Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/giVO5am_nvdIXShUG3j3n_3MTVI.roa
File: giVO5am_nvdIXShUG3j3n_3MTVI.roa (raw, json)
Hash identifier: Wi7XEFxfLM4c2RPPIgvoYfi6sNyhPwwkX7P7hpy9j/8=
Subject key identifier: 82:25:4E:E5:A9:BF:9E:F7:48:5D:28:54:1B:78:F7:9F:FD:CC:4D:52
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A0D09BC1209A952B8E40747EB57D15ADFD
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/giVO5am_nvdIXShUG3j3n_3MTVI.roa
Signing time: Wed 23 Sep 2026 23:31:03 +0000
ROA not before: Wed 23 Sep 2026 23:31:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201345
IP address blocks: 2a10:fa81:500::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:9b:c1:20:9a:95:2b:8e:40:74:7e:b5:7d:15:ad:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Sep 23 23:31:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82254ee5a9bf9ef7485d28541b78f79ffdcc4d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:38:c6:cb:f8:e6:d3:2a:66:11:44:58:68:11:
8f:32:a0:24:74:cb:e6:de:e3:63:b7:1e:7a:a2:a2:
1d:a5:e3:bd:d5:a4:2f:ad:02:db:61:e4:19:3a:e5:
93:88:39:4a:36:8e:80:a4:be:08:bd:e5:2e:76:9a:
5d:a5:34:a3:31:b4:34:c6:37:6c:31:75:d0:91:6f:
b5:41:46:7d:15:c5:01:a5:6a:3b:eb:84:06:67:32:
8d:95:de:2c:80:71:31:39:0f:dd:9f:cf:3e:9a:13:
56:50:45:0d:ee:6a:95:56:5f:c3:04:6b:64:b0:d9:
4e:f4:d5:4a:46:fe:e0:d6:68:b0:e3:38:b1:3d:1c:
92:10:7e:af:5c:b8:f1:3a:0d:9b:4a:46:1b:1d:55:
50:8a:1d:c7:6f:74:35:52:41:f7:83:a5:6a:15:6f:
ea:dc:2a:d1:46:4d:9c:bd:0c:47:0c:0e:13:79:ec:
4b:d0:93:fe:e1:e4:96:63:be:4f:70:22:e4:16:ae:
a3:42:15:21:9f:94:ca:7f:99:20:29:0b:bf:3e:b5:
6c:16:d0:8c:10:91:45:82:03:11:8f:0d:41:49:6e:
fc:ae:26:0d:41:00:9d:9e:c3:1a:ef:d6:8e:9b:b2:
86:22:99:5d:e2:9f:b4:af:85:16:da:a6:1f:b6:2d:
32:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:25:4E:E5:A9:BF:9E:F7:48:5D:28:54:1B:78:F7:9F:FD:CC:4D:52
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/giVO5am_nvdIXShUG3j3n_3MTVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa81:500::/40
Signature Algorithm: sha256WithRSAEncryption
6d:29:e1:2e:4f:5f:78:b3:36:95:24:6f:35:c8:eb:c1:4d:3f:
ad:b4:12:97:cd:8f:be:ea:4d:3c:8a:d8:c3:a6:02:6f:b0:5b:
e9:ba:3e:b2:00:e9:6b:81:53:a2:06:b9:da:73:5d:8a:2c:c2:
aa:b4:bf:bc:0a:29:cd:c1:84:2a:46:2e:8d:e8:52:41:8a:ae:
3f:df:69:3c:d8:85:e9:b6:4c:a4:91:8f:f6:6a:a7:76:dc:36:
df:24:dd:8c:b6:f7:27:44:35:95:89:3d:ce:f0:eb:0d:05:5e:
75:b3:62:4e:4b:15:74:bf:80:76:d5:62:3e:dd:dd:dc:9a:bb:
01:88:eb:65:07:ca:d1:08:49:c6:a5:64:58:af:d8:be:bf:0c:
97:4c:88:09:4c:9c:f2:0d:6b:d4:0a:cf:f6:da:f0:8a:dd:14:
77:c5:2d:2b:38:99:ea:61:2f:41:8f:9e:c4:23:ce:63:1b:d8:
7c:f1:de:35:09:72:9f:bb:f7:e0:99:03:12:b8:1d:4f:2a:e4:
33:03:66:7a:da:ce:74:72:41:8f:49:a4:5e:e4:03:3b:99:91:
c5:54:63:61:e0:40:d8:bd:05:9f:f9:79:bf:2c:99:82:8e:e2:
b6:f3:1c:35:97:e0:e6:58:1b:bc:0b:0a:5e:a0:b6:85:01:3a:
04:ef:15:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 08:31:24 2026 by rpki-client