Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/VNoPCQLF9KKgvVJKBDuFjNDcbsY.roa
File: VNoPCQLF9KKgvVJKBDuFjNDcbsY.roa (raw, json)
Hash identifier: v/Pduvr25xIqmRAU+4ckRJLcm2NdJLVc2/s79+xFGFU=
Subject key identifier: 54:DA:0F:09:02:C5:F4:A2:A0:BD:52:4A:04:3B:85:8C:D0:DC:6E:C6
Certificate issuer: /CN=bfe9f12c96ba20683aff5c958bfad8e4c577f7fe
Certificate serial: 019F8B35EA92CBD7F35143779724309AC8DF
Authority key identifier: BF:E9:F1:2C:96:BA:20:68:3A:FF:5C:95:8B:FA:D8:E4:C5:77:F7:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/VNoPCQLF9KKgvVJKBDuFjNDcbsY.roa
Signing time: Wed 22 Jul 2026 19:03:14 +0000
ROA not before: Wed 22 Jul 2026 19:03:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14789
IP address blocks: 2a09:bac0:68::/48 maxlen: 48
2a09:bac0:237::/48 maxlen: 48
2a09:bac0:431::/48 maxlen: 48
2a09:bac0:439::/48 maxlen: 48
2a09:bac0:450::/48 maxlen: 48
2a09:bac0:477::/48 maxlen: 48
2a09:bac0:483::/48 maxlen: 48
2a09:bac0:545::/48 maxlen: 48
2a09:bac0:566::/48 maxlen: 48
2a09:bac0:574::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8b:35:ea:92:cb:d7:f3:51:43:77:97:24:30:9a:c8:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe9f12c96ba20683aff5c958bfad8e4c577f7fe
Validity
Not Before: Jul 22 19:03:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54da0f0902c5f4a2a0bd524a043b858cd0dc6ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:27:90:9d:fd:a5:dc:0a:55:44:37:cf:00:f3:
21:d2:70:4f:59:e0:51:0f:c0:83:47:d8:a8:04:1f:
0e:00:54:37:19:8a:a4:87:f7:c7:07:5a:1d:b8:c7:
98:5a:00:f3:a3:17:be:09:79:01:58:28:7b:d8:b4:
e8:6a:71:81:63:80:1a:26:55:9f:4a:e5:10:f0:cd:
68:4b:f4:43:54:43:d2:42:f7:69:20:32:8a:84:b1:
3e:d5:90:f5:37:77:60:a8:f0:65:b3:06:ea:17:4b:
ce:a1:36:04:ee:62:67:11:90:a4:26:60:3e:53:69:
27:30:f1:d6:9e:80:48:10:22:b3:41:25:56:10:cd:
68:eb:92:77:59:f1:18:64:2b:83:fa:49:2f:24:b8:
7a:6a:66:a4:78:b8:09:eb:e2:7f:38:b0:23:1c:c8:
45:4c:69:e4:18:d7:7b:a0:66:fd:28:de:f2:3b:06:
69:57:b9:a7:f8:80:3c:be:e1:7c:78:a0:48:27:6a:
24:97:e2:dc:96:2f:28:d5:82:be:fd:4a:98:8c:e0:
45:08:cf:70:37:59:91:09:cd:80:bb:cf:0d:d9:c9:
81:6a:c6:77:c9:ed:e3:20:e3:93:19:37:80:d6:a0:
e5:0c:45:13:86:fb:d2:47:27:89:1f:8b:de:c0:2a:
9d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DA:0F:09:02:C5:F4:A2:A0:BD:52:4A:04:3B:85:8C:D0:DC:6E:C6
X509v3 Authority Key Identifier:
keyid:BF:E9:F1:2C:96:BA:20:68:3A:FF:5C:95:8B:FA:D8:E4:C5:77:F7:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/VNoPCQLF9KKgvVJKBDuFjNDcbsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:bac0:68::/48
2a09:bac0:237::/48
2a09:bac0:431::/48
2a09:bac0:439::/48
2a09:bac0:450::/48
2a09:bac0:477::/48
2a09:bac0:483::/48
2a09:bac0:545::/48
2a09:bac0:566::/48
2a09:bac0:574::/48
Signature Algorithm: sha256WithRSAEncryption
6b:b4:ff:19:44:36:dd:1d:70:73:15:3d:63:63:cc:bc:e3:ee:
18:0b:22:64:2b:44:07:f6:ed:76:80:85:90:da:44:3f:cb:b3:
ec:69:ce:f5:85:f8:fd:e5:2e:c9:24:04:2c:17:8e:88:0d:03:
f3:ef:45:07:ac:f6:82:5b:43:00:13:9a:ff:ac:c3:03:37:23:
37:9e:d3:7d:ec:07:65:13:06:9a:fe:2b:14:bd:2f:04:46:fd:
8d:76:94:e8:ff:7a:a0:78:87:37:05:95:7f:ef:6e:e1:28:e7:
e6:b0:70:9b:40:f8:4a:bf:cb:4f:a9:84:dd:6e:69:63:21:b9:
13:76:46:e0:0f:72:ba:61:98:e5:a6:0e:2e:3f:53:9b:fd:aa:
20:63:9e:13:65:3c:d2:d6:5e:7e:5a:c9:db:b6:e8:fd:01:d5:
df:2e:46:27:24:c9:f6:3f:c4:9c:32:8d:c9:dc:73:80:fd:c4:
2c:d5:c3:41:b3:15:03:b5:04:e0:fa:46:7d:f6:f3:95:16:62:
c0:a9:82:47:51:df:f2:ca:0d:af:cb:29:81:f8:f3:a6:e6:53:
42:93:62:37:14:fd:44:e4:3f:13:97:35:85:46:5c:b7:2d:1e:
df:10:68:29:e0:b9:ae:7f:39:de:7f:66:be:90:59:16:de:61:
0b:91:16:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:48:28 2026 by rpki-client