Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/vjO8ZBNOGz3aVrJM5o_VXTmGeVU.roa
File: vjO8ZBNOGz3aVrJM5o_VXTmGeVU.roa (raw, json)
Hash identifier: JULRiIFQZ+iF95rVirRL+zxVbr6tTkj3Gel2uhllVeU=
Subject key identifier: BE:33:BC:64:13:4E:1B:3D:DA:56:B2:4C:E6:8F:D5:5D:39:86:79:55
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 01A0589C4AD1497A94F3B963CFC21A046B77
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/vjO8ZBNOGz3aVrJM5o_VXTmGeVU.roa
Signing time: Mon 31 Aug 2026 16:17:12 +0000
ROA not before: Mon 31 Aug 2026 16:17:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216215
IP address blocks: 2a0b:a4c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 12:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:9c:4a:d1:49:7a:94:f3:b9:63:cf:c2:1a:04:6b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Aug 31 16:17:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be33bc64134e1b3dda56b24ce68fd55d39867955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:21:2d:2d:39:04:ce:54:d3:78:e8:98:3b:24:
91:87:3e:70:7e:49:8c:75:78:2f:cf:27:67:d4:ed:
0e:0c:28:94:88:02:ac:96:a2:25:9a:0f:c2:18:09:
f5:33:6a:c4:a4:d1:19:ab:8d:6a:7a:f4:3c:5b:ce:
73:6e:39:88:1c:b9:40:3e:92:9d:3d:dc:60:b6:e5:
4f:08:ba:bc:d6:33:d1:c0:ef:78:2c:94:84:d0:45:
59:5a:fb:54:c5:68:3d:d0:cd:45:21:b3:ed:b6:02:
f6:c9:f0:cc:ad:5f:b6:ce:6f:e3:0c:da:eb:97:6a:
ee:3f:0d:81:9b:ab:20:50:74:3a:1f:93:66:9b:af:
1b:88:41:77:f2:11:fa:b4:de:19:d6:bc:3a:78:2f:
41:d9:8e:df:8d:fc:0f:20:20:ed:10:e5:ac:e5:3f:
c1:74:f7:e4:ed:67:93:5b:a5:0d:ea:90:84:f2:d5:
c5:cc:21:2c:c7:46:56:6c:78:87:9c:a6:7d:22:66:
2e:97:d8:8a:6f:05:cb:35:98:03:a5:9c:0a:cd:ef:
49:aa:3f:fd:21:ec:ff:bf:be:64:55:3b:5c:4d:2c:
a7:b9:0e:ba:36:bd:f9:cd:aa:74:87:1c:40:e4:03:
db:8e:a0:5b:78:f0:84:d3:ec:f4:e9:0f:51:8c:79:
b7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:33:BC:64:13:4E:1B:3D:DA:56:B2:4C:E6:8F:D5:5D:39:86:79:55
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/vjO8ZBNOGz3aVrJM5o_VXTmGeVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:a4c0::/29
Signature Algorithm: sha256WithRSAEncryption
93:8c:1b:6f:3b:bd:5a:a1:47:47:a7:71:b4:ed:d4:74:6f:c4:
9a:0b:df:f1:54:36:d3:d0:20:8d:bb:72:0e:89:e1:95:5d:db:
69:d9:64:55:a7:d4:a8:2e:8d:7c:00:9f:e9:6c:0b:66:ea:b4:
7c:e0:c1:8b:4d:8c:27:a0:20:1f:2e:53:f3:58:6a:db:0d:e8:
cc:a4:ac:3f:fb:73:9a:3e:fb:b7:06:3b:a5:ea:b6:73:ee:31:
af:3e:c1:e9:27:a6:9e:e8:0f:ac:33:29:1a:bf:33:59:61:03:
02:c7:9a:4a:dc:c9:9d:43:4c:92:83:f3:e1:94:41:b1:43:53:
58:24:92:a3:51:12:f0:8c:f7:d2:2b:3a:d7:7c:d3:54:6d:a5:
9b:e1:56:76:cc:07:37:83:28:d3:16:80:26:ae:ec:e9:e6:ef:
4d:96:49:18:22:27:4b:86:c6:d8:4f:cf:f6:d3:9e:51:9a:89:
65:27:20:44:c4:a8:b8:73:b4:fb:4a:97:04:38:14:43:c5:6e:
93:aa:09:71:8d:19:77:64:01:c2:c9:f4:ab:b7:87:f6:36:85:
e8:c7:87:e4:95:8d:91:59:b4:cd:ba:72:bf:96:ff:c7:af:0d:
e0:b5:d4:f4:e7:02:74:2b:32:fd:3e:ee:2c:42:ec:2a:84:4a:
f1:ab:a3:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:17:44 2026 by rpki-client