Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/fvWob-bYo2viCvyo3G9lkOuHblA.roa
File: fvWob-bYo2viCvyo3G9lkOuHblA.roa (raw, json)
Hash identifier: etJ4MHx8tDUG9JvHkmiIEPz9jac03kFDgg0DnhXxVD4=
Subject key identifier: 7E:F5:A8:6F:E6:D8:A3:6B:E2:0A:FC:A8:DC:6F:65:90:EB:87:6E:50
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 019E633B63FAE2959E5CBEA46BEEC35B9FD4
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/fvWob-bYo2viCvyo3G9lkOuHblA.roa
Signing time: Tue 26 May 2026 07:41:37 +0000
ROA not before: Tue 26 May 2026 07:41:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198778
IP address blocks: 2a01:620:6006::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 15:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:63:3b:63:fa:e2:95:9e:5c:be:a4:6b:ee:c3:5b:9f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: May 26 07:41:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7ef5a86fe6d8a36be20afca8dc6f6590eb876e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0b:eb:c7:5e:ed:76:71:c4:37:51:b0:11:a5:
4d:61:39:8c:6c:da:97:93:fb:da:71:52:4c:2a:e4:
10:0a:b8:0a:2f:15:90:17:04:9e:85:2f:40:6d:ce:
3f:76:d1:d7:e1:f0:b2:8f:84:97:9e:01:bb:40:fd:
66:65:51:8b:0a:3d:5a:2e:42:97:5b:99:9c:b8:64:
c6:d6:c2:78:08:03:c9:e1:eb:c6:57:54:00:aa:9a:
d7:05:e1:97:82:c1:73:29:af:d0:cf:30:cd:40:2f:
d8:c3:78:bc:58:74:b8:5d:44:47:d4:04:9f:ff:be:
7a:02:0c:d8:45:ba:2d:0d:53:a6:8a:26:06:f6:a7:
0d:76:9e:a2:03:ab:8b:53:56:f2:95:f0:b7:73:b4:
96:af:15:7d:dc:53:e6:5c:1a:4a:6e:4a:83:64:10:
2b:6e:b5:1c:86:c6:f8:e0:ec:12:0c:7a:82:d7:d7:
45:66:0c:b3:46:a5:3d:01:d6:d7:fb:3b:76:ce:ac:
14:0a:e2:6b:49:3e:28:7a:11:ce:e8:a4:62:a2:86:
61:62:50:a8:e5:e6:19:90:42:f1:53:fb:1c:be:00:
93:bd:77:1e:43:e2:ab:03:53:85:dd:4d:9e:ab:ca:
b1:7a:3c:e4:9f:7b:57:70:86:99:b9:ca:c7:66:20:
05:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F5:A8:6F:E6:D8:A3:6B:E2:0A:FC:A8:DC:6F:65:90:EB:87:6E:50
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/fvWob-bYo2viCvyo3G9lkOuHblA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:620:6006::/48
Signature Algorithm: sha256WithRSAEncryption
55:ac:1f:95:52:37:3a:a3:13:08:82:1c:12:c6:c9:27:77:ce:
3e:98:64:8c:b6:40:dc:89:ea:47:40:85:e7:4c:83:62:e7:fc:
44:23:4f:4a:d2:2f:99:e1:9f:ce:d2:76:8a:59:36:06:ad:37:
fd:f2:6a:1e:92:20:96:27:e3:c8:17:6f:8a:c8:cf:cb:d6:28:
42:0a:7c:28:08:a5:90:07:2d:2a:c8:69:7d:ab:a3:7c:0d:cc:
1f:aa:93:95:25:f1:e6:41:bc:a2:21:7e:d9:e2:9e:66:47:22:
bc:9b:36:ec:4a:23:a9:23:ea:fb:91:97:8f:e9:2c:1e:af:53:
87:61:51:c3:25:18:30:1c:30:9c:08:42:85:f3:cf:c3:43:c2:
f3:fc:03:c2:98:b5:0d:c3:69:64:ae:e2:6e:c4:46:af:0e:85:
14:dd:2d:40:80:e1:47:3a:6f:1e:93:a1:2c:66:69:48:7f:64:
0a:56:e4:75:94:58:e3:1c:67:d1:5f:6a:2f:01:08:a9:fe:f9:
0f:8c:6e:14:74:5d:e1:50:c3:31:81:27:dd:8c:f5:c4:00:44:
eb:fe:8e:8f:0c:17:5f:fa:b9:ce:fd:0f:55:ba:04:4f:4c:ff:
bb:91:cf:00:5f:de:e2:42:93:2f:b2:a7:4b:b4:25:bf:c1:2a:
ce:f3:a2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:08 2026 by rpki-client