Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/vm8BOGro948iXgdf39iTIo8_48c.roa
File: vm8BOGro948iXgdf39iTIo8_48c.roa (raw, json)
Hash identifier: RJl2JG1k2aj5iCBssTyi8za1szP6VeQdczlgsMNekwY=
Subject key identifier: BE:6F:01:38:6A:E8:F7:8F:22:5E:07:5F:DF:D8:93:22:8F:3F:E3:C7
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A0234DAD26220891BF8B42617E700E3EDD
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/vm8BOGro948iXgdf39iTIo8_48c.roa
Signing time: Fri 21 Aug 2026 07:51:28 +0000
ROA not before: Fri 21 Aug 2026 07:51:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152320
IP address blocks: 2a10:fa80:14::/48 maxlen: 48
2a10:fa80:15::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Aug 2026 21:09:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:4d:ad:26:22:08:91:bf:8b:42:61:7e:70:0e:3e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Aug 21 07:51:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be6f01386ae8f78f225e075fdfd893228f3fe3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:60:71:ea:99:57:c0:c4:88:41:d4:34:b9:de:
47:a0:17:44:8a:4c:d3:dc:37:8f:7f:39:cb:4f:fe:
4f:91:77:f6:40:a3:31:16:b8:22:f2:c7:00:a6:5d:
64:03:d2:21:98:7d:ff:00:b4:12:ed:51:1a:81:f7:
1e:6b:5d:ba:a5:2f:e1:f3:50:f5:62:61:3e:63:65:
f2:46:34:28:0e:51:64:48:1e:3d:61:14:8a:fa:62:
1f:e0:c7:fd:52:26:65:e7:2a:e9:99:7f:f9:6b:60:
e0:b9:68:44:7e:23:64:57:db:40:3b:88:c6:91:dd:
82:8d:2c:5f:9e:86:7f:a9:35:8c:69:61:37:7e:4d:
7f:aa:9f:91:e0:7a:94:84:b3:aa:25:b1:e9:cc:5b:
37:89:49:b8:b1:5e:c2:90:58:0e:12:f9:fb:8b:05:
61:79:26:5d:58:c1:f4:1f:f5:2c:f2:fa:14:12:50:
f5:c5:ed:26:41:d0:b4:26:d6:de:3e:c5:d9:5e:08:
e0:d2:05:b6:a0:f9:42:96:a4:5f:28:bc:66:6d:b3:
ec:34:52:fd:97:ee:5d:e1:7b:ae:3c:fa:f9:ab:a1:
90:b2:16:a5:fe:e4:5f:b0:9b:d4:4d:08:2d:e7:1d:
bb:5c:43:c4:83:65:a9:00:3d:4d:77:b6:a6:d3:88:
38:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6F:01:38:6A:E8:F7:8F:22:5E:07:5F:DF:D8:93:22:8F:3F:E3:C7
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/vm8BOGro948iXgdf39iTIo8_48c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa80:14::/47
Signature Algorithm: sha256WithRSAEncryption
42:c2:f7:40:89:d5:99:82:c7:6f:f8:1a:2c:99:21:99:41:00:
25:93:cd:3f:2e:12:eb:95:91:65:ec:a1:37:77:0f:d6:61:ea:
cc:ae:10:de:2b:55:34:8c:81:29:1b:19:1a:a4:65:65:d1:4c:
68:50:7e:b4:f1:e1:67:9f:e7:fb:0b:4f:db:03:18:ca:f2:20:
00:a8:4b:c5:a3:ae:6d:33:bc:0e:e9:e4:c5:f6:68:c1:83:74:
2e:91:e8:62:15:4e:11:86:21:a6:19:6e:4a:80:7c:e2:f4:0e:
ff:9a:2a:a0:bb:26:04:cc:a6:49:d0:a6:a9:bb:7f:b5:ec:50:
9f:c9:c3:3f:1d:02:31:ff:14:f4:66:04:25:c2:36:6d:1d:19:
64:0a:cb:4c:f7:4f:c2:fb:79:a0:df:c2:01:75:a3:f9:78:eb:
75:8e:3d:d0:d2:1b:76:27:8b:60:77:03:28:ac:e5:69:bf:0b:
72:a0:df:7a:b6:5c:c6:0b:47:82:bf:28:6b:ec:26:ef:24:af:
29:39:0e:3e:f3:b6:a9:f1:62:1a:2e:83:fb:b7:00:53:2b:34:
9e:17:26:45:d0:2b:c9:88:e2:54:35:88:59:b0:d1:3c:fd:8c:
17:b0:82:2a:10:e3:55:f2:a9:ca:86:1b:22:b0:78:e0:a9:83:
21:4e:88:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:46:55 2026 by rpki-client