Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/vg5-bm2U2STHFsVX14jMu_1UIKU.roa
File: vg5-bm2U2STHFsVX14jMu_1UIKU.roa (raw, json)
Hash identifier: nhIOmxFmhtkigKRCZmNnPAYvKDyN+icJcquGzktbKAI=
Subject key identifier: BE:0E:7E:6E:6D:94:D9:24:C7:16:C5:57:D7:88:CC:BB:FD:54:20:A5
Certificate issuer: /CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Certificate serial: 01A18E6E7590EC08F271EA025A362AB18CA0
Authority key identifier: A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/vg5-bm2U2STHFsVX14jMu_1UIKU.roa
Signing time: Fri 30 Oct 2026 20:09:26 +0000
ROA not before: Fri 30 Oct 2026 20:09:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208850
IP address blocks: 2a14:ae00:106::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8e:6e:75:90:ec:08:f2:71:ea:02:5a:36:2a:b1:8c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a4e23482268475c1b935637d0002c2fd2993b8
Validity
Not Before: Oct 30 20:09:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be0e7e6e6d94d924c716c557d788ccbbfd5420a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:24:64:ea:ce:d8:8b:7b:e9:96:0c:93:48:bd:
d5:ec:14:de:42:7f:a2:1c:02:7a:3e:60:83:aa:8f:
c7:fb:7f:bd:91:f1:d0:ec:2c:70:69:7a:c4:f7:8e:
7e:ec:41:0b:eb:53:2a:40:12:89:30:05:61:56:0a:
70:91:a3:fb:ca:5c:9e:9a:3a:93:e6:f1:04:49:1f:
4a:0b:58:86:e5:75:12:ca:e7:8e:78:c1:3d:74:2e:
17:d5:36:33:ae:48:f8:51:f0:88:db:92:32:3f:e7:
70:c2:84:f9:a1:d7:fc:95:18:93:c7:3e:e9:18:3c:
bc:a3:39:9a:c3:1e:2d:6c:5c:74:a0:ab:2d:50:12:
f4:2b:77:dd:eb:6d:06:f3:c0:ec:07:76:e6:59:bc:
71:2b:82:b2:38:9f:b5:fb:5c:fd:3e:8c:7c:c2:a1:
f5:e4:7d:d2:54:94:b3:dc:c6:eb:91:0c:3d:ce:b7:
b1:4d:a7:6e:ef:ec:c5:75:08:dd:33:08:95:e4:03:
ae:c6:9e:fd:7d:76:40:f4:66:b9:2a:65:cf:32:e8:
0f:96:07:3d:10:95:18:97:e9:a0:60:5c:ee:b6:dd:
22:24:1f:34:fb:ee:85:53:3a:62:c1:a7:84:fe:0f:
83:99:c3:26:b7:b5:86:3b:35:78:88:c7:ad:88:a2:
71:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0E:7E:6E:6D:94:D9:24:C7:16:C5:57:D7:88:CC:BB:FD:54:20:A5
X509v3 Authority Key Identifier:
keyid:A7:A4:E2:34:82:26:84:75:C1:B9:35:63:7D:00:02:C2:FD:29:93:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6TiNIImhHXBuTVjfQACwv0pk7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/vg5-bm2U2STHFsVX14jMu_1UIKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/07f623-14fb-4a80-9f46-23331b64916c/1/p6TiNIImhHXBuTVjfQACwv0pk7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:ae00:106::/48
Signature Algorithm: sha256WithRSAEncryption
6b:2a:93:7a:3d:d9:f4:ca:c7:21:8f:e4:67:44:eb:15:6d:fc:
f9:cd:03:89:bc:c2:39:e7:a1:67:ab:b6:8d:b9:39:45:ec:15:
f8:39:4d:cd:7f:be:13:74:58:2f:b8:f0:5a:5c:3d:0d:77:10:
1e:fb:a1:94:6a:0f:90:3f:4f:68:ab:f8:35:bf:72:44:a5:97:
a0:ef:d0:3e:c4:35:b1:12:0d:d0:c9:f4:c4:cf:e9:0c:31:be:
b0:40:e4:d5:21:ec:c0:27:4f:37:73:0f:1a:96:b9:aa:f0:ef:
4d:9a:4e:95:b7:22:d7:49:02:ab:44:8a:75:39:29:90:c8:b0:
7c:3f:e5:03:b4:ff:46:26:06:be:1b:ec:ae:87:28:83:85:3d:
1b:9b:40:4d:3a:79:b3:3f:be:39:d3:68:bc:22:bd:ba:22:a6:
76:e2:97:ce:6b:55:0c:b6:83:57:40:d9:64:c4:bd:06:2e:1a:
71:7f:61:e8:d5:dd:ee:d2:58:90:2a:4a:40:63:4e:f5:cf:14:
98:f4:ba:50:22:10:d2:14:58:72:d7:90:8f:f5:9e:f3:c8:24:
68:2a:00:96:74:90:e5:8d:f3:92:ec:1c:1c:4d:5c:30:ef:59:
6d:e1:c1:aa:64:57:5e:e1:9a:e2:1d:ef:63:8d:6d:6b:e8:44:
83:56:b2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:41:38 2026 by rpki-client