Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/9e7295-f991-4f49-88c3-4679bdd4f340/1/4VnSoaJFq21OFcZvDPsAEryTDSk.roa
File: 4VnSoaJFq21OFcZvDPsAEryTDSk.roa (raw, json)
Hash identifier: CEZUEzkTNlI42r5UTq7wcvBj5hp5tyvou0Tezlvu5lg=
Subject key identifier: E1:59:D2:A1:A2:45:AB:6D:4E:15:C6:6F:0C:FB:00:12:BC:93:0D:29
Certificate issuer: /CN=87ebb7596d95839a4926673bcd7bffd33bf853bd
Certificate serial: 019F09734211C358A57381CB8439C72F7B24
Authority key identifier: 87:EB:B7:59:6D:95:83:9A:49:26:67:3B:CD:7B:FF:D3:3B:F8:53:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-u3WW2Vg5pJJmc7zXv_0zv4U70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/9e7295-f991-4f49-88c3-4679bdd4f340/1/4VnSoaJFq21OFcZvDPsAEryTDSk.roa
Signing time: Sat 27 Jun 2026 14:19:36 +0000
ROA not before: Sat 27 Jun 2026 14:19:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205874
IP address blocks: 2a0b:b180::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/9e7295-f991-4f49-88c3-4679bdd4f340/1/h-u3WW2Vg5pJJmc7zXv_0zv4U70.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/9e7295-f991-4f49-88c3-4679bdd4f340/1/h-u3WW2Vg5pJJmc7zXv_0zv4U70.mft
rsync://rpki.ripe.net/repository/DEFAULT/h-u3WW2Vg5pJJmc7zXv_0zv4U70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 11:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:09:73:42:11:c3:58:a5:73:81:cb:84:39:c7:2f:7b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87ebb7596d95839a4926673bcd7bffd33bf853bd
Validity
Not Before: Jun 27 14:19:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e159d2a1a245ab6d4e15c66f0cfb0012bc930d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:42:d6:79:4e:a9:02:e4:4f:2c:ee:51:99:70:
2c:95:75:e6:14:0c:24:42:cb:ed:fa:6f:1f:00:3f:
7f:68:10:38:55:93:29:7f:74:ad:6b:f6:7f:29:35:
d8:66:75:2e:76:90:f8:2c:5e:04:62:05:67:f6:fa:
03:52:09:16:50:bc:88:9e:6e:aa:f3:38:d8:4a:83:
cf:d7:29:e4:ee:da:2f:b7:ba:11:ae:d4:9a:1e:e2:
2f:3a:f9:7d:28:4b:bc:73:52:3e:d1:5b:c0:d7:cf:
e7:1a:05:4b:91:c4:a0:90:95:a1:b9:ee:5d:c6:3b:
e6:21:c8:df:71:38:6e:84:88:18:b1:c6:5e:7a:b0:
e7:d5:4d:8f:cb:10:f5:af:1f:c1:05:6f:83:54:7f:
be:68:f2:51:36:3a:77:3d:29:a7:bb:97:a6:7a:14:
62:aa:f1:f2:8e:1c:ad:84:fa:0b:fb:b6:75:60:b4:
47:fd:4d:8e:23:50:23:6c:b2:71:92:07:43:ee:4d:
b3:9b:07:3f:05:a1:10:71:2b:d7:7b:80:3c:c3:39:
e6:b9:a4:05:4a:15:4d:3b:a3:4e:d2:75:29:7e:52:
59:ed:4d:03:d5:74:fc:bb:03:38:4b:bd:80:45:af:
9f:92:a2:21:00:e7:6e:57:31:3b:23:47:3c:c4:37:
c5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:59:D2:A1:A2:45:AB:6D:4E:15:C6:6F:0C:FB:00:12:BC:93:0D:29
X509v3 Authority Key Identifier:
keyid:87:EB:B7:59:6D:95:83:9A:49:26:67:3B:CD:7B:FF:D3:3B:F8:53:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-u3WW2Vg5pJJmc7zXv_0zv4U70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9e7295-f991-4f49-88c3-4679bdd4f340/1/4VnSoaJFq21OFcZvDPsAEryTDSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/9e7295-f991-4f49-88c3-4679bdd4f340/1/h-u3WW2Vg5pJJmc7zXv_0zv4U70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b180::/32
Signature Algorithm: sha256WithRSAEncryption
10:5c:1d:89:ad:21:05:ad:2e:2b:bb:32:1a:75:a4:62:53:25:
9c:e4:87:34:d3:cf:08:25:ac:5e:fb:00:3f:d2:22:5b:75:e4:
f2:5e:99:90:8a:8e:5d:bc:3b:30:8b:01:b8:50:91:8c:dc:18:
b7:ef:b2:6d:82:9c:b2:0e:f4:9a:b9:fe:f6:20:53:d2:50:df:
f7:87:68:1b:5f:d2:9d:62:2f:50:21:7e:af:f1:8a:45:bc:cf:
4e:8c:29:f4:0b:71:f6:ea:d1:81:9a:61:d8:66:46:3a:8f:7b:
d6:79:e4:2f:78:0a:6d:59:59:62:ce:95:70:a9:17:fa:af:60:
21:6d:69:07:75:5a:b2:a0:58:45:4d:0b:df:68:f6:33:08:18:
7c:36:1d:b6:01:35:e4:f2:98:db:07:65:e7:2b:dd:77:b0:49:
8d:b7:8a:08:f3:6a:dd:ea:93:f6:3e:50:60:15:65:a7:0f:a5:
84:7c:25:97:49:9c:9b:59:b7:92:9c:e3:57:37:76:b6:8d:40:
56:42:29:57:a1:21:11:3d:aa:f7:00:07:12:a7:2c:aa:e5:62:
77:40:16:4d:2c:88:47:fa:21:42:74:97:88:da:80:6d:40:11:
ca:38:f3:b6:49:b3:64:de:2b:41:1d:10:86:f2:98:12:e8:fa:
9b:44:87:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:27:06 2026 by rpki-client