Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/VAcK6NMH8xpL2oToeLqPNjo0NLo.roa
File: VAcK6NMH8xpL2oToeLqPNjo0NLo.roa (raw, json)
Hash identifier: zpMhbSc5hEPY0bWxxVazj4TyRRANMBWAian/WhduIMo=
Subject key identifier: 54:07:0A:E8:D3:07:F3:1A:4B:DA:84:E8:78:BA:8F:36:3A:34:34:BA
Certificate issuer: /CN=2174209fc2192e739166f7ae4dffc3d4c9823549
Certificate serial: 019F23689F18264A7622F74DBBAB153D6E1B
Authority key identifier: 21:74:20:9F:C2:19:2E:73:91:66:F7:AE:4D:FF:C3:D4:C9:82:35:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IXQgn8IZLnORZveuTf_D1MmCNUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/VAcK6NMH8xpL2oToeLqPNjo0NLo.roa
Signing time: Thu 02 Jul 2026 15:18:06 +0000
ROA not before: Thu 02 Jul 2026 15:18:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29322
IP address blocks: 2a0d:2280::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/IXQgn8IZLnORZveuTf_D1MmCNUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/IXQgn8IZLnORZveuTf_D1MmCNUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IXQgn8IZLnORZveuTf_D1MmCNUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:9f:18:26:4a:76:22:f7:4d:bb:ab:15:3d:6e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2174209fc2192e739166f7ae4dffc3d4c9823549
Validity
Not Before: Jul 2 15:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54070ae8d307f31a4bda84e878ba8f363a3434ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:54:9a:4a:8d:8c:ac:3e:f1:43:70:9f:8b:f4:
02:3a:79:b4:5e:d7:d7:4b:72:c8:b8:1a:44:fa:c0:
2f:17:54:82:d2:4a:79:0a:61:54:83:a6:54:af:7e:
01:66:a2:4a:1a:f5:31:3d:d1:c1:d2:9b:41:8f:cc:
73:73:25:ce:9f:e4:87:98:ca:c6:c3:8c:99:b8:36:
b0:3b:5b:45:22:77:a0:4e:f9:57:7e:1b:b1:7a:2e:
bb:37:18:51:b5:71:00:f9:7d:77:29:62:c0:95:f1:
e2:6b:02:70:9a:f3:ad:02:ed:87:9e:65:ef:22:03:
66:9f:e1:ff:9e:5f:93:0d:3b:8f:83:b2:72:a0:d4:
d1:61:ef:2e:42:d0:f6:85:fc:33:2b:77:0a:91:7d:
0c:ed:3a:d2:9c:38:c1:3c:1b:c3:ae:51:b3:25:7e:
0c:a9:01:15:e1:34:9b:e6:23:9b:d1:02:ec:3e:9a:
5a:cd:5e:5e:fb:06:a5:eb:5a:d3:21:37:57:d9:f0:
78:49:15:1c:a8:d8:f0:e0:91:58:63:59:3b:9e:78:
2a:d9:13:41:fe:9d:0e:23:74:9d:e0:38:bd:95:c9:
a8:fb:f8:3a:aa:57:99:2c:33:1f:89:f3:df:51:f9:
a7:eb:06:88:ac:eb:01:bc:e4:7b:27:53:9f:27:95:
6e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:07:0A:E8:D3:07:F3:1A:4B:DA:84:E8:78:BA:8F:36:3A:34:34:BA
X509v3 Authority Key Identifier:
keyid:21:74:20:9F:C2:19:2E:73:91:66:F7:AE:4D:FF:C3:D4:C9:82:35:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXQgn8IZLnORZveuTf_D1MmCNUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/VAcK6NMH8xpL2oToeLqPNjo0NLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/98aa0b-d8b3-4109-8f8b-20e59cf92686/1/IXQgn8IZLnORZveuTf_D1MmCNUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2280::/29
Signature Algorithm: sha256WithRSAEncryption
7c:34:54:2e:95:36:8e:af:c0:91:d4:a6:0c:79:3d:5a:44:dd:
98:22:09:41:51:73:77:72:66:74:9c:34:e6:98:85:b5:f9:98:
93:90:1b:fa:bf:91:ff:99:b9:94:15:37:53:88:b5:f6:74:8b:
db:1b:3a:e0:3d:3b:30:52:01:29:3e:f7:bc:e2:91:6b:ef:1c:
73:d0:9a:67:b0:8b:23:7d:1b:4a:f4:51:08:a7:93:78:ab:b8:
2c:88:ee:20:bd:cc:0c:e1:ea:b7:ec:bd:dd:46:00:f9:df:af:
a9:b8:f9:51:68:69:79:04:0c:9e:17:7d:8c:ff:a5:f6:d7:f3:
ff:12:dc:b1:49:5c:55:4c:83:00:a6:45:75:bf:53:8f:89:6c:
46:4b:44:20:16:0f:29:7b:c9:76:b9:02:8a:42:97:df:f3:76:
e2:10:cd:07:39:90:e7:2e:f1:f3:1f:7e:4f:bb:99:26:3d:eb:
81:6f:12:a3:dd:05:ac:f1:19:de:58:af:3e:bb:f5:bc:49:fa:
c5:1b:cd:87:44:9a:28:93:a0:28:0c:b6:84:aa:20:e3:f7:28:
02:f0:ed:d3:2d:cb:93:a9:26:90:dc:14:d7:5c:a7:09:34:91:
04:ce:7e:2e:59:2f:e3:6b:96:d2:6a:ac:ff:88:b6:23:8f:16:
e3:03:0a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:12:21 2026 by rpki-client