Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/vK-KaBqhr8V_hwKd5waBGW1KRWw.roa
File: vK-KaBqhr8V_hwKd5waBGW1KRWw.roa (raw, json)
Hash identifier: oQWH0/V6kKajlzjedYwpIuxuJVBUj9/lA3fmpgeVLpQ=
Subject key identifier: BC:AF:8A:68:1A:A1:AF:C5:7F:87:02:9D:E7:06:81:19:6D:4A:45:6C
Certificate issuer: /CN=255876412d20fbb6cab823481782ac47703b4404
Certificate serial: 01A09F1F0D818D2D0A2D3B85687490879F1F
Authority key identifier: 25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/vK-KaBqhr8V_hwKd5waBGW1KRWw.roa
Signing time: Mon 14 Sep 2026 08:53:27 +0000
ROA not before: Mon 14 Sep 2026 08:53:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215382
IP address blocks: 2a01:ffc6:c000::/34 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 23:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:1f:0d:81:8d:2d:0a:2d:3b:85:68:74:90:87:9f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=255876412d20fbb6cab823481782ac47703b4404
Validity
Not Before: Sep 14 08:53:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bcaf8a681aa1afc57f87029de70681196d4a456c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7d:9a:72:f5:5e:e6:0e:88:64:d9:92:b0:8c:
c0:10:b6:71:87:b3:c2:16:f0:83:09:a9:37:2a:79:
a3:cb:1c:d3:4a:5d:48:49:6a:f2:ed:57:88:88:07:
a1:53:55:f8:06:11:f6:c4:e1:b9:f3:c5:7f:a1:07:
3e:0c:ae:f4:0e:7b:c3:a4:65:2b:62:11:3d:b0:d4:
58:db:5a:71:ee:b2:63:3d:ff:56:17:4e:a4:bb:fa:
c8:c1:ec:2f:ea:98:b0:29:13:36:4c:b0:e5:b2:49:
96:34:52:b0:f1:3d:86:6e:c6:da:42:0a:c3:3d:45:
ff:09:42:f6:c5:63:00:03:29:cf:0b:a0:6f:be:ad:
1c:ab:10:38:dd:e0:b1:de:b9:60:99:c3:28:1f:68:
bb:4f:e6:3e:37:51:5a:1b:6d:37:fd:73:a3:06:e3:
c2:eb:76:65:ca:f5:6d:27:df:fa:6c:cd:7b:f0:b9:
cc:a3:35:1d:28:27:d2:eb:c9:db:b6:88:ad:a9:73:
fa:7f:bf:72:a9:93:3a:8b:f2:a9:6c:1c:1b:30:2e:
a9:43:3f:1f:ef:3f:f4:94:ce:d2:ba:b4:27:ea:df:
08:e4:78:b2:a7:2f:d4:5f:6d:16:4b:d4:1a:2a:f1:
6e:ad:55:d1:69:84:bf:76:76:98:d5:e3:a9:8a:c2:
3c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:AF:8A:68:1A:A1:AF:C5:7F:87:02:9D:E7:06:81:19:6D:4A:45:6C
X509v3 Authority Key Identifier:
keyid:25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/vK-KaBqhr8V_hwKd5waBGW1KRWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:ffc6:c000::/34
Signature Algorithm: sha256WithRSAEncryption
aa:2d:e5:37:be:18:35:7a:bd:53:8e:8c:90:8b:ff:b7:78:2d:
19:36:0f:17:04:28:e1:4a:80:c2:41:ba:47:0f:92:5c:d3:8d:
28:6a:07:c1:f4:cc:2c:59:4d:d1:8d:63:61:52:69:71:e5:0a:
12:84:fe:97:7c:35:ef:2f:ab:50:99:5e:9f:5e:47:78:11:5d:
49:59:5d:1e:d5:de:03:f7:87:6b:6b:26:14:43:e7:63:d4:63:
0e:27:14:8c:26:79:4d:37:f1:08:d0:03:cf:98:0c:24:de:d0:
34:d3:4c:e1:be:e1:92:ab:f0:73:a5:c9:a0:82:14:32:16:82:
63:00:c9:80:e0:ba:c0:76:16:58:cf:36:b8:4c:cd:37:91:ef:
83:25:4a:1d:7f:4b:05:d7:03:71:d2:19:f1:5d:85:fa:92:02:
f6:92:9c:a5:f5:37:60:db:76:7c:ca:e6:bd:da:07:ec:e7:7f:
bf:d3:38:0d:19:d7:e6:43:39:e9:a7:3b:f0:5f:a5:c7:66:0c:
c5:ec:2c:c0:a4:64:48:3d:53:ac:cf:61:6d:5b:d1:81:9d:f6:
74:be:5c:b1:08:c9:42:2f:cd:11:47:99:81:a7:66:ef:f2:75:
97:95:31:c8:69:26:89:46:88:13:a4:2c:f8:7a:2b:08:79:70:
81:ec:46:0b
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAaCfHw2BjS0KLTuFaHSQh58fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NTg3NjQxMmQyMGZiYjZjYWI4MjM0ODE3ODJhYzQ3NzAz
YjQ0MDQwHhcNMjYwOTE0MDg1MzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2FmOGE2ODFhYTFhZmM1N2Y4NzAyOWRlNzA2ODExOTZkNGE0NTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx32acvVe5g6IZNmSsIzAELZxh7PC
FvCDCak3KnmjyxzTSl1ISWry7VeIiAehU1X4BhH2xOG588V/oQc+DK70DnvDpGUr
YhE9sNRY21px7rJjPf9WF06ku/rIwewv6piwKRM2TLDlskmWNFKw8T2GbsbaQgrD
PUX/CUL2xWMAAynPC6Bvvq0cqxA43eCx3rlgmcMoH2i7T+Y+N1FaG203/XOjBuPC
63ZlyvVtJ9/6bM178LnMozUdKCfS68nbtoitqXP6f79yqZM6i/KpbBwbMC6pQz8f
7z/0lM7SurQn6t8I5Hiypy/UX20WS9QaKvFurVXRaYS/dnaY1eOpisI8EwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFLyvimgaoa/Ff4cCnecGgRltSkVsMB8GA1UdIwQY
MBaAFCVYdkEtIPu2yrgjSBeCrEdwO0QEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEt
ODc2YzdmY2E0YjM0LzEvdkstS2FCcWhyOFZfaHdLZDV3YUJHVzFLUld3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEtODc2YzdmY2E0YjM0
LzEvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGKgH/xsAw
DQYJKoZIhvcNAQELBQADggEBAKot5Te+GDV6vVOOjJCL/7d4LRk2DxcEKOFKgMJB
ukcPklzTjShqB8H0zCxZTdGNY2FSaXHlChKE/pd8Ne8vq1CZXp9eR3gRXUlZXR7V
3gP3h2trJhRD52PUYw4nFIwmeU038QjQA8+YDCTe0DTTTOG+4ZKr8HOlyaCCFDIW
gmMAyYDgusB2FljPNrhMzTeR74MlSh1/SwXXA3HSGfFdhfqSAvaSnKX1N2DbdnzK
5r3aB+znf7/TOA0Z1+ZDOemnO/BfpcdmDMXsLMCkZEg9U6zPYW1b0YGd9nS+XLEI
yUIvzRFHmYGnZu/ydZeVMchpJolGiBOkLPh6Kwh5cIHsRgs=
-----END CERTIFICATE-----
Generated at Sun Oct 11 10:40:18 2026 by rpki-client