Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/516da0-01cb-4d73-b7e1-efc3e8cd7fc2/1/vQqPisK4zUL3aAmNsTDcsPeP62A.roa
File: vQqPisK4zUL3aAmNsTDcsPeP62A.roa (raw, json)
Hash identifier: 95G6GdHymVSsEtltaZIXZ9bnpGcXAWpiJuxJR4/ZfUo=
Subject key identifier: BD:0A:8F:8A:C2:B8:CD:42:F7:68:09:8D:B1:30:DC:B0:F7:8F:EB:60
Certificate issuer: /CN=230992191d853734bd572d61d1a8e3553bedf6c8
Certificate serial: 01A1D988F3778A4E9B2E3B4A11926FF0FE5A
Authority key identifier: 23:09:92:19:1D:85:37:34:BD:57:2D:61:D1:A8:E3:55:3B:ED:F6:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwmSGR2FNzS9Vy1h0ajjVTvt9sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/516da0-01cb-4d73-b7e1-efc3e8cd7fc2/1/vQqPisK4zUL3aAmNsTDcsPeP62A.roa
Signing time: Sat 14 Nov 2026 10:09:53 +0000
ROA not before: Sat 14 Nov 2026 10:09:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41791
IP address blocks: 2a12:dec0:caf0::/48 maxlen: 48
2a12:dec0:caf1::/48 maxlen: 48
2a12:dec0:caf2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/516da0-01cb-4d73-b7e1-efc3e8cd7fc2/1/IwmSGR2FNzS9Vy1h0ajjVTvt9sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/516da0-01cb-4d73-b7e1-efc3e8cd7fc2/1/IwmSGR2FNzS9Vy1h0ajjVTvt9sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwmSGR2FNzS9Vy1h0ajjVTvt9sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d9:88:f3:77:8a:4e:9b:2e:3b:4a:11:92:6f:f0:fe:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=230992191d853734bd572d61d1a8e3553bedf6c8
Validity
Not Before: Nov 14 10:09:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd0a8f8ac2b8cd42f768098db130dcb0f78feb60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c6:89:4f:60:40:71:38:fd:be:d9:07:83:0c:
4a:93:60:4e:95:bd:6f:28:67:79:f0:4d:41:df:2f:
02:d9:a5:a9:d0:3d:79:4f:7c:cc:58:b4:7f:80:5f:
78:26:3d:b2:59:ab:51:a3:d7:bb:05:80:8b:95:79:
54:2c:e6:c0:8b:6c:ec:dd:7c:80:81:7c:00:e2:21:
1b:d0:e5:98:b3:db:b7:54:1a:84:38:9a:cc:63:e4:
88:ea:73:76:c9:e8:28:b7:49:f4:63:36:6b:f1:7d:
33:92:50:00:d8:a9:13:1f:a7:6a:25:d5:c5:f5:04:
97:42:01:23:45:d7:e8:3d:28:0c:68:09:2d:2c:5d:
da:9f:f6:db:f8:17:c8:eb:c5:b5:4c:2a:4d:ee:a1:
67:d0:4e:a0:e7:37:3e:8e:d0:18:23:f4:27:46:bb:
08:c8:7b:c0:b3:86:1d:28:36:29:10:20:e2:13:67:
9d:e3:db:68:a0:ba:1a:42:13:f2:08:98:af:f8:23:
45:be:e0:5d:69:c2:bb:91:15:8e:20:7b:36:dd:2c:
6d:b8:5a:d7:66:d4:47:5e:32:9d:0e:7d:a8:b8:43:
69:ba:dd:6e:28:84:27:1b:15:ae:98:1b:36:1d:c9:
df:9c:ad:bb:00:11:10:61:53:56:dc:c8:c7:5f:07:
21:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0A:8F:8A:C2:B8:CD:42:F7:68:09:8D:B1:30:DC:B0:F7:8F:EB:60
X509v3 Authority Key Identifier:
keyid:23:09:92:19:1D:85:37:34:BD:57:2D:61:D1:A8:E3:55:3B:ED:F6:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwmSGR2FNzS9Vy1h0ajjVTvt9sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/516da0-01cb-4d73-b7e1-efc3e8cd7fc2/1/vQqPisK4zUL3aAmNsTDcsPeP62A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/516da0-01cb-4d73-b7e1-efc3e8cd7fc2/1/IwmSGR2FNzS9Vy1h0ajjVTvt9sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:dec0:caf0::-2a12:dec0:caf2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
21:3e:bd:44:a9:58:6e:dc:c1:08:2d:22:e5:09:06:7f:b4:c6:
53:49:70:79:6f:4f:03:c8:31:1c:da:d8:8e:4f:af:7f:08:a8:
9c:40:b4:f1:a3:8e:a2:5f:01:8a:c0:b7:a0:53:5d:d5:41:6f:
f1:0b:d5:5e:20:8a:25:1e:ab:9f:2d:34:10:14:ba:37:11:96:
e3:6e:cb:da:63:56:25:13:ac:ae:f8:ff:19:5b:39:01:93:b5:
b4:ee:c5:30:b8:7f:5c:bf:74:57:03:40:4d:6b:f4:af:b9:af:
7d:37:64:10:19:65:00:21:fe:ab:86:df:bc:35:e2:a3:94:76:
e3:ba:19:e1:dd:8f:d2:27:0c:e5:aa:a3:cf:c3:5e:79:bc:a5:
93:d2:24:9c:ea:a5:3a:48:7f:e8:70:74:b0:1d:6b:a3:0f:4c:
6d:bd:0b:42:81:aa:8b:28:d6:e4:37:cf:aa:be:f7:6d:00:c1:
70:5b:62:b1:e8:44:1e:d7:23:2c:04:b0:42:42:c6:89:5f:3b:
b3:80:eb:69:3c:d2:29:1e:c4:22:e9:6f:2c:6c:e6:93:e3:bf:
65:fa:54:b2:ef:1a:32:21:4c:d4:a2:b7:95:51:ec:e5:7c:91:
14:63:7a:12:bc:a1:d1:12:ab:0a:a2:ac:f8:45:ac:77:36:e0:
07:43:d9:eb
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:12:46 2026 by rpki-client