Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/vb3DXA3xS9WEmvFmHAknanFr8kY.roa
File: vb3DXA3xS9WEmvFmHAknanFr8kY.roa (raw, json)
Hash identifier: fVQGnf49+JAHrfYoePvkDgT6wC9c0rGm59Z11f/ht0M=
Subject key identifier: BD:BD:C3:5C:0D:F1:4B:D5:84:9A:F1:66:1C:09:27:6A:71:6B:F2:46
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019F7513BAF57DB75287B8697D4468C5C6BB
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/vb3DXA3xS9WEmvFmHAknanFr8kY.roa
Signing time: Sat 18 Jul 2026 11:54:14 +0000
ROA not before: Sat 18 Jul 2026 11:54:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41095
IP address blocks: 2a09:b380::/29 maxlen: 29
2a0c:9940::/29 maxlen: 29
2a0e:8a00::/29 maxlen: 29
2a10:5900::/29 maxlen: 29
2a10:5b00::/29 maxlen: 29
2a10:5d00::/29 maxlen: 29
2a11:5040::/29 maxlen: 29
2a11:7ac0::/29 maxlen: 29
2a11:8f40::/29 maxlen: 29
2a11:b5c0::/29 maxlen: 29
2a11:d8c0::/29 maxlen: 29
2a12:2680::/29 maxlen: 29
2a12:3700::/29 maxlen: 29
2a12:4e00::/29 maxlen: 29
2a12:6380::/29 maxlen: 29
2a12:8e80::/29 maxlen: 29
2a12:b000::/29 maxlen: 29
2a12:d900::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:75:13:ba:f5:7d:b7:52:87:b8:69:7d:44:68:c5:c6:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jul 18 11:54:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bdbdc35c0df14bd5849af1661c09276a716bf246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:93:b6:b2:99:1f:95:1b:5a:53:8e:0a:46:24:
27:28:bb:fe:4d:5a:3b:13:ea:32:3b:5f:ec:28:22:
2a:bb:c0:33:45:5e:ed:ff:3d:b2:35:4f:07:58:30:
48:63:fe:db:87:99:29:e4:c2:8b:55:84:3d:b2:62:
8a:7c:71:81:3c:3c:25:71:e5:a2:0e:b2:f2:44:8e:
81:6d:9b:99:76:3f:42:46:9f:4d:1c:9f:5b:e5:37:
b7:9d:e1:bd:65:ff:28:e0:8f:08:37:3b:42:94:2c:
00:57:b3:e0:b4:f4:15:e6:39:9a:ca:b7:2a:71:64:
27:48:3b:e8:3c:58:45:df:51:b0:93:bf:bb:c7:7b:
f0:e3:73:41:73:5e:fb:18:12:18:25:ca:45:4b:9c:
c7:16:a0:ef:b8:ac:1b:b3:14:ab:d0:a9:6d:a0:5c:
9c:69:f6:7a:7b:0c:27:d1:45:20:e3:e0:2b:ad:d3:
14:46:41:e4:f6:8b:01:0f:b3:0f:e4:4b:d4:da:74:
24:44:a8:38:11:74:7f:35:80:f8:af:e3:d8:53:ad:
e6:72:48:9b:bc:b1:cf:48:34:62:16:e8:af:6b:26:
73:ec:15:a7:2d:9d:2f:6d:2a:81:20:06:5b:35:c2:
67:27:c2:5a:7c:29:e7:d8:78:26:6f:10:59:4a:17:
6d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BD:C3:5C:0D:F1:4B:D5:84:9A:F1:66:1C:09:27:6A:71:6B:F2:46
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/vb3DXA3xS9WEmvFmHAknanFr8kY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:b380::/29
2a0c:9940::/29
2a0e:8a00::/29
2a10:5900::/29
2a10:5b00::/29
2a10:5d00::/29
2a11:5040::/29
2a11:7ac0::/29
2a11:8f40::/29
2a11:b5c0::/29
2a11:d8c0::/29
2a12:2680::/29
2a12:3700::/29
2a12:4e00::/29
2a12:6380::/29
2a12:8e80::/29
2a12:b000::/29
2a12:d900::/29
Signature Algorithm: sha256WithRSAEncryption
2a:ec:9a:fa:44:49:ab:56:45:86:a9:a4:d5:1c:b7:f4:4f:2e:
e2:d3:41:df:52:11:09:6f:c1:98:79:a3:ee:a4:0d:aa:71:06:
f7:44:e5:9d:7c:27:93:03:e3:12:ae:e3:2b:a3:fe:a8:5e:ae:
c7:db:b9:00:5f:e4:45:7c:8f:64:60:01:66:73:f7:70:09:56:
65:cd:9e:f2:f2:0c:51:ef:ce:d8:64:52:20:4c:4b:90:ba:cd:
dd:27:67:97:c2:73:f1:7b:46:7f:87:40:76:ba:05:7a:94:16:
b7:d9:84:02:04:9b:ed:7b:0a:e6:d0:26:45:b1:79:f0:26:15:
25:ed:1b:cf:f2:a9:4f:87:11:a9:18:b5:a6:e0:c9:13:e2:a3:
e7:cc:89:5e:e1:17:57:cd:b1:1f:50:de:f4:90:a3:11:16:68:
4c:33:99:ad:36:bc:5e:c1:17:c4:6d:3b:81:99:be:b9:8f:b1:
aa:5b:3c:35:11:0e:47:5b:50:56:3f:a8:a8:6b:8a:a1:cc:c1:
10:86:db:4f:b8:48:d5:ff:14:a0:65:7c:97:ce:03:5e:b6:ba:
bf:ee:28:27:d0:ac:4a:f2:0f:19:91:bd:89:74:3f:6b:4e:8e:
6e:e4:b0:8f:bc:43:53:7d:88:84:df:a9:93:c0:05:b1:a9:ff:
cc:ef:03:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 02:09:44 2026 by rpki-client