Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/vn4vDZF-5c0j4TjRhix9Sixf1Go.roa
File: vn4vDZF-5c0j4TjRhix9Sixf1Go.roa (raw, json)
Hash identifier: G0+YDc5zCnG7j4HfctLv6EO8Kbainf/ccFE5eEkLePw=
Subject key identifier: BE:7E:2F:0D:91:7E:E5:CD:23:E1:38:D1:86:2C:7D:4A:2C:5F:D4:6A
Certificate issuer: /CN=1afbd4488916faecfde27af63cf98451b9672ff6
Certificate serial: 019F678747213F2C7A1DFB2F5D2A2E6EB7A1
Authority key identifier: 1A:FB:D4:48:89:16:FA:EC:FD:E2:7A:F6:3C:F9:84:51:B9:67:2F:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GvvUSIkW-uz94nr2PPmEUblnL_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/vn4vDZF-5c0j4TjRhix9Sixf1Go.roa
Signing time: Wed 15 Jul 2026 20:45:46 +0000
ROA not before: Wed 15 Jul 2026 20:45:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219206
IP address blocks: 2a0d:9842::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/GvvUSIkW-uz94nr2PPmEUblnL_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:67:87:47:21:3f:2c:7a:1d:fb:2f:5d:2a:2e:6e:b7:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1afbd4488916faecfde27af63cf98451b9672ff6
Validity
Not Before: Jul 15 20:45:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be7e2f0d917ee5cd23e138d1862c7d4a2c5fd46a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:69:f2:88:62:3a:ed:06:0d:d4:1f:ab:3c:65:
57:29:ff:fe:9a:2e:02:8b:5e:9b:e9:19:d6:1a:45:
05:fd:e7:ba:26:70:c9:3a:68:b4:8d:24:d3:e3:98:
8f:8f:28:61:31:7f:a2:47:4e:b1:47:73:84:0a:7c:
61:67:b8:bb:9c:7f:1f:ec:55:b7:17:d9:17:c5:a6:
f4:a7:71:f6:e5:96:d0:95:70:62:1b:e8:1a:92:02:
a7:44:d1:59:42:e3:bf:cd:14:0b:11:1c:e7:79:43:
ab:a4:38:ed:05:f4:6f:7c:af:4f:03:02:9d:12:e2:
63:db:df:b8:20:c6:aa:42:2a:d8:72:f5:6c:1d:ff:
7c:9c:b3:3d:e7:f1:ac:82:84:be:55:7d:1e:54:49:
35:b6:07:7d:4d:c8:8e:b7:70:7c:42:33:ac:be:31:
5e:23:f7:f8:d1:5c:b0:27:b3:6a:48:19:42:d1:1e:
cd:bd:5d:49:cc:15:96:55:c5:f6:2d:16:0e:2d:6b:
9c:eb:e3:51:e6:26:9e:cc:ac:47:71:49:52:07:ff:
8b:eb:5b:b3:e9:e7:16:7f:57:4c:bf:be:16:c4:f7:
a0:6f:fa:61:fd:92:f7:30:26:13:76:46:2b:ea:f9:
70:04:58:4f:3f:8c:7c:e4:af:58:69:c6:49:fe:02:
44:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:7E:2F:0D:91:7E:E5:CD:23:E1:38:D1:86:2C:7D:4A:2C:5F:D4:6A
X509v3 Authority Key Identifier:
keyid:1A:FB:D4:48:89:16:FA:EC:FD:E2:7A:F6:3C:F9:84:51:B9:67:2F:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GvvUSIkW-uz94nr2PPmEUblnL_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/vn4vDZF-5c0j4TjRhix9Sixf1Go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/eaa787-a249-485f-b750-67062faef802/1/GvvUSIkW-uz94nr2PPmEUblnL_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:9842::/48
