Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VJ78_WwOls3T_oO_cG_9IeHt_II.roa
File: VJ78_WwOls3T_oO_cG_9IeHt_II.roa (raw, json)
Hash identifier: p/LaBz8pPMUgWF7yOPVod5Z6Hc0E1vXtc4WFe7aTGY4=
Subject key identifier: 54:9E:FC:FD:6C:0E:96:CD:D3:FE:83:BF:70:6F:FD:21:E1:ED:FC:82
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 01A0F8C426D010DB842BB9BC126D108C14F4
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VJ78_WwOls3T_oO_cG_9IeHt_II.roa
Signing time: Thu 01 Oct 2026 18:39:59 +0000
ROA not before: Thu 01 Oct 2026 18:39:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 394503
IP address blocks: 2a10:fa80:140::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f8:c4:26:d0:10:db:84:2b:b9:bc:12:6d:10:8c:14:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Oct 1 18:39:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=549efcfd6c0e96cdd3fe83bf706ffd21e1edfc82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:08:cc:be:94:3c:40:ca:cf:79:72:c1:dd:55:
f2:dd:f0:24:17:90:02:11:11:68:c4:41:34:6c:77:
87:03:c6:73:a4:25:2a:0f:0e:cf:19:bb:11:cf:e4:
fd:d7:f7:7b:e8:95:32:90:4d:70:27:92:7b:9c:15:
8b:24:3e:d4:55:07:ca:76:3d:dd:78:79:68:ec:ef:
ca:a3:3f:75:a8:e9:a7:09:36:37:6b:24:bb:c3:b3:
34:f9:86:98:c1:d3:85:0e:0d:7d:b4:6b:14:ed:94:
0a:e4:90:f9:b1:a6:e0:25:23:63:f8:ee:34:1a:d4:
5e:42:70:66:e1:18:47:62:23:70:85:ea:9e:8b:25:
59:a9:c2:f2:31:09:a5:05:6b:15:de:83:62:c5:32:
1c:6b:ae:41:66:45:9e:c5:78:39:91:4f:5a:b1:b8:
f0:81:dc:0b:b3:ff:14:83:00:33:23:39:fd:ba:45:
f8:5b:e8:de:36:e9:ef:98:90:3b:79:65:79:f3:8b:
fb:d2:f2:15:01:5d:e6:26:e6:30:23:b9:98:1e:6c:
7d:47:91:67:4e:d1:ad:80:8b:93:cd:20:64:01:4c:
1b:ca:85:5a:3c:cb:51:ee:28:07:2e:cb:c8:e9:67:
90:8a:19:ed:84:e3:a4:27:11:cf:0f:97:04:a0:81:
f1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:9E:FC:FD:6C:0E:96:CD:D3:FE:83:BF:70:6F:FD:21:E1:ED:FC:82
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VJ78_WwOls3T_oO_cG_9IeHt_II.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa80:140::/44
Signature Algorithm: sha256WithRSAEncryption
37:ef:16:81:bc:99:82:15:cb:d4:a8:2e:9d:e7:e7:13:18:e5:
63:9a:cf:dc:a6:36:13:c8:95:a4:d7:ae:d2:a3:e4:be:ab:79:
ad:74:27:b4:31:1b:bd:5c:76:99:51:51:59:c9:9d:a2:9d:cd:
77:16:b5:26:7a:b5:8f:7f:e9:db:fe:e9:d0:2a:14:08:f0:b8:
91:16:2f:7a:5e:65:26:b4:59:35:dc:11:7b:1a:d1:4d:84:30:
87:48:cd:7e:8d:b4:41:dc:d2:76:9e:87:db:ac:f8:c1:d8:34:
94:5a:8e:5a:1e:0d:c5:dc:a0:f3:f5:8a:59:36:ec:ac:4a:0b:
06:bb:f6:91:6c:c0:ae:92:9e:10:db:14:59:8b:7b:bd:b8:0e:
52:a3:27:b4:18:a7:59:b3:f8:07:0a:c8:8f:ec:cf:cf:b1:84:
78:a2:f7:ff:e2:bb:cb:b9:ca:b4:04:17:1f:46:68:e0:e7:49:
01:3b:a3:86:0e:cc:70:5a:d9:01:82:bf:9d:8f:e2:2a:a4:d9:
5b:39:6e:87:bb:f3:18:53:e4:b9:e2:b9:95:b5:60:17:f4:32:
be:f6:56:d4:6e:e2:1d:11:e3:29:3a:f0:91:53:c5:c5:4f:5c:
44:4d:36:e2:81:e8:d0:de:96:2d:45:70:6c:79:44:0a:e1:9e:
3f:ab:5a:f5
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaD4xCbQENuEK7m8Em0QjBT0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2NTliMGJhODQwN2JlMTFjZmM5MTFiZDMxZWQxNDBjZDFj
NjA0NmMwHhcNMjYxMDAxMTgzOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDllZmNmZDZjMGU5NmNkZDNmZTgzYmY3MDZmZmQyMWUxZWRmYzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQjMvpQ8QMrPeXLB3VXy3fAkF5AC
ERFoxEE0bHeHA8ZzpCUqDw7PGbsRz+T91/d76JUykE1wJ5J7nBWLJD7UVQfKdj3d
eHlo7O/Koz91qOmnCTY3ayS7w7M0+YaYwdOFDg19tGsU7ZQK5JD5sabgJSNj+O40
GtReQnBm4RhHYiNwheqeiyVZqcLyMQmlBWsV3oNixTIca65BZkWexXg5kU9asbjw
gdwLs/8UgwAzIzn9ukX4W+jeNunvmJA7eWV584v70vIVAV3mJuYwI7mYHmx9R5Fn
TtGtgIuTzSBkAUwbyoVaPMtR7igHLsvI6WeQihnthOOkJxHPD5cEoIHxDwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFSe/P1sDpbN0/6Dv3Bv/SHh7fyCMB8GA1UdIwQY
MBaAFFZZsLqEB74Rz8kRvTHtFAzRxgRsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEt
MjM5NGM2NjAwMDIyLzEvVko3OF9Xd09sczNUX29PX2NHXzlJZUh0X0lJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kZDhlMzEtMDBiNS00MjEyLTllMDEtMjM5NGM2NjAwMDIy
LzEvVmxtd3VvUUh2aEhQeVJHOU1lMFVETkhHQkd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhD6gAFA
MA0GCSqGSIb3DQEBCwUAA4IBAQA37xaBvJmCFcvUqC6d5+cTGOVjms/cpjYTyJWk
167So+S+q3mtdCe0MRu9XHaZUVFZyZ2inc13FrUmerWPf+nb/unQKhQI8LiRFi96
XmUmtFk13BF7GtFNhDCHSM1+jbRB3NJ2nofbrPjB2DSUWo5aHg3F3KDz9YpZNuys
SgsGu/aRbMCukp4Q2xRZi3u9uA5Soye0GKdZs/gHCsiP7M/PsYR4ovf/4rvLucq0
BBcfRmjg50kBO6OGDsxwWtkBgr+dj+IqpNlbOW6Hu/MYU+S54rmVtWAX9DK+9lbU
buIdEeMpOvCRU8XFT1xETTbigejQ3pYtRXBseUQK4Z4/q1r1
-----END CERTIFICATE-----
Generated at Sun Oct 4 02:58:30 2026 by rpki-client