Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/vAmeNYoQrcHgLfD-RRXBc97W490.roa
File: vAmeNYoQrcHgLfD-RRXBc97W490.roa (raw, json)
Hash identifier: 7pJsQLIQRKIePikXbYfq53oCT2QS0NJt51wKKaCurVM=
Subject key identifier: BC:09:9E:35:8A:10:AD:C1:E0:2D:F0:FE:45:15:C1:73:DE:D6:E3:DD
Certificate issuer: /CN=9e6d1dc6caa41d3beffe8d1da2671a50e7f79a30
Certificate serial: 019E0DE64331C99531D30BB98D390983EF22
Authority key identifier: 9E:6D:1D:C6:CA:A4:1D:3B:EF:FE:8D:1D:A2:67:1A:50:E7:F7:9A:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/vAmeNYoQrcHgLfD-RRXBc97W490.roa
Signing time: Sat 09 May 2026 18:00:54 +0000
ROA not before: Sat 09 May 2026 18:00:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203105
IP address blocks: 2a0c:6500:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:0d:e6:43:31:c9:95:31:d3:0b:b9:8d:39:09:83:ef:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6d1dc6caa41d3beffe8d1da2671a50e7f79a30
Validity
Not Before: May 9 18:00:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc099e358a10adc1e02df0fe4515c173ded6e3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:65:bb:21:30:d0:b4:2c:f6:8d:a9:29:e6:87:
30:6d:c7:96:aa:ee:49:58:a0:1d:97:f7:0c:4e:02:
67:e5:5d:71:ea:a9:9f:a0:ea:78:30:a0:6c:49:62:
e7:30:f5:d4:40:e9:9a:e5:af:37:9b:6c:86:24:37:
a9:5c:b7:70:24:53:42:7a:bc:88:04:ef:56:a3:9f:
dc:63:49:a8:c9:59:86:90:c4:50:19:71:7b:e4:52:
5d:24:55:04:ad:44:3c:09:a5:4f:2a:cb:3f:91:b8:
7c:18:a9:10:98:d1:98:95:4e:86:d0:f6:30:77:58:
fa:fd:ed:84:88:a9:71:dc:27:45:16:26:04:97:84:
4c:89:e5:0f:d5:fb:16:15:c5:6c:cb:9d:5e:ba:a0:
d8:9f:1b:0d:dc:e1:21:1f:e2:87:be:f8:87:62:1e:
e6:6a:56:d4:04:25:74:8e:a3:90:3d:6b:34:74:78:
67:4d:7b:47:7a:92:39:b7:bb:78:da:53:3b:53:7a:
8f:f0:12:e8:77:f5:fd:84:f7:f0:9f:3c:71:fd:46:
2b:36:68:68:ad:e1:fb:ec:06:7e:5b:4b:1f:35:cd:
80:eb:b6:5e:36:59:b3:d5:33:db:17:d6:c9:dc:91:
aa:e9:31:b9:8a:31:64:2d:44:28:dd:45:61:83:04:
49:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:09:9E:35:8A:10:AD:C1:E0:2D:F0:FE:45:15:C1:73:DE:D6:E3:DD
X509v3 Authority Key Identifier:
keyid:9E:6D:1D:C6:CA:A4:1D:3B:EF:FE:8D:1D:A2:67:1A:50:E7:F7:9A:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/vAmeNYoQrcHgLfD-RRXBc97W490.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:6500:4::/48
Signature Algorithm: sha256WithRSAEncryption
78:9f:dc:22:37:98:d5:5c:af:7a:8a:41:71:c2:34:ed:d4:21:
26:31:bb:2d:ec:d5:20:de:49:8a:74:3d:f6:d9:cd:98:b6:83:
81:bd:55:e4:f6:9d:f7:73:bc:0d:48:06:30:fe:49:e9:bd:3e:
1e:b3:0a:a0:49:4c:b9:9a:f3:09:b7:b7:35:67:89:4e:5a:ae:
8f:60:1d:14:fb:70:da:1f:9a:08:d6:f4:02:f4:a5:d9:99:54:
a6:5d:41:96:0a:e8:cf:9f:28:df:07:7a:27:2e:54:ac:d4:ec:
a2:3e:67:c2:c6:0d:56:70:74:f9:da:fe:ca:c4:96:8e:fe:74:
8e:bb:b5:5b:f5:99:1f:68:53:3d:f9:35:f1:c9:bb:ac:68:99:
1b:8a:62:e7:4e:38:f1:e1:3f:f1:6f:b5:1c:e0:cf:97:e6:f5:
15:bd:b4:74:2c:ec:ed:5d:6d:b1:19:65:c4:a3:93:07:7e:82:
8c:f7:dc:e6:2f:e3:21:ee:a3:73:02:d2:8e:2b:fa:04:c1:fb:
99:e0:da:61:be:61:ce:20:ff:53:51:7f:33:93:0f:dd:12:0d:
f9:92:50:77:e7:51:c3:e0:62:8f:1c:b2:4a:97:a0:cf:77:47:
2e:38:4f:2b:bc:d3:7a:47:19:55:5a:9d:a7:6d:17:6b:06:53:
a7:e7:ea:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:01:13 2026 by rpki-client