Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/VPuF-R7IXqDOSMscdlS2exzjJWw.roa
File: VPuF-R7IXqDOSMscdlS2exzjJWw.roa (raw, json)
Hash identifier: JUT0B10VpEwMEaMw9rWg1rfFqBapj3b2tZoxUHuNQMo=
Subject key identifier: 54:FB:85:F9:1E:C8:5E:A0:CE:48:CB:1C:76:54:B6:7B:1C:E3:25:6C
Certificate issuer: /CN=ad08b46df65be27362a246f486c2adc68be2d85f
Certificate serial: 01A125AA3A1318C2F22D7E940BD6D975F921
Authority key identifier: AD:08:B4:6D:F6:5B:E2:73:62:A2:46:F4:86:C2:AD:C6:8B:E2:D8:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQi0bfZb4nNiokb0hsKtxovi2F8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/VPuF-R7IXqDOSMscdlS2exzjJWw.roa
Signing time: Sat 10 Oct 2026 11:54:35 +0000
ROA not before: Sat 10 Oct 2026 11:54:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 2a05:e207:fff0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/rQi0bfZb4nNiokb0hsKtxovi2F8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/rQi0bfZb4nNiokb0hsKtxovi2F8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rQi0bfZb4nNiokb0hsKtxovi2F8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 23:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:aa:3a:13:18:c2:f2:2d:7e:94:0b:d6:d9:75:f9:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad08b46df65be27362a246f486c2adc68be2d85f
Validity
Not Before: Oct 10 11:54:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54fb85f91ec85ea0ce48cb1c7654b67b1ce3256c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:aa:b8:3d:71:b5:67:32:d5:ff:38:fe:f3:0e:
cd:58:df:32:56:48:b4:74:06:65:80:a8:dd:08:2e:
8d:88:52:a4:b9:a1:14:84:b2:ea:65:52:e6:55:5e:
92:7e:4c:f4:5f:92:9b:33:84:bb:c6:cd:87:d1:07:
d6:d7:4e:25:98:6c:2e:a3:09:72:cf:eb:1d:a1:42:
9f:50:83:c9:c1:b1:6a:25:61:65:95:9a:1a:92:67:
71:3b:d9:1a:aa:81:8a:fd:25:1c:75:4f:68:52:51:
69:18:27:a5:cd:da:fa:7e:a0:6e:64:d5:7c:27:4f:
71:8b:c9:0e:72:38:49:6a:f5:f9:4c:14:ad:5c:4d:
a6:e2:5e:cc:9f:7e:7c:12:90:15:c2:f7:7b:37:65:
50:54:e7:8a:cc:a4:5e:c4:5c:af:54:3c:9a:e8:47:
e1:7b:b8:e8:ce:17:d4:83:50:16:22:28:5f:12:66:
d1:74:db:16:f1:01:d6:be:69:69:06:9a:30:99:e5:
2a:23:f0:03:f0:b3:1b:d6:50:87:98:47:f5:4e:6e:
d1:ae:a4:89:1f:fb:b7:d1:58:ed:3b:fe:a0:8f:12:
d2:73:e6:80:e4:74:24:3f:68:64:06:4d:c2:4f:44:
97:5b:38:68:a4:81:6f:42:b3:93:90:6e:39:5d:f1:
3a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FB:85:F9:1E:C8:5E:A0:CE:48:CB:1C:76:54:B6:7B:1C:E3:25:6C
X509v3 Authority Key Identifier:
keyid:AD:08:B4:6D:F6:5B:E2:73:62:A2:46:F4:86:C2:AD:C6:8B:E2:D8:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQi0bfZb4nNiokb0hsKtxovi2F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/VPuF-R7IXqDOSMscdlS2exzjJWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/rQi0bfZb4nNiokb0hsKtxovi2F8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:e207:fff0::/48
Signature Algorithm: sha256WithRSAEncryption
2a:bd:a6:b5:e9:2f:f9:75:bd:44:67:68:bf:8b:4c:1a:61:40:
73:96:43:c7:0b:50:be:34:60:a0:f1:fe:a3:95:b0:4b:ab:06:
f7:92:f5:78:f6:c7:2c:1d:c4:75:9f:15:0a:8d:8f:bd:cd:14:
f6:99:0b:de:06:15:4a:47:a6:20:5c:5e:13:0c:89:9d:8a:10:
ad:97:b4:c9:c1:3a:09:6e:5f:4c:91:2e:20:66:10:63:5c:35:
0b:19:51:dd:4f:a2:f3:7a:fe:57:70:e0:39:9b:3b:d1:29:51:
f0:1a:35:ca:ba:ac:06:ae:3f:21:e4:6a:44:3e:b4:aa:f3:a4:
56:f2:fe:ea:e3:6f:a1:40:70:37:36:90:b0:c5:c3:18:4b:bd:
32:69:22:e7:2c:bf:12:ee:1e:60:e7:8e:90:04:02:c1:89:b3:
c0:dc:45:c2:dc:b1:7a:a4:95:5d:ff:f5:2d:41:6b:86:63:e0:
aa:d4:2b:f0:40:2b:81:f1:dd:51:33:92:bb:98:d7:8e:a2:d0:
cf:41:50:1c:6e:28:9f:c2:27:ed:07:a0:1e:31:e9:f5:12:47:
a8:ef:a2:a0:1a:1a:a5:b1:ba:a7:3f:34:cb:42:66:bc:1b:36:
4d:f8:a5:59:29:28:f1:e9:d3:6a:38:b8:05:e9:44:a9:c8:8b:
2f:e3:ad:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 11:13:13 2026 by rpki-client