Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/vdQ0RaPFXcCVGYywpsZqkOR4hpw.roa
File: vdQ0RaPFXcCVGYywpsZqkOR4hpw.roa (raw, json)
Hash identifier: ktZFb+NWv0kq4A04+BX1/mDAvqdfa84ChDii4aiEH4g=
Subject key identifier: BD:D4:34:45:A3:C5:5D:C0:95:19:8C:B0:A6:C6:6A:90:E4:78:86:9C
Certificate issuer: /CN=6c38cce6be3e26f5e625469cb1ed376ed779bfb0
Certificate serial: 019F2368E990E77469F273272B1F79AEC440
Authority key identifier: 6C:38:CC:E6:BE:3E:26:F5:E6:25:46:9C:B1:ED:37:6E:D7:79:BF:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDjM5r4-JvXmJUacse03btd5v7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/vdQ0RaPFXcCVGYywpsZqkOR4hpw.roa
Signing time: Thu 02 Jul 2026 15:18:25 +0000
ROA not before: Thu 02 Jul 2026 15:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204378
IP address blocks: 2a0c:3800:300::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDjM5r4-JvXmJUacse03btd5v7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 03:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e9:90:e7:74:69:f2:73:27:2b:1f:79:ae:c4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c38cce6be3e26f5e625469cb1ed376ed779bfb0
Validity
Not Before: Jul 2 15:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bdd43445a3c55dc095198cb0a6c66a90e478869c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:56:34:85:f3:f1:6f:8f:da:fa:57:81:7a:cc:
7e:df:01:fd:55:61:24:46:60:78:7e:f2:ce:a0:4f:
41:9c:32:15:dc:9d:80:1c:80:3a:d5:94:34:d6:3b:
ba:2e:1c:07:ea:4f:d5:db:d8:2a:d3:b1:7d:52:cc:
d4:06:53:b3:9c:23:1b:34:f1:11:cb:a5:4f:c2:2d:
a6:c0:d4:45:d3:de:c7:9a:dd:b0:af:6b:c3:60:69:
e9:47:5f:92:90:d7:4d:3b:90:b3:3a:d1:10:42:16:
85:18:65:df:20:3c:71:e3:51:51:63:6b:25:af:0f:
d9:79:37:db:0b:3d:e5:b9:c5:2c:91:64:f9:dc:96:
50:48:31:8b:0d:ba:94:df:ca:cc:4c:eb:87:26:90:
ab:e9:d8:44:1d:be:70:79:e0:27:df:af:a6:2c:83:
cc:3f:b4:db:b2:e1:e2:63:3e:66:d8:fc:03:52:7e:
54:8d:34:25:6e:7e:cc:cb:57:8a:a2:38:3c:83:14:
76:75:7d:d4:8f:81:67:78:ec:93:83:58:d9:83:37:
32:fb:5c:3f:0c:37:51:3c:1f:63:5a:01:8f:c6:85:
46:da:a8:3a:5c:4f:28:c8:32:1d:1f:ff:8d:a8:a9:
1e:b9:b9:c3:57:30:af:a2:60:53:83:2a:ef:2c:de:
d0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D4:34:45:A3:C5:5D:C0:95:19:8C:B0:A6:C6:6A:90:E4:78:86:9C
X509v3 Authority Key Identifier:
keyid:6C:38:CC:E6:BE:3E:26:F5:E6:25:46:9C:B1:ED:37:6E:D7:79:BF:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDjM5r4-JvXmJUacse03btd5v7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/vdQ0RaPFXcCVGYywpsZqkOR4hpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/bDjM5r4-JvXmJUacse03btd5v7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:3800:300::/48
