Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/VaU9YvaUB5TCM_3yRYn4qKgOc-A.roa
File: VaU9YvaUB5TCM_3yRYn4qKgOc-A.roa (raw, json)
Hash identifier: /DWNnf1KxTi1H/eUMarwjJt9uGkIKtjJF5ONtnvVCJs=
Subject key identifier: 55:A5:3D:62:F6:94:07:94:C2:33:FD:F2:45:89:F8:A8:A8:0E:73:E0
Certificate issuer: /CN=7f8ff3acfcaed203e96de91ab08c6efb64031a63
Certificate serial: 01A0D86C0A32DB7B9534F18A30E6E61ED8BA
Authority key identifier: 7F:8F:F3:AC:FC:AE:D2:03:E9:6D:E9:1A:B0:8C:6E:FB:64:03:1A:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/VaU9YvaUB5TCM_3yRYn4qKgOc-A.roa
Signing time: Fri 25 Sep 2026 11:55:54 +0000
ROA not before: Fri 25 Sep 2026 11:55:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218576
IP address blocks: 2a0a:87c0:fffa::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 20:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:6c:0a:32:db:7b:95:34:f1:8a:30:e6:e6:1e:d8:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f8ff3acfcaed203e96de91ab08c6efb64031a63
Validity
Not Before: Sep 25 11:55:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55a53d62f6940794c233fdf24589f8a8a80e73e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:38:d6:0f:38:e2:ad:02:bb:f1:52:30:74:5d:
47:53:b9:7b:d5:4a:a6:ec:e4:b2:d1:d0:c7:a7:a2:
55:88:22:84:25:b1:2e:52:48:84:6b:12:65:ef:ff:
10:44:0e:0b:ac:d0:f1:2c:48:c9:d5:c6:33:fa:6f:
04:fa:39:91:e8:9b:35:b3:87:2e:d5:99:cb:8c:dd:
a7:9b:e5:47:03:c3:80:8f:d5:b7:8c:1c:37:dd:e8:
11:46:dc:0c:8b:15:07:ac:5b:22:ac:c4:9a:c0:f4:
ab:fe:98:7d:b2:86:82:1f:6d:f0:a7:8e:eb:cc:92:
5b:ce:b3:97:df:c3:84:90:cc:71:e8:da:43:82:23:
4f:f5:74:2e:4d:e6:a1:f8:bc:36:b5:50:37:67:df:
2f:56:39:bf:99:c3:0f:f6:cf:5e:43:87:f6:98:18:
cf:be:29:1a:01:a8:4d:e2:91:14:51:dd:ce:0c:f0:
1d:9d:39:12:a8:83:2b:70:3b:80:bc:a3:70:aa:49:
58:f6:10:92:9b:f7:38:e7:e7:82:8e:a2:b6:8b:a3:
5c:3a:19:9d:d3:f8:c9:3e:2d:7b:ef:d3:0b:26:83:
27:2b:a1:7a:b1:3f:4c:b0:1c:17:2c:29:d3:53:0e:
b2:b7:f5:58:6e:21:df:c2:40:b5:6a:e1:e2:18:5e:
7f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A5:3D:62:F6:94:07:94:C2:33:FD:F2:45:89:F8:A8:A8:0E:73:E0
X509v3 Authority Key Identifier:
keyid:7F:8F:F3:AC:FC:AE:D2:03:E9:6D:E9:1A:B0:8C:6E:FB:64:03:1A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4_zrPyu0gPpbekasIxu-2QDGmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/VaU9YvaUB5TCM_3yRYn4qKgOc-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/188d1c-ffe2-423b-87fb-8f9c65ac16c6/1/f4_zrPyu0gPpbekasIxu-2QDGmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:87c0:fffa::/48
Signature Algorithm: sha256WithRSAEncryption
86:02:4c:25:2d:99:03:47:4a:4d:8e:93:49:15:4f:48:50:32:
15:70:93:b8:96:bd:43:44:f0:ea:45:73:c5:ad:3d:47:45:3c:
26:e8:88:c5:55:78:ac:b3:aa:ac:f7:17:7c:24:0d:45:bd:42:
1c:22:b9:ee:bc:c5:89:82:90:52:13:f3:75:3d:0c:cf:6f:dc:
51:23:aa:80:8b:80:f5:68:2c:df:e4:05:92:c0:62:7d:2b:54:
c3:20:63:53:98:29:2c:66:2f:5a:44:f7:10:10:c4:8f:89:62:
3b:53:b7:36:b2:c9:ac:bb:63:df:ed:c1:64:4e:ad:b9:8f:53:
74:1f:21:a2:e7:da:e6:95:de:2d:54:6f:9e:62:e0:45:6a:92:
bd:1e:1d:ab:44:8d:09:0b:3c:fa:e1:99:7a:14:1f:ae:95:6b:
7e:95:57:c8:1d:98:31:04:bf:85:a3:23:7c:1d:e8:e5:74:96:
70:fe:42:04:5c:73:4f:64:be:00:e6:82:ad:ba:41:aa:25:bd:
9f:ea:a1:ad:41:da:60:f0:19:85:36:2b:a8:e2:2f:20:2c:1d:
08:6c:88:57:99:b8:67:f3:2c:78:31:22:99:46:6f:32:13:71:
74:d0:76:2d:6d:e9:67:6f:11:49:ef:92:a8:dd:bf:3b:ea:b7:
72:53:65:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:35:57 2026 by rpki-client