:be:5c:fc:9a:c8:43:73:6a:17:ec:
66:15:86:67:f1:d9:81:86:38:f7:38:5b:a7:2d:dd:83:54:c4:
ba:23:03:d8:0d:3b:1c:7a:a3:ff:77:1b:24:5f:fc:4d:2c:bc:
f9:bb:39:6d:18:31:c1:09:ce:be:94:7b:94:f7:76:33:b4:8e:
22:2a:d1:20:6c:b1:82:b5:a4:ac:0c:4f:f8:a3:c7:50:fe:17:
dd:ee:3f:0d:af:56:dc:7c:e9:56:9c:7a:7d:48:95:98:8a:ab:
49:d2:84:27:9f:28:00:e5:16:a8:6d:5e:fa:4c:78:06:ef:b7:
8c:fe:78:f3:0a:4d:44:e8:08:c9:8c:7e:3c:06:94:d3:4e:42:
90:f0:34:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 13:47:00 2026 by rpki-client