Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/600ccc-056b-40a9-bd3a-394a74edaadf/1/vXh_l3bn8Vdh5x5X5V-g-e0fQUc.roa
File: vXh_l3bn8Vdh5x5X5V-g-e0fQUc.roa (raw, json)
Hash identifier: OhQ+LanTw9FEC9YF21udbJnIrFGmunU2GtW1mcjImvc=
Subject key identifier: BD:78:7F:97:76:E7:F1:57:61:E7:1E:57:E5:5F:A0:F9:ED:1F:41:47
Certificate issuer: /CN=fb161c88a690b273716d217529c260646a3fdc79
Certificate serial: 01A0676C29AAC207473E624B0CB4BF0496FA
Authority key identifier: FB:16:1C:88:A6:90:B2:73:71:6D:21:75:29:C2:60:64:6A:3F:DC:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xYciKaQsnNxbSF1KcJgZGo_3Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/600ccc-056b-40a9-bd3a-394a74edaadf/1/vXh_l3bn8Vdh5x5X5V-g-e0fQUc.roa
Signing time: Thu 03 Sep 2026 13:18:56 +0000
ROA not before: Thu 03 Sep 2026 13:18:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198686
IP address blocks: 2a0b:d80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/600ccc-056b-40a9-bd3a-394a74edaadf/1/1-xYciKaQsnNxbSF1KcJgZGo_3Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/600ccc-056b-40a9-bd3a-394a74edaadf/1/1-xYciKaQsnNxbSF1KcJgZGo_3Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xYciKaQsnNxbSF1KcJgZGo_3Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:6c:29:aa:c2:07:47:3e:62:4b:0c:b4:bf:04:96:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb161c88a690b273716d217529c260646a3fdc79
Validity
Not Before: Sep 3 13:18:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd787f9776e7f15761e71e57e55fa0f9ed1f4147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:30:e2:22:84:dd:80:b5:18:21:df:3f:90:13:
67:df:2f:42:50:05:0f:d2:98:64:1d:da:bd:40:e1:
e8:fa:71:39:79:34:88:49:d7:09:71:25:2a:69:14:
79:d7:97:05:be:d6:d6:09:9f:45:73:f3:ce:ec:37:
36:44:99:d1:60:66:77:f1:0b:89:ca:34:21:06:e2:
60:7a:2d:08:6c:ef:f0:cd:74:39:82:01:b6:63:56:
14:69:dd:c3:5f:21:2f:45:ca:31:6d:af:17:bb:d5:
24:37:c0:92:8f:91:d8:ab:25:df:77:b4:79:32:55:
82:40:47:6e:aa:4b:7b:32:7a:32:ab:56:e2:17:45:
b6:94:bc:f0:08:98:a5:5a:f0:a6:c0:6a:91:9b:7f:
37:e6:81:47:5c:fe:55:88:e9:fa:47:38:7a:01:67:
7b:b5:e7:10:21:e3:43:ff:9e:d5:6b:09:40:74:f9:
08:12:e9:03:95:c5:f8:e1:e6:de:64:96:af:90:cd:
34:e6:0f:fc:f6:83:e9:50:b9:73:85:3f:03:8c:44:
5a:08:a2:11:49:ab:6c:d4:5a:87:66:8a:9a:c2:8b:
46:7d:6d:f7:62:64:43:a2:1b:a3:ca:e9:8e:81:c2:
03:e8:5e:18:f9:2b:7a:f5:56:06:5a:18:c4:4e:4e:
f3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:78:7F:97:76:E7:F1:57:61:E7:1E:57:E5:5F:A0:F9:ED:1F:41:47
X509v3 Authority Key Identifier:
keyid:FB:16:1C:88:A6:90:B2:73:71:6D:21:75:29:C2:60:64:6A:3F:DC:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xYciKaQsnNxbSF1KcJgZGo_3Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/600ccc-056b-40a9-bd3a-394a74edaadf/1/vXh_l3bn8Vdh5x5X5V-g-e0fQUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/600ccc-056b-40a9-bd3a-394a74edaadf/1/1-xYciKaQsnNxbSF1KcJgZGo_3Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:d80::/29
Signature Algorithm: sha256WithRSAEncryption
80:94:68:0b:53:49:b7:01:91:7a:64:a6:35:49:80:00:98:0b:
8c:7f:17:bb:cf:36:5e:e1:25:67:3a:45:8c:9a:b4:a9:01:b1:
21:1c:00:3a:1b:0b:64:11:f6:88:37:78:b5:a8:18:ae:55:f4:
b6:53:7c:b0:4b:97:bb:34:25:3d:ba:ef:e1:a5:db:23:e3:be:
ce:33:ef:37:cd:5b:1b:54:16:fb:d6:ee:9f:df:b0:6c:2c:d0:
b7:66:0d:8b:ea:0f:73:bf:c9:cf:92:4f:01:ca:19:ad:e1:b8:
9d:d2:80:d0:6f:31:fd:60:e1:8e:06:d0:93:a3:2a:7d:36:67:
db:5c:db:11:87:d0:8b:70:fe:9c:3f:85:b2:9e:d2:65:69:81:
ed:1e:c7:7d:7f:d5:f2:c7:44:83:f5:9c:58:89:f0:82:35:40:
12:71:0b:db:85:23:4a:1a:68:95:ea:00:c8:08:f4:56:7a:40:
f5:13:77:f4:39:f9:ee:79:0c:17:92:d9:dd:e5:7c:35:40:2f:
19:b6:94:31:7e:88:9b:bc:09:ab:32:0f:55:ab:83:fc:c1:74:
5f:21:cf:ba:39:38:38:5e:8d:ff:dd:4e:13:6c:cb:3c:c0:de:
ea:b3:30:f7:04:9d:2f:7f:7b:9e:01:5f:97:2e:36:d8:b7:f2:
97:13:0f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:43:29 2026 by rpki-client