Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VCd5-xihrlLXK3oNtJeflIRhJfg.roa
File: VCd5-xihrlLXK3oNtJeflIRhJfg.roa (raw, json)
Hash identifier: JsJGUV9dEy+TQcD48RM+JdYNlfR0zCf9MvZTfmAQHJw=
Subject key identifier: 54:27:79:FB:18:A1:AE:52:D7:2B:7A:0D:B4:97:9F:94:84:61:25:F8
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 019F725B006CDF82418AC56E8191BDC9DC13
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VCd5-xihrlLXK3oNtJeflIRhJfg.roa
Signing time: Fri 17 Jul 2026 23:13:14 +0000
ROA not before: Fri 17 Jul 2026 23:13:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212000
IP address blocks: 2a10:fa80:5000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:72:5b:00:6c:df:82:41:8a:c5:6e:81:91:bd:c9:dc:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Jul 17 23:13:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=542779fb18a1ae52d72b7a0db4979f94846125f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:84:fd:6d:5e:a0:db:89:75:45:82:ba:f3:02:
8b:5c:d8:f3:b5:8f:7d:46:5d:fa:17:92:0c:7d:2c:
df:7e:ac:b5:7d:28:b2:88:69:eb:a1:25:4e:02:9b:
83:93:e7:75:79:fa:6d:98:6f:ad:ff:0d:a5:04:39:
32:68:54:de:14:5a:ab:d0:41:ac:56:13:83:5a:ae:
34:4a:5e:1b:af:cc:65:6d:68:44:79:1b:a1:5f:c9:
64:35:99:f3:6b:6b:95:d0:b3:e9:5c:a4:15:fe:d5:
dc:f9:82:4d:70:90:e0:18:3f:fa:02:54:1e:58:aa:
e4:88:48:1b:5f:1e:13:3b:1b:f9:30:a2:58:95:cd:
0c:80:74:3c:51:58:e2:4e:3d:3b:f9:98:e3:13:f4:
98:82:d7:c4:df:69:30:0d:1e:4e:e3:1b:67:44:55:
f0:85:1c:3a:4f:f7:69:03:76:30:5e:56:a8:21:db:
84:db:59:a1:ee:6c:e1:9d:91:b4:02:c2:86:f2:14:
c6:fd:2c:66:73:3c:e7:8f:8e:c4:23:a0:a6:20:37:
7b:0e:7c:bf:41:b8:43:bb:dc:24:7e:9a:0d:49:3c:
e1:02:45:f8:11:ca:38:10:cf:4c:e5:07:d5:3b:5d:
cc:28:ef:35:51:71:90:6b:e0:8e:e9:0e:86:05:13:
6f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:27:79:FB:18:A1:AE:52:D7:2B:7A:0D:B4:97:9F:94:84:61:25:F8
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VCd5-xihrlLXK3oNtJeflIRhJfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa80:5000::/36
Signature Algorithm: sha256WithRSAEncryption
87:43:a4:07:53:d9:a4:b9:06:fb:03:e7:90:9c:8e:a9:53:43:
a7:ed:31:b0:e6:31:97:01:e7:34:07:7f:97:5b:32:6a:34:4a:
1c:5d:48:fb:fb:3f:77:b4:ce:ea:dc:b7:58:ed:3d:d7:f7:2e:
05:3f:48:25:19:c0:b6:44:5a:62:68:52:4e:a5:0c:e4:85:38:
3d:a0:3c:9e:06:5a:9a:20:5d:7a:f1:5a:fd:e7:dd:8e:46:04:
8a:4c:28:9f:1a:30:4c:4a:d1:c6:eb:0d:53:68:01:0f:e6:27:
4c:6e:79:c0:13:52:5f:66:6c:d4:8e:54:58:4a:12:82:ce:59:
d2:79:ec:2a:6f:00:08:0c:32:1f:59:18:74:8f:2a:1a:c7:26:
4e:0a:d3:bb:38:62:da:3c:ed:12:71:0c:aa:ef:d0:8e:99:05:
7c:4f:ce:be:58:21:0a:74:6b:f2:1a:a9:f7:52:b5:ad:fd:c6:
4d:6f:60:d0:08:81:c4:ac:c8:26:c8:d1:0d:1b:67:87:a0:a1:
67:fa:6d:6a:16:fe:64:a3:e5:47:3a:d0:1f:75:4b:db:5a:bb:
ca:24:70:53:dd:76:bc:21:7b:e1:72:32:30:65:2b:1d:64:a9:
f3:db:7d:c7:9d:1b:f8:de:42:86:19:31:1e:67:42:6c:a2:e7:
33:1d:2e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:26 2026 by rpki-client