Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/va2WICd-aMjxKRlIFcHH0ezvVJY.roa
File: va2WICd-aMjxKRlIFcHH0ezvVJY.roa (raw, json)
Hash identifier: +BtrXa9YfWzIULbz32gtsjztdVmPvqNbcYBonxMTzSE=
Subject key identifier: BD:AD:96:20:27:7E:68:C8:F1:29:19:48:15:C1:C7:D1:EC:EF:54:96
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01A0C08C2F844745CC9A6379278A94DC3981
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/va2WICd-aMjxKRlIFcHH0ezvVJY.roa
Signing time: Sun 20 Sep 2026 20:40:07 +0000
ROA not before: Sun 20 Sep 2026 20:40:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219092
IP address blocks: 2a0c:9a40:8a70::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:8c:2f:84:47:45:cc:9a:63:79:27:8a:94:dc:39:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Sep 20 20:40:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bdad9620277e68c8f129194815c1c7d1ecef5496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4e:b9:e1:21:2d:5c:17:67:99:e4:45:80:b3:
f7:7a:25:e9:79:d4:50:3d:57:1a:27:70:e4:06:30:
7f:43:80:a6:00:fc:c6:01:45:f6:cd:51:2a:71:84:
db:4a:90:57:eb:37:54:8c:66:58:6a:62:8e:60:7c:
dd:ef:9c:0e:eb:fe:6b:6a:52:b7:9e:14:2d:e1:a2:
03:8f:f7:5e:72:58:cb:97:8f:ac:9d:09:43:b6:49:
4a:58:70:3b:db:9e:ef:63:9b:03:16:9a:fd:be:24:
4b:5b:a0:91:e0:79:af:4c:cf:bb:61:b6:76:57:9d:
45:bc:62:19:73:28:58:5b:15:dc:fd:13:b6:23:b8:
b7:a1:f1:a0:11:0c:28:75:19:70:c2:2f:8b:06:7b:
21:8f:d9:cb:c1:67:e3:75:81:53:ef:9c:b4:93:4e:
6b:be:31:67:ff:b1:59:cf:e6:36:03:d1:7b:a1:4e:
01:6f:0e:a3:71:7c:4e:ae:fe:77:44:10:fe:c2:c5:
39:4c:72:87:f2:4f:45:ab:bd:49:7b:27:ec:51:b4:
c6:ce:b3:8c:44:82:c0:ea:f8:33:92:70:3d:b9:30:
3f:c5:c4:12:ca:af:35:ff:ba:34:07:97:1c:c8:87:
a0:13:76:10:1f:d6:19:f3:e0:34:a3:b6:e8:52:14:
78:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:AD:96:20:27:7E:68:C8:F1:29:19:48:15:C1:C7:D1:EC:EF:54:96
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/va2WICd-aMjxKRlIFcHH0ezvVJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8a70::/48
Signature Algorithm: sha256WithRSAEncryption
2f:eb:54:31:de:a8:50:15:33:61:17:29:0d:62:e6:7c:44:cc:
da:e4:b4:23:2d:00:ec:69:ee:74:f7:6f:25:c8:b2:de:22:50:
09:00:6e:ef:cc:d2:10:c7:dc:08:0d:59:06:9d:1f:43:cf:88:
2f:26:d0:78:fa:e3:70:1a:51:fe:d2:d7:b3:81:61:9d:68:3b:
20:50:ee:55:98:c4:cd:08:94:e8:a5:2f:ba:eb:9c:2e:da:83:
13:1a:52:e5:9d:12:8f:28:37:0c:36:b1:17:d6:ae:46:2a:5d:
eb:67:19:d0:e8:81:59:a8:c6:78:b7:40:c2:2c:40:af:f5:75:
cc:f1:68:30:ee:6e:80:ab:69:ac:00:d1:41:9a:7c:a5:42:fd:
91:75:53:88:5b:f3:db:e7:94:d4:ea:1d:0a:d7:2f:e5:3a:09:
18:f4:fd:0f:8d:cc:e8:d3:97:d1:c0:7e:d4:07:cc:ad:54:89:
fb:9e:95:10:ba:ec:e8:07:e0:aa:a6:61:d3:31:50:fc:7e:0f:
03:1d:a6:24:2c:27:6a:ef:a9:54:ae:86:66:a5:26:04:be:01:
34:f5:40:9c:a8:8d:cc:0e:7b:86:80:12:fd:9a:10:08:f1:ae:
8d:57:4f:e8:a4:ff:64:6a:32:f0:7d:84:d5:72:63:4f:5e:f5:
0e:97:a8:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:48:06 2026 by rpki-client