Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/vFfz2KCVr-YjTvbVa1ppOhfGS1Y.roa
File: vFfz2KCVr-YjTvbVa1ppOhfGS1Y.roa (raw, json)
Hash identifier: GUNtVZiBD0D0GGK+nxbvhCVN7x2+7uSWqZZH/LfJL4A=
Subject key identifier: BC:57:F3:D8:A0:95:AF:E6:23:4E:F6:D5:6B:5A:69:3A:17:C6:4B:56
Certificate issuer: /CN=0b934c36b773008865b9c9fb0fd48669395ac730
Certificate serial: 019EDA0961CC7AD2DBBF8A19E4A0341710ED
Authority key identifier: 0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/vFfz2KCVr-YjTvbVa1ppOhfGS1Y.roa
Signing time: Thu 18 Jun 2026 09:21:48 +0000
ROA not before: Thu 18 Jun 2026 09:21:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202276
IP address blocks: 2a00:86c0:420::/43 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:da:09:61:cc:7a:d2:db:bf:8a:19:e4:a0:34:17:10:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b934c36b773008865b9c9fb0fd48669395ac730
Validity
Not Before: Jun 18 09:21:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc57f3d8a095afe6234ef6d56b5a693a17c64b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5f:f2:c9:fa:57:bc:e3:04:9a:54:91:3b:b5:
35:a9:dd:1d:ee:cf:2a:a1:42:f1:f8:9f:ca:76:90:
a6:ad:eb:ba:ad:41:62:a1:44:d2:ed:1a:44:7a:d5:
eb:a9:b9:3a:46:88:b0:57:d7:04:c0:5e:32:2c:11:
52:bd:5b:fe:d0:20:fd:61:12:73:c5:e6:51:63:8d:
68:e5:6d:f5:fc:67:81:3e:8d:ac:54:b8:d2:de:9a:
4d:fa:3e:91:e4:a5:ea:49:f2:e9:ec:eb:d1:c2:8c:
b2:dc:27:4b:7b:04:85:41:b0:66:d6:31:52:ab:c4:
5a:f1:8f:08:4a:0a:51:ad:1a:a7:57:b4:3b:17:90:
6f:5c:39:9f:fa:a5:3e:51:5f:c2:90:22:0c:2d:a4:
47:05:94:fc:e5:91:74:09:d2:75:05:6e:ef:42:6f:
09:cb:68:d1:2f:8e:d0:1c:1b:e8:61:fc:78:78:3e:
50:82:a4:42:f2:a1:68:a5:27:6e:26:dc:d1:db:2c:
0c:e3:85:49:c2:5c:ab:16:b1:4c:ed:fc:01:62:dc:
25:37:c4:d5:3a:92:fa:d9:1b:5f:ce:4d:50:6b:c3:
ab:f6:8d:8d:c8:ea:9b:72:8f:80:2b:0e:af:8a:c7:
5d:e3:24:f8:2b:d8:e5:54:df:ab:5a:f1:23:16:42:
06:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:57:F3:D8:A0:95:AF:E6:23:4E:F6:D5:6B:5A:69:3A:17:C6:4B:56
X509v3 Authority Key Identifier:
keyid:0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/vFfz2KCVr-YjTvbVa1ppOhfGS1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:86c0:420::/43
Signature Algorithm: sha256WithRSAEncryption
8d:dc:16:01:70:dd:b3:21:32:52:5c:a7:60:64:7a:6b:08:ba:
46:ea:92:91:3b:0a:35:fc:30:c5:ed:99:ad:ab:88:f5:41:fd:
7f:dc:df:2d:c6:35:5c:98:a5:ef:f9:bc:8e:ff:a9:b4:7f:7d:
a5:25:fa:66:5a:65:cf:a2:b7:99:d5:8f:a0:32:d1:04:69:2b:
8c:62:11:cc:68:c1:94:54:ca:43:c6:d5:4e:de:3e:e3:5d:f6:
fb:e0:99:4f:fe:02:e9:16:a4:44:02:fb:a5:c8:b5:31:ed:ed:
81:64:75:bb:99:7e:10:9e:20:59:3f:87:bd:1a:1b:62:35:f1:
8a:4c:33:6f:ce:d1:ae:57:fa:96:5e:5f:c6:fa:53:3e:9c:03:
0b:a8:04:72:bb:2a:92:b5:b6:b2:c2:85:23:15:4d:5b:04:fc:
88:25:99:01:28:b7:be:12:15:52:f2:b2:c5:2c:fa:e6:bd:2d:
84:24:7b:5d:da:4a:31:0c:3c:59:61:c7:cc:8c:7e:7a:7c:38:
c6:18:b8:67:a0:d3:98:4d:3e:70:4f:89:80:0e:68:a6:77:a5:
0f:7d:9e:95:25:45:38:f7:53:db:b0:b8:21:a4:a0:60:97:43:
2e:2c:34:e5:96:ac:72:95:1c:49:65:1b:27:2f:da:85:4d:73:
ac:4b:87:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 21:12:41 2026 by rpki-client