Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/VSAqL3uYvPnHYbEbZZ_xRkDkbLs.roa
File: VSAqL3uYvPnHYbEbZZ_xRkDkbLs.roa (raw, json)
Hash identifier: PJJ/NludIQbq1BPXLL1xXP43tupoRdcznnHVwxJEOeU=
Subject key identifier: 55:20:2A:2F:7B:98:BC:F9:C7:61:B1:1B:65:9F:F1:46:40:E4:6C:BB
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 01A0BAB60937482D54517DE3F4014FEAE820
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/VSAqL3uYvPnHYbEbZZ_xRkDkbLs.roa
Signing time: Sat 19 Sep 2026 17:28:07 +0000
ROA not before: Sat 19 Sep 2026 17:28:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218868
IP address blocks: 2a0c:7440::/30 maxlen: 30
2a0c:7444::/30 maxlen: 30
2a0d:2cc0::/30 maxlen: 30
2a0d:2cc4::/30 maxlen: 30
2a0f:7100::/30 maxlen: 30
2a0f:7104::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ba:b6:09:37:48:2d:54:51:7d:e3:f4:01:4f:ea:e8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Sep 19 17:28:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55202a2f7b98bcf9c761b11b659ff14640e46cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6f:e9:73:d2:5d:45:07:8d:2d:c0:03:cd:f2:
46:26:e0:6d:1f:66:ec:97:59:2f:4b:ee:80:13:7c:
85:79:30:a3:58:d2:c2:bc:4d:2f:f8:ba:8e:a0:b0:
b7:16:86:29:37:e8:72:cc:9d:a9:d1:ac:34:9d:d5:
57:7c:84:b5:91:5a:9c:1c:d5:3e:5b:1d:d2:12:4b:
62:82:c5:8e:a1:cc:83:30:30:c8:db:12:54:d2:5a:
e2:78:11:cd:ec:0a:73:59:39:b2:71:75:a8:83:17:
4c:e7:23:0b:30:eb:9c:87:d6:a2:97:a8:19:6d:46:
5e:ec:a7:14:ef:d4:64:d6:c1:d5:87:9c:75:2e:38:
87:10:04:bc:a3:33:13:5f:37:82:8b:de:94:fa:7c:
56:a5:38:41:fa:e1:8a:c0:89:7f:e3:9a:35:9d:6c:
ef:24:31:b4:8a:d4:ca:bf:ff:30:d9:ab:bb:04:99:
7e:50:96:ad:9a:54:4a:e7:3c:78:fe:51:6d:4f:93:
37:94:c5:ce:a3:81:0b:b3:03:41:07:af:be:e9:1e:
04:4a:54:8f:ba:c1:17:cb:48:b5:7f:d8:34:6b:6d:
77:70:f7:7f:e7:ea:17:f2:07:8c:1d:9b:fe:24:27:
bc:2a:14:1e:a1:b8:76:86:47:d2:08:e4:56:db:65:
66:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:20:2A:2F:7B:98:BC:F9:C7:61:B1:1B:65:9F:F1:46:40:E4:6C:BB
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/VSAqL3uYvPnHYbEbZZ_xRkDkbLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:7440::/29
2a0d:2cc0::/29
2a0f:7100::-2a0f:7105:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
28:a3:05:28:37:3b:f4:0f:7a:c9:64:e4:df:d2:22:d8:f7:48:
07:c9:7d:21:12:70:9f:4c:7d:b2:82:b5:8a:1f:41:70:80:ff:
f0:1f:c3:27:26:99:d2:e8:46:62:d1:d1:5f:ab:5d:ea:9e:d6:
fa:80:c7:1d:3a:f9:e1:f8:c4:88:48:47:13:4e:97:79:ff:b2:
80:ff:37:85:a3:44:c8:8e:f5:fd:f2:53:a0:6c:58:eb:d1:aa:
4f:9c:d0:9a:7b:31:9d:aa:68:09:5e:a1:04:15:cc:cd:c7:ce:
9a:21:a7:61:26:44:47:fc:3f:3e:c6:42:d3:9c:28:48:00:0b:
cc:22:46:57:b7:bb:43:46:28:fc:22:79:f8:39:4c:ff:ee:41:
0b:c4:2b:2d:d9:a7:28:9c:df:32:0a:2d:42:9d:e2:a1:bc:92:
8c:63:17:9c:29:aa:52:ce:b7:42:d0:3c:ff:8e:b3:5f:f7:49:
f3:99:19:89:16:05:0d:16:9c:70:67:3d:11:c2:20:17:ed:5f:
d7:07:3f:ec:91:53:f9:f4:7b:39:c0:57:61:c6:62:02:97:05:
97:15:5c:ad:5c:9e:d0:5e:4c:4b:e6:3f:77:43:4f:0c:e7:64:
83:63:78:74:31:5b:63:bb:a9:d3:21:ca:d8:12:a7:96:eb:31:
d6:ad:5a:8c
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAaC6tgk3SC1UUX3j9AFP6uggMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNTU5Y2U4ODlhZTQyNDExMjFmZTBhMTY1M2U0Yjk1NWYz
ZWRmNGIwHhcNMjYwOTE5MTcyODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NTIwMmEyZjdiOThiY2Y5Yzc2MWIxMWI2NTlmZjE0NjQwZTQ2Y2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwm/pc9JdRQeNLcADzfJGJuBtH2bs
l1kvS+6AE3yFeTCjWNLCvE0v+LqOoLC3FoYpN+hyzJ2p0aw0ndVXfIS1kVqcHNU+
Wx3SEktigsWOocyDMDDI2xJU0lrieBHN7ApzWTmycXWogxdM5yMLMOuch9ail6gZ
bUZe7KcU79Rk1sHVh5x1LjiHEAS8ozMTXzeCi96U+nxWpThB+uGKwIl/45o1nWzv
JDG0itTKv/8w2au7BJl+UJatmlRK5zx4/lFtT5M3lMXOo4ELswNBB6++6R4ESlSP
usEXy0i1f9g0a213cPd/5+oX8geMHZv+JCe8KhQeobh2hkfSCORW22VmKQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFFUgKi97mLz5x2GxG2Wf8UZA5Gy7MB8GA1UdIwQY
MBaAFOBVnOiJrkJBEh/goWU+S5VfPt9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYt
OTQ0OTk1N2ZkNWE1LzEvVlNBcUwzdVl2UG5IWWJFYlpaX3hSa0RrYkxzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYtOTQ0OTk1N2ZkNWE1
LzEvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAjBAIAAjAdAwUDKgx0QAMF
AyoNLMAwDQMEACoPcQMFASoPcQQwDQYJKoZIhvcNAQELBQADggEBACijBSg3O/QP
eslk5N/SItj3SAfJfSEScJ9MfbKCtYofQXCA//AfwycmmdLoRmLR0V+rXeqe1vqA
xx06+eH4xIhIRxNOl3n/soD/N4WjRMiO9f3yU6BsWOvRqk+c0Jp7MZ2qaAleoQQV
zM3Hzpohp2EmREf8Pz7GQtOcKEgAC8wiRle3u0NGKPwiefg5TP/uQQvEKy3Zpyic
3zIKLUKd4qG8koxjF5wpqlLOt0LQPP+Os1/3SfOZGYkWBQ0WnHBnPRHCIBftX9cH
P+yRU/n0eznAV2HGYgKXBZcVXK1cntBeTEvmP3dDTwznZINjeHQxW2O7qdMhytgS
p5brMdatWow=
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:21:54 2026 by rpki-client