Signature Algorithm: sha256WithRSAEncryption
4c:e1:88:6b:21:d3:b4:14:b8:6e:35:c5:44:32:6e:56:84:d1:
f8:3b:55:cf:8f:da:79:87:82:02:f7:54:49:ff:fd:c3:e8:9e:
3f:4f:18:a5:d2:81:44:dd:d3:c6:1e:e3:5b:1a:1f:19:9a:05:
fe:fa:3d:1e:db:af:6d:b4:ff:65:7c:59:d5:b2:d4:9b:76:1c:
a5:99:19:d9:f4:ac:89:88:bf:35:05:71:d4:79:3f:b1:a7:d7:
17:19:e8:2e:f7:fe:2a:d3:52:9a:62:a8:3b:32:39:11:78:ff:
1d:b5:d7:e5:f8:69:2c:4f:f2:d8:35:48:a2:72:02:5f:1a:fa:
31:b8:8c:4f:f4:39:57:90:e0:78:19:fe:13:f2:8d:14:2c:9a:
3b:86:0b:d4:6d:d9:ec:2f:37:ab:9c:e7:86:33:f1:1c:cf:6e:
0e:a6:29:f0:9f:2f:c1:20:73:d6:6e:00:d7:64:92:0d:00:74:
c3:ad:42:8f:fa:3a:08:ff:e1:c8:22:a3:b5:13:29:c1:79:e8:
79:d6:b7:d6:30:09:83:9d:9b:39:2b:dc:8d:36:cd:a8:64:5c:
2b:75:87:14:85:9f:34:2e:89:e0:61:49:58:8f:b5:27:2f:22:
ff:7d:70:e6:f3:be:ec:54:87:a6:3b:71:38:1c:be:ad:be:c7:
05:d9:42:d0
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ8jaOmQ53Rp8nMnKx95rsRAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMzhjY2U2YmUzZTI2ZjVlNjI1NDY5Y2IxZWQzNzZlZDc3
OWJmYjAwHhcNMjYwNzAyMTUxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGQ0MzQ0NWEzYzU1ZGMwOTUxOThjYjBhNmM2NmE5MGU0Nzg4NjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6lY0hfPxb4/a+leBesx+3wH9VWEk
RmB4fvLOoE9BnDIV3J2AHIA61ZQ01ju6LhwH6k/V29gq07F9UszUBlOznCMbNPER
y6VPwi2mwNRF097Hmt2wr2vDYGnpR1+SkNdNO5CzOtEQQhaFGGXfIDxx41FRY2sl
rw/ZeTfbCz3lucUskWT53JZQSDGLDbqU38rMTOuHJpCr6dhEHb5weeAn36+mLIPM
P7TbsuHiYz5m2PwDUn5UjTQlbn7My1eKojg8gxR2dX3Uj4FneOyTg1jZgzcy+1w/
DDdRPB9jWgGPxoVG2qg6XE8oyDIdH/+NqKkeubnDVzCvomBTgyrvLN7QjwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFL3UNEWjxV3AlRmMsKbGapDkeIacMB8GA1UdIwQY
MBaAFGw4zOa+Pib15iVGnLHtN27Xeb+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkRqTTVyNC1KdlhtSlVhY3NlMDNidGQ1djdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS82MDIyNDQtNzY5OS00MTAzLWJjN2Ut
YzQ3MTE0ODIzODBlLzEvdmRRMFJhUEZYY0NWR1l5d3BzWnFrT1I0aHB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS82MDIyNDQtNzY5OS00MTAzLWJjN2UtYzQ3MTE0ODIzODBl
LzEvYkRqTTVyNC1KdlhtSlVhY3NlMDNidGQ1djdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgw4AAMA
MA0GCSqGSIb3DQEBCwUAA4IBAQBM4YhrIdO0FLhuNcVEMm5WhNH4O1XPj9p5h4IC
91RJ//3D6J4/Txil0oFE3dPGHuNbGh8ZmgX++j0e269ttP9lfFnVstSbdhylmRnZ
9KyJiL81BXHUeT+xp9cXGegu9/4q01KaYqg7MjkReP8dtdfl+GksT/LYNUiicgJf
GvoxuIxP9DlXkOB4Gf4T8o0ULJo7hgvUbdnsLzernOeGM/Ecz24Opinwny/BIHPW
bgDXZJINAHTDrUKP+joI/+HIIqO1EynBeeh51rfWMAmDnZs5K9yNNs2oZFwrdYcU
hZ80LongYUlYj7UnLyL/fXDm877sVIemO3E4HL6tvscF2ULQ
-----END CERTIFICATE-----
Generated at Tue Jul 7 12:37:16 2026 by rpki-client