Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/VBa7pmCn8ime4P1CWdu0-bHF6pU.roa
File: VBa7pmCn8ime4P1CWdu0-bHF6pU.roa (raw, json)
Hash identifier: Zu7orNKKN0lHI4UfSn3mVOtovclqiBwC91Fgfm2M6m8=
Subject key identifier: 54:16:BB:A6:60:A7:F2:29:9E:E0:FD:42:59:DB:B4:F9:B1:C5:EA:95
Certificate issuer: /CN=7af51229773af9157e317160f9dc800f381e0b2b
Certificate serial: 019F226C817DCFFEB4B8FFFFFA2E89599885
Authority key identifier: 7A:F5:12:29:77:3A:F9:15:7E:31:71:60:F9:DC:80:0F:38:1E:0B:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/VBa7pmCn8ime4P1CWdu0-bHF6pU.roa
Signing time: Thu 02 Jul 2026 10:42:44 +0000
ROA not before: Thu 02 Jul 2026 10:42:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3258
IP address blocks: 2a11::/32 maxlen: 48
2a11:3::/32 maxlen: 48
2a11:4::/30 maxlen: 48
2a11:8080::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.mft
rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:6c:81:7d:cf:fe:b4:b8:ff:ff:fa:2e:89:59:98:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7af51229773af9157e317160f9dc800f381e0b2b
Validity
Not Before: Jul 2 10:42:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5416bba660a7f2299ee0fd4259dbb4f9b1c5ea95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:be:3e:0c:b4:de:c5:69:7c:48:e0:be:a0:d0:
02:29:b3:67:86:e0:6e:5d:15:2d:6f:a5:b9:2e:e1:
db:c9:59:ec:ef:71:b5:ae:70:f0:d6:9a:3e:42:64:
54:c1:cb:2e:43:7e:bd:9d:7e:07:53:8b:19:ab:0e:
77:57:88:d1:55:94:5c:ee:c0:56:2f:7c:f8:3e:c2:
9c:fa:a2:0e:50:6a:0a:45:34:35:79:c6:e9:22:44:
df:56:8f:37:08:1d:63:cd:f7:28:90:84:ac:44:94:
63:75:ad:6a:f0:dd:1c:ce:48:0c:8e:0f:4b:0a:42:
9b:e8:5f:b1:a5:d2:ab:c0:e6:75:0c:28:82:1e:7d:
ff:b3:d6:55:75:71:17:f2:52:d9:2d:8e:b3:24:7d:
1c:a0:db:3d:c4:dc:00:d0:6e:53:e2:2f:5f:71:79:
b5:aa:c3:3d:da:78:2e:d1:ed:3a:aa:4a:fd:3d:c4:
af:48:1b:ae:d6:1a:55:df:8b:b5:17:4a:c2:3e:24:
54:c9:aa:33:4f:98:27:ff:46:9d:21:ee:1f:8e:1f:
eb:9e:78:3f:55:92:40:6a:d0:f0:b3:f5:f1:b6:e2:
33:3b:1c:71:89:e7:63:21:98:fa:b5:0d:87:f4:68:
3c:e3:3e:8d:92:a0:76:e6:49:f2:f7:03:fc:b1:a5:
05:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:16:BB:A6:60:A7:F2:29:9E:E0:FD:42:59:DB:B4:F9:B1:C5:EA:95
X509v3 Authority Key Identifier:
keyid:7A:F5:12:29:77:3A:F9:15:7E:31:71:60:F9:DC:80:0F:38:1E:0B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evUSKXc6-RV-MXFg-dyADzgeCys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/VBa7pmCn8ime4P1CWdu0-bHF6pU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e06916-9003-4195-b0f2-ee1ea636ed4f/1/evUSKXc6-RV-MXFg-dyADzgeCys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11::/32
2a11:3::-2a11:7:ffff:ffff:ffff:ffff:ffff:ffff
