Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/VbMi_wHP2Osb2Lj2_Em7nJaGNqg.roa
File: VbMi_wHP2Osb2Lj2_Em7nJaGNqg.roa (raw, json)
Hash identifier: DXcUvI/zDgzBNbnxDQ9BXaRP7H2Z8Bv9bfXDaGGxiyQ=
Subject key identifier: 55:B3:22:FF:01:CF:D8:EB:1B:D8:B8:F6:FC:49:BB:9C:96:86:36:A8
Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Certificate serial: 01A08ABBDC74814DAF5F1B1413123F6D0CAA
Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/VbMi_wHP2Osb2Lj2_Em7nJaGNqg.roa
Signing time: Thu 10 Sep 2026 09:52:42 +0000
ROA not before: Thu 10 Sep 2026 09:52:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50113
IP address blocks: 2a07:9b83::/32 maxlen: 32
2a0a:981::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:bb:dc:74:81:4d:af:5f:1b:14:13:12:3f:6d:0c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Validity
Not Before: Sep 10 09:52:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55b322ff01cfd8eb1bd8b8f6fc49bb9c968636a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:62:07:46:b1:06:0b:0d:d8:f0:2c:f2:97:c0:
fd:55:7d:9c:f4:77:84:66:04:bd:41:a9:aa:40:3b:
be:56:ca:c7:56:6b:b0:10:87:b1:b3:36:30:01:44:
b9:dd:8e:dc:7c:93:53:4f:23:5d:78:47:d1:85:41:
3b:03:b6:fa:2e:25:57:dc:13:12:cd:75:1f:91:5f:
c6:02:2d:a6:10:2b:b3:d3:4a:05:42:7e:fe:36:96:
c4:27:6f:ee:22:88:c5:48:36:c4:2c:8e:2c:95:7b:
91:72:98:f8:a7:e8:74:5a:82:6a:b7:c3:04:3d:b7:
09:c8:03:f2:07:63:cc:79:e4:74:24:38:fb:83:d6:
10:a9:a7:a8:f9:b6:57:fb:91:5c:e3:ec:e9:1d:5a:
a6:71:f6:64:80:54:9f:42:f1:4c:34:8f:4a:04:f9:
e0:7b:6a:63:f0:49:2c:1f:9f:42:b8:67:2c:22:71:
ba:2f:00:02:4e:0e:e2:7b:34:c9:42:86:d6:e5:8e:
1a:6c:c8:6d:0c:69:03:71:18:0d:7a:9d:9c:77:6e:
26:e5:25:da:52:53:c2:44:75:22:1e:76:6c:19:99:
58:6d:61:a0:8b:60:be:42:77:ae:1f:d1:b4:e7:b4:
6a:08:88:c4:87:67:98:4b:73:7f:4b:d5:1e:67:2b:
f9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B3:22:FF:01:CF:D8:EB:1B:D8:B8:F6:FC:49:BB:9C:96:86:36:A8
X509v3 Authority Key Identifier:
keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/VbMi_wHP2Osb2Lj2_Em7nJaGNqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:9b83::/32
2a0a:981::/32
Signature Algorithm: sha256WithRSAEncryption
2e:06:50:10:f4:32:2e:eb:10:75:d7:06:85:75:95:44:9f:c1:
c8:ca:26:1b:c0:d8:8a:9a:89:ad:ac:0d:1d:d2:e4:ce:b8:02:
17:3b:26:bf:9a:50:80:85:bb:9f:dc:a1:67:e1:e2:80:e6:1e:
c3:e7:6a:f6:93:0e:ab:a2:92:7b:cc:d7:35:42:2e:9c:d4:70:
c3:2b:e5:7f:19:e4:0b:bf:53:c2:0a:18:c8:1b:35:6f:35:34:
c0:b7:b3:d4:89:d1:54:be:df:9b:b5:34:32:b1:34:2f:83:51:
60:85:70:a6:09:87:a2:55:58:d7:07:1e:06:d8:96:6b:ca:d9:
2d:b3:64:00:c7:ca:dc:08:36:6b:a8:9a:3d:0d:a8:a1:38:2b:
a8:1a:c9:6e:e2:f8:86:d4:3b:1a:f1:18:1e:b8:e7:26:a9:15:
e1:77:37:c1:e1:c9:88:f4:20:f1:c8:d2:79:10:24:5a:6e:b7:
bd:b2:fd:d5:ca:dd:10:49:0e:54:cf:06:c2:1e:ae:cd:cf:a0:
6e:94:aa:6e:58:ce:11:d0:65:c8:4c:99:41:b4:3e:72:90:3c:
bc:08:df:df:d6:f2:b2:e6:4c:4c:2e:19:57:c0:bb:80:a0:19:
83:0e:e8:27:27:e2:ec:86:9c:f2:57:fa:dc:40:dd:89:75:2c:
e5:a5:1b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:54:52 2026 by rpki-client