Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VWENybpWuhJXX-wI0vf6mE-15Zo.roa
File: VWENybpWuhJXX-wI0vf6mE-15Zo.roa (raw, json)
Hash identifier: i+UeMAgVci3WGvF+u7RBkAkbyL4etolYZdGExCt7ids=
Subject key identifier: 55:61:0D:C9:BA:56:BA:12:57:5F:EC:08:D2:F7:FA:98:4F:B5:E5:9A
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 019ED0B4EC062AFBC95991478E3224CA0288
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VWENybpWuhJXX-wI0vf6mE-15Zo.roa
Signing time: Tue 16 Jun 2026 13:52:58 +0000
ROA not before: Tue 16 Jun 2026 13:52:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219421
IP address blocks: 2a10:fa80:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 18:43:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d0:b4:ec:06:2a:fb:c9:59:91:47:8e:32:24:ca:02:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Jun 16 13:52:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55610dc9ba56ba12575fec08d2f7fa984fb5e59a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5c:f5:c6:fc:1d:50:b5:fc:32:8b:b9:fe:13:
ca:43:70:20:ad:b5:46:5c:10:65:26:9f:75:6a:29:
d4:73:05:e0:1c:f8:4c:0e:ed:36:e8:53:3e:ea:81:
d5:30:3b:44:f0:87:1e:c5:e2:ee:7e:64:c6:0c:d5:
96:ee:38:82:e0:ae:1f:a2:5c:20:00:a8:31:96:e5:
9c:1f:62:8a:cd:b4:8c:5c:0c:05:23:35:cb:ac:9c:
68:80:2a:61:a5:c6:a8:92:94:69:e8:ca:88:e7:59:
d0:7f:60:6c:77:08:33:a4:6b:17:81:ca:7f:da:c5:
6d:b5:bf:dc:da:fe:ce:05:6f:68:cb:32:07:81:f9:
15:7d:50:06:60:a1:f1:d5:04:da:df:32:86:63:70:
92:9f:77:d8:d8:02:f5:0c:1e:2a:26:3b:6d:ad:e4:
91:19:9d:b4:5b:e8:a3:f9:2d:56:65:95:b6:a4:73:
20:a0:37:e5:5d:8c:05:1f:ae:61:7f:ae:2f:ee:e8:
95:19:86:b5:f2:7c:76:a7:2a:62:81:fb:fb:65:27:
4c:3c:65:5e:46:89:87:e0:cf:81:ff:f2:49:7c:6d:
01:58:1e:71:99:93:c6:c8:de:4d:49:7e:db:e1:29:
9b:b2:c0:08:60:cb:e0:83:35:af:ce:2b:d4:23:7c:
ef:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:61:0D:C9:BA:56:BA:12:57:5F:EC:08:D2:F7:FA:98:4F:B5:E5:9A
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VWENybpWuhJXX-wI0vf6mE-15Zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa80:2::/48
Signature Algorithm: sha256WithRSAEncryption
40:9a:11:0d:64:81:7b:eb:92:2a:4e:cc:52:55:fe:bb:f1:10:
fa:29:8d:09:54:16:68:03:ac:01:04:65:d4:3d:76:20:c1:31:
86:9d:a5:f2:61:b8:16:7d:39:7d:0a:2b:15:59:0b:41:d2:16:
56:9c:64:47:a0:11:c8:3f:47:c6:f4:4a:7b:b0:e9:77:82:36:
95:97:0b:45:d4:5f:54:06:04:9a:56:12:2a:7d:d5:35:26:78:
3c:36:e3:4c:43:ab:0a:72:5d:f4:6f:6c:ce:61:35:fd:f9:a7:
e1:76:7e:09:62:b6:e5:6d:7d:d6:c5:0b:5d:8e:b1:a9:6f:49:
36:0a:0d:87:49:09:2f:ac:4c:02:4b:3c:35:0a:b7:9a:d1:9f:
9a:eb:73:d6:2f:a8:55:08:23:0b:5b:3c:66:1f:c3:89:48:8e:
be:84:81:fe:93:09:10:cf:a0:82:f2:98:d3:ac:3b:63:63:9f:
95:6e:40:f9:f9:f6:04:15:af:64:c7:5b:83:82:ce:80:5b:98:
59:e4:35:f5:77:a1:5c:09:86:af:61:69:c3:9c:f9:ca:aa:6d:
f0:d6:9e:86:e6:df:87:33:36:7f:8c:58:e4:42:bd:ff:b5:66:
f6:16:eb:5e:47:bb:bd:17:59:1f:e0:ad:15:c3:9f:a2:96:31:
f6:ac:d1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 01:46:15 2026 by rpki-client