Signature Algorithm: sha256WithRSAEncryption
32:c1:26:15:dc:3e:41:a2:db:42:bc:c0:50:e9:87:c1:c8:86:
ca:bf:de:ba:07:9a:cd:7a:e6:60:f5:4e:54:49:7a:06:d1:02:
e4:95:e5:22:19:50:4a:a1:d7:f2:3f:ea:95:a7:d3:ba:25:8b:
0f:2e:53:91:44:a7:ff:9b:9f:2c:2c:c3:0e:e8:b8:e5:e6:05:
d3:eb:4b:f6:83:9b:57:e0:c9:46:ba:45:59:5f:6c:2d:d6:65:
0f:d0:8d:74:96:1a:55:78:5a:2d:1b:8e:77:80:b3:64:87:69:
f1:38:a9:70:94:22:4f:d5:46:6b:c0:95:c2:07:5b:ee:dd:56:
2c:5b:0c:82:09:b5:82:27:7c:b0:9c:65:fd:fd:fa:a4:d5:b5:
96:d0:f6:fe:14:86:e8:27:5d:c4:4d:72:70:e3:63:cf:8b:c8:
fd:0d:3b:90:c0:c0:ff:89:13:0d:02:62:04:3a:16:b5:2d:f4:
fd:e8:e2:2b:99:3d:38:25:05:a1:b3:50:30:6e:c0:3d:8e:ab:
50:51:9c:f2:88:1b:8b:55:eb:b4:d6:04:bf:76:49:31:1f:5b:
2c:7e:74:e0:6a:6a:a0:87:e4:36:d5:3f:c4:71:4f:93:54:d7:
03:b0:8b:04:83:18:e7:5c:e9:2e:0a:40:ae:21:da:72:f0:36:
ac:b5:32:e6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ9nh0chPyx6HfsvXSoubrehMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhZmJkNDQ4ODkxNmZhZWNmZGUyN2FmNjNjZjk4NDUxYjk2
NzJmZjYwHhcNMjYwNzE1MjA0NTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTdlMmYwZDkxN2VlNWNkMjNlMTM4ZDE4NjJjN2Q0YTJjNWZkNDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2nyiGI67QYN1B+rPGVXKf/+mi4C
i16b6RnWGkUF/ee6JnDJOmi0jSTT45iPjyhhMX+iR06xR3OECnxhZ7i7nH8f7FW3
F9kXxab0p3H25ZbQlXBiG+gakgKnRNFZQuO/zRQLERzneUOrpDjtBfRvfK9PAwKd
EuJj29+4IMaqQirYcvVsHf98nLM95/GsgoS+VX0eVEk1tgd9TciOt3B8QjOsvjFe
I/f40VywJ7NqSBlC0R7NvV1JzBWWVcX2LRYOLWuc6+NR5iaezKxHcUlSB/+L61uz
6ecWf1dMv74WxPegb/ph/ZL3MCYTdkYr6vlwBFhPP4x85K9YacZJ/gJEPQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFL5+Lw2RfuXNI+E40YYsfUosX9RqMB8GA1UdIwQY
MBaAFBr71EiJFvrs/eJ69jz5hFG5Zy/2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3Z2VVNJa1ctdXo5NG5yMlBQbUVVYmxuTF9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9lYWE3ODctYTI0OS00ODVmLWI3NTAt
NjcwNjJmYWVmODAyLzEvdm40dkRaRi01YzBqNFRqUmhpeDlTaXhmMUdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9lYWE3ODctYTI0OS00ODVmLWI3NTAtNjcwNjJmYWVmODAy
LzEvR3Z2VVNJa1ctdXo5NG5yMlBQbUVVYmxuTF9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg2YQgAA
MA0GCSqGSIb3DQEBCwUAA4IBAQAywSYV3D5BottCvMBQ6YfByIbKv966B5rNeuZg
9U5USXoG0QLkleUiGVBKodfyP+qVp9O6JYsPLlORRKf/m58sLMMO6Ljl5gXT60v2
g5tX4MlGukVZX2wt1mUP0I10lhpVeFotG453gLNkh2nxOKlwlCJP1UZrwJXCB1vu
3VYsWwyCCbWCJ3ywnGX9/fqk1bWW0Pb+FIboJ13ETXJw42PPi8j9DTuQwMD/iRMN
AmIEOha1LfT96OIrmT04JQWhs1AwbsA9jqtQUZzyiBuLVeu01gS/dkkxH1ssfnTg
amqgh+Q21T/EcU+TVNcDsIsEgxjnXOkuCkCuIdpy8DastTLm
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:45:40 2026 by rpki-client