Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/VF8nseeKFoW1-sQCI4yEAMSh33c.roa
File: VF8nseeKFoW1-sQCI4yEAMSh33c.roa (raw, json)
Hash identifier: HnMrjXoUoap5Tw8ndP9ztKvIUxRuUHw+ETqNCU31IdI=
Subject key identifier: 54:5F:27:B1:E7:8A:16:85:B5:FA:C4:02:23:8C:84:00:C4:A1:DF:77
Certificate issuer: /CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Certificate serial: 019CF709A331A20C6C3332D413925227D26D
Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/VF8nseeKFoW1-sQCI4yEAMSh33c.roa
Signing time: Mon 16 Mar 2026 14:25:29 +0000
ROA not before: Mon 16 Mar 2026 14:25:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 2a02:102e:20::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f7:09:a3:31:a2:0c:6c:33:32:d4:13:92:52:27:d2:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Validity
Not Before: Mar 16 14:25:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=545f27b1e78a1685b5fac402238c8400c4a1df77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cb:09:d7:c0:30:7c:57:5e:db:a2:d6:84:f0:
f8:5c:db:e8:2e:29:13:9b:92:e1:40:90:a3:f4:eb:
f8:99:22:4f:2c:18:77:b4:f7:46:a6:23:b9:cc:01:
b1:51:83:f3:9f:ca:c7:e1:c8:ad:e2:51:5a:31:da:
44:cb:4f:e8:b4:1d:93:3d:b8:7d:c9:46:1d:e8:89:
e8:68:10:97:f8:9c:07:dd:36:43:31:52:e5:6b:88:
20:35:0d:32:c0:3f:7b:ba:e8:aa:35:8f:39:aa:2f:
6d:1f:ee:d9:9c:8c:c5:51:1c:ce:72:98:d0:92:cf:
6d:23:df:14:ac:78:97:a1:a6:89:f8:04:6a:9c:bf:
1a:b1:17:83:39:91:b9:85:f1:91:28:6a:b5:96:3a:
f4:08:4f:86:76:7b:74:e5:3f:96:ad:d6:7a:95:1b:
4d:0f:9a:db:19:96:ef:dd:42:ce:f6:93:e2:32:c0:
3a:2e:31:1a:cf:55:fb:10:e8:9e:a0:fc:67:c0:13:
d0:c5:66:84:20:a7:94:69:23:3d:56:ef:81:c2:db:
b0:3e:7d:bc:17:f2:96:b5:34:2f:2a:95:9a:18:d0:
5d:6b:ee:29:1c:22:e8:a7:17:5b:53:cb:90:49:2e:
91:e3:fc:dc:46:9c:b5:eb:10:01:70:ae:c0:d7:ad:
ec:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5F:27:B1:E7:8A:16:85:B5:FA:C4:02:23:8C:84:00:C4:A1:DF:77
X509v3 Authority Key Identifier:
keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/VF8nseeKFoW1-sQCI4yEAMSh33c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:102e:20::/44
Signature Algorithm: sha256WithRSAEncryption
a1:aa:e4:cd:71:5b:8a:fc:fc:2e:a8:76:51:84:e0:df:3f:b9:
34:dc:16:64:fa:aa:5e:34:27:89:53:e1:c0:51:7f:33:65:69:
42:7d:27:4d:1f:54:55:93:3b:b7:4c:29:ca:0a:c3:9b:50:04:
d5:b9:ac:42:e5:3a:4d:de:bf:b0:f8:66:6d:f0:88:6b:94:fc:
f2:c5:39:1a:04:2b:f6:63:39:d9:5f:dc:47:94:bf:f7:7c:ed:
8f:97:24:c1:5c:4f:3a:d2:59:3e:08:31:32:e4:98:26:42:28:
fc:76:2a:b7:8f:3b:a0:38:89:aa:1b:e5:81:bc:f2:be:af:11:
5c:63:4d:48:59:d4:45:4a:d6:11:1d:a1:17:5b:29:45:f2:b5:
ca:6f:e7:45:ca:63:17:08:fe:a7:f0:7d:0e:67:df:64:e6:12:
c2:45:09:d7:12:a3:de:41:04:44:e3:58:8c:b5:c4:ad:9e:ed:
81:6b:af:53:2a:49:43:53:05:46:d9:2b:8a:f6:cd:cc:26:0c:
c1:5a:27:2d:b3:c4:3f:11:1b:89:47:0f:84:3a:d9:16:c7:22:
87:20:eb:ce:0c:d9:5d:1a:2e:08:9c:cb:72:02:a9:92:5d:58:
1e:89:0e:a8:c5:b3:2c:77:96:a5:7e:72:5f:8c:f9:84:95:b9:
b1:6b:93:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:48:28 2026 by rpki-client