Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/VvS2Qn_Hrvcd6_-SnK7PXtk73uU.roa
File: VvS2Qn_Hrvcd6_-SnK7PXtk73uU.roa (raw, json)
Hash identifier: e6SVyLxPmWS3ohNAOmFyq9LDfmnszid2SAX7TuW2VEw=
Subject key identifier: 56:F4:B6:42:7F:C7:AE:F7:1D:EB:FF:92:9C:AE:CF:5E:D9:3B:DE:E5
Certificate issuer: /CN=25f94bd2abcaa43c97e5786b2db35b713fbe5fe4
Certificate serial: 019F2368E16655DC428D1211E69504E996EB
Authority key identifier: 25:F9:4B:D2:AB:CA:A4:3C:97:E5:78:6B:2D:B3:5B:71:3F:BE:5F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JflL0qvKpDyX5XhrLbNbcT--X-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/VvS2Qn_Hrvcd6_-SnK7PXtk73uU.roa
Signing time: Thu 02 Jul 2026 15:18:23 +0000
ROA not before: Thu 02 Jul 2026 15:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49846
IP address blocks: 2a01:348:317:8000::/49 maxlen: 49
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/JflL0qvKpDyX5XhrLbNbcT--X-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/JflL0qvKpDyX5XhrLbNbcT--X-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/JflL0qvKpDyX5XhrLbNbcT--X-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Jul 2026 21:44:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e1:66:55:dc:42:8d:12:11:e6:95:04:e9:96:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25f94bd2abcaa43c97e5786b2db35b713fbe5fe4
Validity
Not Before: Jul 2 15:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56f4b6427fc7aef71debff929caecf5ed93bdee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:34:3c:c2:5b:f9:52:12:12:b4:52:3c:f8:c8:
6d:b0:be:14:aa:9c:6e:31:21:f0:06:ac:17:0a:bd:
bb:aa:a9:b3:9a:76:37:80:c8:1a:ee:77:b0:95:59:
aa:4c:f3:78:80:4e:30:ff:22:21:33:7e:99:9a:2d:
35:05:14:f8:07:18:95:28:f8:27:31:24:2e:90:25:
33:f1:a4:4f:f2:1e:55:6f:f3:a2:73:d0:4e:f3:e7:
e9:53:13:6a:e7:e5:74:de:e4:31:4c:33:bb:a8:3f:
8a:bc:11:dd:13:4c:c1:9f:90:c8:11:07:c7:7d:36:
8f:9c:03:9f:2d:7c:d8:88:0a:a1:24:ca:86:2a:92:
16:42:c4:17:ff:f3:55:39:d1:68:57:90:36:14:3f:
47:11:be:92:36:4f:ce:f9:48:1e:d2:3f:db:a3:58:
fc:72:9e:93:2e:cc:9e:6d:cc:bd:41:ec:d8:d2:0f:
23:ed:c9:f5:9f:e7:f3:60:41:40:03:4e:d2:e6:cc:
30:95:68:52:15:27:c5:d7:82:05:0e:c1:9c:4a:0d:
44:9c:0c:ce:4d:9c:54:31:58:ca:3b:bf:6a:54:fb:
df:8b:91:69:41:1f:5d:13:b6:26:f9:f5:39:6c:b9:
1c:84:fe:06:dd:d2:0f:ad:95:d9:5b:d7:63:f9:aa:
64:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F4:B6:42:7F:C7:AE:F7:1D:EB:FF:92:9C:AE:CF:5E:D9:3B:DE:E5
X509v3 Authority Key Identifier:
keyid:25:F9:4B:D2:AB:CA:A4:3C:97:E5:78:6B:2D:B3:5B:71:3F:BE:5F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JflL0qvKpDyX5XhrLbNbcT--X-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/VvS2Qn_Hrvcd6_-SnK7PXtk73uU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/306adb-7aa7-4b82-b05a-2a6b9a0ccabd/1/JflL0qvKpDyX5XhrLbNbcT--X-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:348:317:8000::/49
Signature Algorithm: sha256WithRSAEncryption
04:1c:e4:0d:3f:f0:af:04:0a:f0:cd:bd:f9:06:13:80:11:b7:
c5:0e:72:50:ac:27:f8:b6:29:93:33:51:16:78:f2:3c:c1:e1:
9f:fb:fe:a5:38:61:bf:b0:86:7a:a1:68:d8:5b:0c:98:ea:fc:
b1:ef:da:7f:60:5d:3a:ff:0a:46:98:09:8b:aa:bb:8f:77:d4:
5c:a4:53:05:5e:10:bb:ec:e7:fc:29:ef:44:dd:4e:81:77:20:
a1:fa:41:4d:1f:ec:33:8e:68:ad:10:3e:48:16:7e:f7:66:29:
b4:b8:ea:73:5c:e4:6b:25:c0:06:e7:98:e5:6e:df:b1:fb:c0:
1c:64:99:61:0d:c6:99:d8:d3:dc:10:05:f6:51:f6:db:ea:04:
ce:b1:b8:30:e0:90:aa:1e:38:00:e7:2b:db:be:3f:6f:5a:bc:
cb:48:1e:a0:7d:9d:22:9d:6b:2e:cf:f9:dd:06:20:ff:10:0f:
be:3d:c5:dc:4d:6d:0f:b6:f9:c8:5b:38:93:ad:bf:52:14:a8:
ce:c4:68:1d:25:0b:bf:80:68:7a:9a:1c:67:98:8e:d7:33:38:
fb:79:b3:06:3d:c8:b4:cf:3e:d2:d9:48:23:7c:56:d3:4e:85:
28:fe:17:2a:5b:08:c1:7a:a0:06:e5:7e:d9:6e:9a:a1:71:6e:
7f:43:94:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 16 05:20:25 2026 by rpki-client