Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/6261dd-a5da-450d-9a72-7f18617ea638/1/vbN_eCvKwWT_rMGE4kvqQZz1flc.roa
File: vbN_eCvKwWT_rMGE4kvqQZz1flc.roa (raw, json)
Hash identifier: CqWChSxKkOBoTByukgK5hHqgGj4r+oDXaXQX8ugmTrM=
Subject key identifier: BD:B3:7F:78:2B:CA:C1:64:FF:AC:C1:84:E2:4B:EA:41:9C:F5:7E:57
Certificate issuer: /CN=6abb17dd7bc7f2099c54eef7867d9f39a7929384
Certificate serial: 019B797F1E2B2FA62A23B4EC1D0FC66F4977
Authority key identifier: 6A:BB:17:DD:7B:C7:F2:09:9C:54:EE:F7:86:7D:9F:39:A7:92:93:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/arsX3XvH8gmcVO73hn2fOaeSk4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/6261dd-a5da-450d-9a72-7f18617ea638/1/vbN_eCvKwWT_rMGE4kvqQZz1flc.roa
Signing time: Thu 01 Jan 2026 12:18:52 +0000
ROA not before: Thu 01 Jan 2026 12:18:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208466
IP address blocks: 45.135.84.0/22 maxlen: 22
2a0e:89c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/6261dd-a5da-450d-9a72-7f18617ea638/1/arsX3XvH8gmcVO73hn2fOaeSk4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/6261dd-a5da-450d-9a72-7f18617ea638/1/arsX3XvH8gmcVO73hn2fOaeSk4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/arsX3XvH8gmcVO73hn2fOaeSk4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7f:1e:2b:2f:a6:2a:23:b4:ec:1d:0f:c6:6f:49:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6abb17dd7bc7f2099c54eef7867d9f39a7929384
Validity
Not Before: Jan 1 12:18:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bdb37f782bcac164ffacc184e24bea419cf57e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e8:38:be:c0:db:c6:a8:fd:e3:3f:ab:d6:80:
a2:05:5b:b6:ea:a5:40:d3:2e:d9:0c:9f:43:76:1d:
34:57:9b:3f:8f:93:fa:9c:ac:0f:77:c3:33:85:48:
15:b1:f4:9c:05:76:4f:0d:6a:7a:d1:f2:5c:be:d6:
05:6a:a6:5c:02:0b:0a:42:69:4b:72:3b:50:a7:f7:
de:6d:f7:5f:3e:8b:69:11:76:6a:04:ab:ad:91:37:
9c:c5:54:3f:45:79:e3:9a:b4:b8:2e:76:5e:1d:32:
3c:cc:85:cc:f2:17:5e:96:54:c0:81:82:5a:9d:ff:
d2:4e:7d:78:19:e6:de:4e:54:e5:de:8f:17:61:61:
ce:ef:d9:18:49:87:07:c1:21:13:93:56:6d:42:e7:
6f:16:75:4b:25:d9:66:77:14:8d:ff:0b:03:fc:18:
47:ae:cb:54:51:af:44:4a:a7:a2:9e:32:1a:24:ca:
62:13:5c:4a:77:a4:78:c1:31:b3:b3:da:79:00:68:
64:38:98:eb:5c:93:64:6e:ea:d4:ba:dd:2a:23:da:
92:19:ef:4e:01:f8:63:ce:22:fe:b2:83:07:f5:92:
40:a1:4d:47:75:a9:7b:48:c7:a1:e9:5b:9f:fb:3f:
7b:83:5f:4c:7b:37:98:03:2a:ff:3c:67:eb:4c:e2:
a3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B3:7F:78:2B:CA:C1:64:FF:AC:C1:84:E2:4B:EA:41:9C:F5:7E:57
X509v3 Authority Key Identifier:
keyid:6A:BB:17:DD:7B:C7:F2:09:9C:54:EE:F7:86:7D:9F:39:A7:92:93:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arsX3XvH8gmcVO73hn2fOaeSk4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/6261dd-a5da-450d-9a72-7f18617ea638/1/vbN_eCvKwWT_rMGE4kvqQZz1flc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/6261dd-a5da-450d-9a72-7f18617ea638/1/arsX3XvH8gmcVO73hn2fOaeSk4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.84.0/22
IPv6:
2a0e:89c0::/29
Signature Algorithm: sha256WithRSAEncryption
2b:d9:95:5f:3e:1e:70:94:9e:97:ae:fb:78:5f:36:80:fa:9f:
2d:9e:8d:1a:07:0c:e0:6d:fd:62:e4:95:a4:17:49:57:d8:f0:
a7:70:d1:04:fe:59:73:1b:b9:73:ac:a8:a2:37:0d:51:a7:56:
22:11:61:bf:0d:aa:07:35:0f:c8:6f:55:fd:0c:88:7d:03:1b:
1f:d8:97:3f:c0:76:ad:89:f8:f7:5f:30:ee:ef:76:5e:89:47:
f0:8f:ac:e2:84:9e:b0:b7:30:b7:d9:4e:0a:cb:2d:e2:86:92:
68:8c:79:a0:30:d6:4b:f0:12:c4:1e:eb:2f:3a:1f:59:20:a5:
ac:ac:71:08:50:cd:3e:c0:e3:e3:43:7b:15:46:b4:a5:fd:56:
1e:89:22:e3:58:c8:41:18:53:97:e5:bd:86:6a:2e:3c:8a:32:
00:23:f2:43:cb:9d:df:c4:d0:10:d7:ba:a1:20:c1:6e:e0:81:
31:52:48:7d:45:7a:c2:1b:39:4b:3d:8f:11:d4:1a:36:14:b1:
b7:29:23:db:0e:0a:00:0f:35:f8:56:08:70:e3:d3:b5:15:13:
a5:f2:d9:b6:8d:e3:e4:f2:27:ce:01:b5:72:1f:49:91:8e:2b:
d4:c9:2c:75:06:63:e9:b6:cc:96:dc:2c:aa:1e:8e:de:09:ce:
59:8b:fd:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 15:55:00 2026 by rpki-client