Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/VL-7Cb2in9qzsiUViHgk7r7ij40.roa
File: VL-7Cb2in9qzsiUViHgk7r7ij40.roa (raw, json)
Hash identifier: 3cob3r3tmjVnAtTGWofDFz8ED89qbsoQEBBl6TwtlRo=
Subject key identifier: 54:BF:BB:09:BD:A2:9F:DA:B3:B2:25:15:88:78:24:EE:BE:E2:8F:8D
Certificate issuer: /CN=367160181739568e578e1b5f57976a60398062e6
Certificate serial: 019EC67F4AED86D2F64AD70E412663D009CA
Authority key identifier: 36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/VL-7Cb2in9qzsiUViHgk7r7ij40.roa
Signing time: Sun 14 Jun 2026 14:18:11 +0000
ROA not before: Sun 14 Jun 2026 14:18:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215365
IP address blocks: 2a09:3f00:3000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c6:7f:4a:ed:86:d2:f6:4a:d7:0e:41:26:63:d0:09:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367160181739568e578e1b5f57976a60398062e6
Validity
Not Before: Jun 14 14:18:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54bfbb09bda29fdab3b22515887824eebee28f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ba:12:ca:c4:bf:3e:1d:64:1d:8e:61:a7:0b:
a0:94:83:92:51:3f:39:29:dd:3f:d2:70:55:57:4d:
54:8c:c4:68:16:bc:4e:aa:64:6b:06:d2:b9:a6:7a:
a7:6c:08:f8:e1:33:63:a6:24:7b:57:92:52:09:28:
cd:a0:c3:c4:90:c3:72:f3:b6:39:b7:7c:4f:61:9a:
21:5a:85:1d:d8:a1:af:87:1f:e3:ef:fa:8f:17:f5:
a9:7c:14:52:5c:16:b2:a8:59:0b:7f:36:d0:7b:f9:
fe:24:a3:e6:c4:8f:29:8f:ed:95:c0:85:5b:60:35:
8b:f8:9d:00:71:8f:69:d3:f7:67:d2:7e:3c:43:76:
7c:81:0a:36:17:c8:a3:f4:ac:eb:c1:e7:62:a7:f6:
e0:ae:ff:cf:d0:be:95:61:6a:9b:75:52:c1:38:6c:
a7:fb:a3:42:a5:77:01:b1:6f:30:e9:55:c3:da:0e:
57:00:2f:14:14:30:2e:5b:d5:fe:ed:97:42:8d:d4:
a1:b3:39:01:db:b9:9b:fa:ab:c4:d7:2d:eb:5c:c7:
41:77:bd:dd:5e:c2:05:15:02:9c:b4:d0:a5:c3:ae:
9b:af:a7:82:3a:ea:2a:1a:86:7e:87:73:c4:e4:c1:
b1:29:f1:da:b8:2d:ff:01:43:a6:d6:7b:62:44:7d:
25:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:BF:BB:09:BD:A2:9F:DA:B3:B2:25:15:88:78:24:EE:BE:E2:8F:8D
X509v3 Authority Key Identifier:
keyid:36:71:60:18:17:39:56:8E:57:8E:1B:5F:57:97:6A:60:39:80:62:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/VL-7Cb2in9qzsiUViHgk7r7ij40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/045f70-9ea5-42a3-8786-ee8cfdd2ed94/1/NnFgGBc5Vo5XjhtfV5dqYDmAYuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3f00:3000::/40
Signature Algorithm: sha256WithRSAEncryption
0b:d3:4c:a1:8c:af:9b:75:f3:3b:d6:33:40:af:e8:9b:e3:7f:
09:94:09:64:1f:12:19:4d:66:de:0c:a3:48:c6:65:1c:55:18:
4b:cd:99:a5:2c:81:71:eb:a3:b7:eb:63:e6:cf:b8:ad:4d:15:
d3:a4:7d:1b:3a:1a:12:9f:c2:7f:52:be:2e:84:fe:c1:a0:f6:
30:02:29:a5:7f:31:51:50:2b:dc:40:22:2b:f2:14:fe:0f:d4:
8e:71:ba:ac:03:35:d5:59:4a:28:8a:43:18:f8:36:d5:ea:d8:
92:1a:b0:4e:22:78:5c:bb:74:be:1f:5e:d1:a5:1d:5d:b6:bd:
f9:7e:15:9f:e6:2c:76:f9:f4:47:5f:4e:30:60:e7:f5:f1:8c:
a8:5f:ba:79:c5:c9:0d:ed:05:00:f0:67:ff:9c:9d:0f:bf:fe:
fe:d5:18:8c:35:8f:f6:b5:a7:69:20:fb:16:3f:f6:76:22:7c:
b4:54:8d:d6:11:96:34:4f:b4:07:93:5e:90:4a:d5:9e:64:02:
aa:01:18:6d:74:73:6d:de:9c:68:40:f9:29:3a:76:59:ba:ba:
30:45:15:69:d1:53:6a:3f:43:6b:57:d6:92:77:e2:59:02:c6:
5a:7a:25:34:fd:77:09:a2:f7:ed:2c:31:66:8c:47:5c:10:d5:
18:95:5e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:56:16 2026 by rpki-client