Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/fb196a-0704-4a4c-9e1a-da512fb9d12a/1/VtBTUKB_whhI_TAuCjRVY6xDQAU.roa
File: VtBTUKB_whhI_TAuCjRVY6xDQAU.roa (raw, json)
Hash identifier: IRBVORcRR4r/XKSlRPFuRmyNeK/8/cZa0RAcTrc+/ww=
Subject key identifier: 56:D0:53:50:A0:7F:C2:18:48:FD:30:2E:0A:34:55:63:AC:43:40:05
Certificate issuer: /CN=227994b66f9fd67c175e343c62aee6077cd4245f
Certificate serial: 01A06CC5665513D2682157C9B46404A47B9E
Authority key identifier: 22:79:94:B6:6F:9F:D6:7C:17:5E:34:3C:62:AE:E6:07:7C:D4:24:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/InmUtm-f1nwXXjQ8Yq7mB3zUJF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb196a-0704-4a4c-9e1a-da512fb9d12a/1/VtBTUKB_whhI_TAuCjRVY6xDQAU.roa
Signing time: Fri 04 Sep 2026 14:14:31 +0000
ROA not before: Fri 04 Sep 2026 14:14:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219534
IP address blocks: 2a01:a80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/fb196a-0704-4a4c-9e1a-da512fb9d12a/1/InmUtm-f1nwXXjQ8Yq7mB3zUJF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/fb196a-0704-4a4c-9e1a-da512fb9d12a/1/InmUtm-f1nwXXjQ8Yq7mB3zUJF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/InmUtm-f1nwXXjQ8Yq7mB3zUJF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:c5:66:55:13:d2:68:21:57:c9:b4:64:04:a4:7b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=227994b66f9fd67c175e343c62aee6077cd4245f
Validity
Not Before: Sep 4 14:14:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56d05350a07fc21848fd302e0a345563ac434005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:84:6c:41:14:c7:7d:3c:9d:2a:f1:d9:c1:67:
36:d8:d0:d9:ac:42:90:a3:b9:13:e3:2d:7d:47:8f:
0c:ff:90:4d:7e:ab:a6:94:73:65:fa:23:1b:2f:8f:
a6:35:a9:b0:d8:c5:c8:49:02:0f:1e:a4:a1:c7:12:
c2:f9:b1:31:19:9a:02:0a:92:a7:2c:89:13:f1:32:
fc:a2:f8:ac:c6:f0:3b:56:1d:8d:04:1e:20:13:16:
a8:5d:3e:73:11:c5:67:ad:72:49:9a:77:68:6b:10:
75:8d:46:bf:b0:c4:63:cb:0d:dd:27:c1:0f:75:f8:
13:1c:2f:08:0a:86:e2:cf:76:5c:1b:69:2e:2b:c3:
cd:4b:69:f8:0f:cf:7f:e6:01:36:29:60:76:95:b2:
90:b0:88:71:d6:c3:e5:5b:a1:07:43:dc:50:0b:de:
32:dd:54:86:49:e3:78:22:b4:97:ac:08:50:62:c9:
19:a6:b8:13:00:69:7d:10:f2:30:12:26:fb:e2:3b:
e4:f0:60:bc:01:a8:dd:13:e8:39:de:f2:e2:bc:09:
1a:38:b4:43:b7:9a:93:26:4c:b3:40:75:87:66:a4:
41:75:d8:48:07:3d:bf:c1:c5:32:58:51:56:64:eb:
fe:04:0e:51:ec:98:82:ee:b4:0d:9c:5f:e4:f7:6b:
bb:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D0:53:50:A0:7F:C2:18:48:FD:30:2E:0A:34:55:63:AC:43:40:05
X509v3 Authority Key Identifier:
keyid:22:79:94:B6:6F:9F:D6:7C:17:5E:34:3C:62:AE:E6:07:7C:D4:24:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/InmUtm-f1nwXXjQ8Yq7mB3zUJF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb196a-0704-4a4c-9e1a-da512fb9d12a/1/VtBTUKB_whhI_TAuCjRVY6xDQAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/fb196a-0704-4a4c-9e1a-da512fb9d12a/1/InmUtm-f1nwXXjQ8Yq7mB3zUJF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:a80::/32
Signature Algorithm: sha256WithRSAEncryption
b4:c1:5f:f8:65:2d:8d:dd:b8:74:63:99:9f:bb:1c:7e:7f:31:
a2:86:cb:fb:7d:58:2c:4a:7a:71:37:47:77:f8:85:6f:21:9b:
a9:47:17:8f:7f:b9:94:ef:7e:b7:70:13:31:90:e7:18:dc:6c:
0b:c1:ec:7d:c4:81:78:9e:8d:94:49:31:7f:13:5e:cc:ef:6b:
96:68:f9:00:53:d3:46:3f:e1:35:48:4f:e7:b0:fb:1a:ac:8a:
8a:95:b7:c4:c8:df:b0:07:5b:2b:6e:6b:b2:11:57:17:27:d2:
0f:ec:3b:2c:8b:ba:c9:3c:30:2a:cb:c2:64:51:bc:1c:82:8c:
14:46:3c:f0:07:2c:17:76:e1:48:c3:d7:75:ec:9d:81:77:bc:
b8:4f:fb:f4:90:b5:7b:3f:8e:0c:db:a8:26:cb:e0:60:95:7c:
b9:fc:7e:00:e8:94:cf:ce:c1:98:12:26:2d:e0:54:72:de:fb:
b0:66:50:f7:cd:31:d8:b8:36:09:7c:6c:4e:89:75:d8:c2:45:
e7:00:30:26:a3:1a:54:40:9d:11:7e:60:85:b2:86:67:e0:02:
c3:c6:d7:2b:20:aa:ea:3e:33:ce:71:94:65:64:69:ef:59:54:
0e:19:e1:30:0c:b8:0b:2a:2c:2e:fc:b3:9e:da:c0:50:4d:e6:
b4:fe:9f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:40:30 2026 by rpki-client