2a11:8080::/29
Signature Algorithm: sha256WithRSAEncryption
23:b3:1a:f4:2b:d5:35:db:b0:46:81:71:ab:f2:36:0a:d2:d9:
07:51:97:dc:c2:21:6e:d5:af:44:54:5f:ff:69:3d:e7:2d:a1:
74:79:93:04:62:6e:ae:52:b3:d8:0b:b9:55:70:3b:8c:ee:8c:
66:b1:76:a3:72:36:c8:72:02:a4:c8:70:c3:aa:5c:9d:04:8c:
aa:a8:ca:b8:69:f5:d1:d6:8b:28:6a:a2:ee:4b:58:b0:26:8d:
f2:33:57:8d:2c:5f:3d:c8:ea:22:85:6c:2e:cc:7b:7c:2c:ab:
3d:9c:d3:cf:3f:c0:ec:27:fe:39:a7:07:83:b9:72:61:d5:03:
f5:32:a5:28:1b:ac:f9:77:a3:d0:4a:22:3e:71:72:4a:80:e0:
2f:5b:64:c5:12:61:34:7a:1f:60:3f:1a:09:db:b4:52:a9:1e:
d7:e9:29:c1:43:ff:ee:08:dd:51:ca:55:50:bd:f6:f9:5d:3b:
a3:65:99:d2:10:31:1e:fd:1f:62:9c:5c:54:51:a7:60:70:f6:
75:1a:ea:4c:c7:e4:5a:e9:89:c9:22:f6:fb:f7:25:ee:2a:00:
cd:07:37:c4:f9:00:e8:03:67:82:fd:cd:b7:36:bb:6f:2c:e0:
bb:b1:ea:85:9a:b2:62:63:6d:db:21:1c:fb:38:a2:08:a0:db:
85:81:f2:68
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZ8ibIF9z/60uP//+i6JWZiFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhZjUxMjI5NzczYWY5MTU3ZTMxNzE2MGY5ZGM4MDBmMzgx
ZTBiMmIwHhcNMjYwNzAyMTA0MjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDE2YmJhNjYwYTdmMjI5OWVlMGZkNDI1OWRiYjRmOWIxYzVlYTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs74+DLTexWl8SOC+oNACKbNnhuBu
XRUtb6W5LuHbyVns73G1rnDw1po+QmRUwcsuQ369nX4HU4sZqw53V4jRVZRc7sBW
L3z4PsKc+qIOUGoKRTQ1ecbpIkTfVo83CB1jzfcokISsRJRjda1q8N0czkgMjg9L
CkKb6F+xpdKrwOZ1DCiCHn3/s9ZVdXEX8lLZLY6zJH0coNs9xNwA0G5T4i9fcXm1
qsM92ngu0e06qkr9PcSvSBuu1hpV34u1F0rCPiRUyaozT5gn/0adIe4fjh/rnng/
VZJAatDws/XxtuIzOxxxiedjIZj6tQ2H9Gg84z6NkqB25kny9wP8saUFZwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFFQWu6Zgp/IpnuD9QlnbtPmxxeqVMB8GA1UdIwQY
MBaAFHr1Eil3OvkVfjFxYPncgA84HgsrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXZVU0tYYzYtUlYtTVhGZy1keUFEemdlQ3lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lMDY5MTYtOTAwMy00MTk1LWIwZjIt
ZWUxZWE2MzZlZDRmLzEvVkJhN3BtQ244aW1lNFAxQ1dkdTAtYkhGNnBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9lMDY5MTYtOTAwMy00MTk1LWIwZjItZWUxZWE2MzZlZDRm
LzEvZXZVU0tYYzYtUlYtTVhGZy1keUFEemdlQ3lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAAjAeAwUAKhEAADAO
AwUAKhEAAwMFAyoRAAADBQMqEYCAMA0GCSqGSIb3DQEBCwUAA4IBAQAjsxr0K9U1
27BGgXGr8jYK0tkHUZfcwiFu1a9EVF//aT3nLaF0eZMEYm6uUrPYC7lVcDuM7oxm
sXajcjbIcgKkyHDDqlydBIyqqMq4afXR1osoaqLuS1iwJo3yM1eNLF89yOoihWwu
zHt8LKs9nNPPP8DsJ/45pweDuXJh1QP1MqUoG6z5d6PQSiI+cXJKgOAvW2TFEmE0
eh9gPxoJ27RSqR7X6SnBQ//uCN1RylVQvfb5XTujZZnSEDEe/R9inFxUUadgcPZ1
GupMx+Ra6YnJIvb79yXuKgDNBzfE+QDoA2eC/c23NrtvLOC7seqFmrJiY23bIRz7
OKIIoNuFgfJo
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:02:39 2026 by rpki-client