Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/VJOOA10dgeeSR44Cf5lw8Y5I6iI.roa
File: VJOOA10dgeeSR44Cf5lw8Y5I6iI.roa (raw, json)
Hash identifier: Bo13ciqiNZElqM8drEhgoIiWJhC81G/OS3YnRUBRjFI=
Subject key identifier: 54:93:8E:03:5D:1D:81:E7:92:47:8E:02:7F:99:70:F1:8E:48:EA:22
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 01A194341EE4B8F3DB4F53B6049E62B1820E
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/VJOOA10dgeeSR44Cf5lw8Y5I6iI.roa
Signing time: Sat 31 Oct 2026 23:03:26 +0000
ROA not before: Sat 31 Oct 2026 23:03:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a0c:9a40:8470::/48 maxlen: 48
2a0c:9a40:8a80::/44 maxlen: 48
2a0c:9a40:9600::/40 maxlen: 48
2a0c:9a40:9800::/40 maxlen: 48
2a0c:9a44:cf::/48 maxlen: 48
2a0e:7d41:8888::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:94:34:1e:e4:b8:f3:db:4f:53:b6:04:9e:62:b1:82:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Oct 31 23:03:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54938e035d1d81e792478e027f9970f18e48ea22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8a:e3:cb:20:2a:f7:9f:17:07:33:98:0d:cf:
19:26:c2:d4:8e:21:c5:75:d5:d1:da:f4:3f:87:ab:
20:78:c4:60:7f:69:a5:32:76:f8:9f:74:dc:9a:5b:
8f:85:46:1f:53:73:e6:43:c6:6c:d0:fa:a3:a2:07:
3d:27:4b:8b:25:0a:1f:e8:0e:4d:17:d0:28:cc:8d:
c7:fd:9c:f0:ed:fd:1e:69:ce:b4:3e:16:11:c2:73:
39:15:a7:cc:85:29:6e:b2:bc:ab:a7:dc:36:15:35:
47:e9:0c:fb:77:8b:57:66:20:bb:42:4c:54:f9:2f:
ec:aa:2f:0c:96:b6:37:dd:06:fa:cf:ba:4b:fc:da:
db:e5:a7:ce:62:e6:5d:fc:33:d1:6e:f5:97:5a:99:
58:bb:56:ef:ee:3d:1d:40:48:46:0d:0d:9f:6f:c6:
b1:12:0f:11:32:c1:42:b5:8b:fc:86:e9:af:fa:98:
00:66:ce:fc:0a:e0:9c:be:d7:43:45:38:f6:72:58:
c6:e3:da:52:c8:f2:d5:37:4d:30:02:e4:04:b9:dc:
e4:71:73:cf:3b:9a:82:5e:b4:2e:27:58:90:3a:85:
19:69:76:77:4e:a8:0d:21:42:8b:d8:3b:26:c2:ce:
58:71:b3:bc:6b:01:e3:0f:96:21:7e:a4:4e:6c:c0:
ff:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:93:8E:03:5D:1D:81:E7:92:47:8E:02:7F:99:70:F1:8E:48:EA:22
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/VJOOA10dgeeSR44Cf5lw8Y5I6iI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8470::/48
2a0c:9a40:8a80::/44
2a0c:9a40:9600::/40
2a0c:9a40:9800::/40
2a0c:9a44:cf::/48
2a0e:7d41:8888::/48
Signature Algorithm: sha256WithRSAEncryption
82:b7:1b:8d:41:41:c9:24:bc:45:ed:f8:05:8a:ef:45:9c:c1:
a9:76:ba:89:a2:3c:c0:cd:84:bd:2b:2b:c5:56:54:e7:3f:59:
38:bc:2d:87:86:be:23:63:18:94:d6:d1:0c:39:8a:4c:77:4a:
dc:05:bc:ee:05:63:dc:02:08:a9:dc:a9:79:2f:ed:62:2c:41:
55:58:ae:00:b2:2e:6d:79:04:f6:c3:ff:19:9b:e6:55:fc:cd:
b6:10:20:c4:77:96:ae:27:0f:d3:95:b2:a4:8a:bb:cc:20:42:
64:09:44:7f:47:83:f9:4e:dc:6a:52:77:b6:6c:7b:70:5d:ab:
33:30:a0:a4:e6:9a:e6:d2:5c:8a:f4:3e:41:24:9c:0f:90:ae:
61:e3:18:91:e2:8c:b3:b9:e4:2a:23:84:aa:0b:73:e1:a6:18:
7a:6f:22:6f:ab:9e:56:49:18:a5:8e:84:0b:87:92:73:67:bf:
26:bc:c8:07:72:8a:cf:a5:08:3b:a6:30:2f:12:a3:26:87:90:
c2:c3:a5:cd:a7:8b:10:3d:69:84:50:35:17:6f:88:c7:c5:a7:
55:7b:e6:43:00:bc:63:92:50:ec:91:fa:15:be:1b:5c:68:e1:
7a:06:e6:ff:36:13:34:63:80:61:76:06:76:c1:f2:69:3e:93:
f0:8e:5e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:28:39 2026 by rpki-client