Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/VUmr-ixmAo4vU2lwbs3V83MbK0s.roa
File: VUmr-ixmAo4vU2lwbs3V83MbK0s.roa (raw, json)
Hash identifier: EDdQr5YZpEdSySHtjAQ0Lm5uiNj1dLYmWtqkEbArI9M=
Subject key identifier: 55:49:AB:FA:2C:66:02:8E:2F:53:69:70:6E:CD:D5:F3:73:1B:2B:4B
Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial: 019D8FF3598A0A7222B5F484D4B352B786AE
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/VUmr-ixmAo4vU2lwbs3V83MbK0s.roa
Signing time: Wed 15 Apr 2026 07:03:03 +0000
ROA not before: Wed 15 Apr 2026 07:03:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30886
IP address blocks: 2a0d:1c00::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8f:f3:59:8a:0a:72:22:b5:f4:84:d4:b3:52:b7:86:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Validity
Not Before: Apr 15 07:03:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5549abfa2c66028e2f5369706ecdd5f3731b2b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5e:a4:37:d9:e8:aa:f0:b2:9e:5a:4b:d6:2f:
8f:f6:e1:57:3e:d5:92:d6:54:2c:df:d1:ee:64:89:
c8:2e:78:e2:57:35:7b:83:43:63:cd:3b:d9:f8:1a:
2e:51:a0:48:24:e4:79:ba:16:98:0d:c9:99:5f:a8:
59:70:5b:3b:8e:e3:80:65:2a:c2:b6:ee:cc:35:a8:
db:2c:3d:b1:ec:37:e1:4c:08:31:61:14:f2:33:42:
9d:8d:c9:88:27:84:3e:6d:3a:ab:e9:cf:88:1d:6a:
1d:7e:83:bd:aa:22:fa:1a:7c:ba:c2:e4:b5:2e:4f:
c0:d7:6b:b5:26:bb:8f:02:67:bf:df:08:78:0f:83:
23:b4:fc:55:49:6a:97:ae:d9:a5:cc:6d:cc:68:7a:
fb:12:25:c4:45:62:1b:73:a8:33:b5:8f:b5:c0:19:
e2:65:68:a6:b7:b9:de:64:ed:b1:ad:1b:27:f6:2a:
b8:be:39:d1:86:c9:3a:b2:48:81:f7:90:c8:38:77:
a3:23:e9:0e:8f:45:55:60:90:6a:54:9c:43:9b:ac:
b8:e4:36:1a:bc:34:5f:dd:c4:ef:4c:10:6a:69:92:
ef:84:81:2e:52:c3:b8:f4:ee:5d:0f:54:a4:27:35:
cf:47:9f:a7:b4:35:22:66:16:f0:45:00:a4:51:b1:
d6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:49:AB:FA:2C:66:02:8E:2F:53:69:70:6E:CD:D5:F3:73:1B:2B:4B
X509v3 Authority Key Identifier:
keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/VUmr-ixmAo4vU2lwbs3V83MbK0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:1c00::/29
Signature Algorithm: sha256WithRSAEncryption
49:1e:1d:b3:5d:e5:5c:98:ba:0c:93:d9:a0:f2:8f:fa:47:bb:
14:b1:3d:38:5c:b3:d1:af:90:79:31:30:ca:f1:1c:22:47:42:
7e:44:10:8c:fa:31:a3:75:07:c9:7f:75:01:e8:06:55:96:87:
8a:22:b6:20:8d:fe:11:29:21:85:72:be:32:a5:65:de:68:36:
c8:dc:13:df:65:42:5a:e4:51:ee:5e:97:5b:0e:4e:6e:3f:30:
08:46:d2:90:d3:8a:3a:04:f3:41:ae:12:3b:71:42:82:e1:2a:
6d:3e:e6:6d:cf:d5:64:b1:fb:d4:71:79:9d:aa:6a:e4:dd:dd:
c5:a9:94:68:b7:5f:a1:04:69:fc:4f:d5:95:d9:3b:37:93:ef:
f9:48:be:b0:d8:65:6a:b3:96:14:fe:11:0d:c8:11:7c:f6:d3:
a3:38:4a:c4:38:fd:03:ec:14:c7:bc:56:23:9a:0a:61:a4:33:
ed:cc:2f:95:b9:ba:0b:9e:1a:5d:5f:c5:0b:66:13:0e:9a:23:
7d:82:22:c5:58:e4:66:6d:ac:7b:de:f5:08:6e:4d:eb:93:fd:
56:bc:e4:96:22:cf:b6:e0:45:bb:63:df:57:49:bb:7a:85:48:
8e:45:f5:51:37:68:c9:c6:20:f4:77:a8:cb:9c:1e:73:67:0e:
01:68:e3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:42:23 2026 by rpki-client