Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/VTGtmuhNASYnEFnpMiEb7VvHhPc.roa
File: VTGtmuhNASYnEFnpMiEb7VvHhPc.roa (raw, json)
Hash identifier: ExJb5pcXcsP/JEJuh593VeHb47tSbrfS2wQmWSMEvH4=
Subject key identifier: 55:31:AD:9A:E8:4D:01:26:27:10:59:E9:32:21:1B:ED:5B:C7:84:F7
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A0B384EBCADBC9B031F3740ADF8AAF9AA8
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/VTGtmuhNASYnEFnpMiEb7VvHhPc.roa
Signing time: Fri 18 Sep 2026 07:57:07 +0000
ROA not before: Fri 18 Sep 2026 07:57:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21859
IP address blocks: 2a0f:3940::/29 maxlen: 32
2a12:f440::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b3:84:eb:ca:db:c9:b0:31:f3:74:0a:df:8a:af:9a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 18 07:57:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5531ad9ae84d0126271059e932211bed5bc784f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:83:21:b3:d0:f6:0b:da:c5:2b:ab:5a:05:f0:
7c:69:97:fd:76:7f:93:f3:ea:97:28:a1:96:9a:aa:
d0:6b:fd:2b:e0:08:bb:b8:ad:c7:f5:0c:4b:9a:2c:
a0:b8:69:78:24:4c:ae:2c:60:ef:3c:30:22:bc:a4:
63:8e:af:d6:e9:00:ef:f5:3b:8d:7e:b7:17:6c:1e:
07:99:43:b4:c0:3f:49:fc:3e:50:20:7e:6d:7f:9a:
10:c1:6b:b1:05:f7:4a:da:85:1b:66:b3:ff:cc:1f:
90:a8:c0:fb:b0:4e:8f:90:07:86:a1:22:7f:c1:b3:
9d:0a:79:a2:ee:1a:79:10:26:42:f3:f2:78:a1:00:
44:be:55:c6:97:b6:d9:fd:3c:ba:85:9e:cb:80:1c:
00:33:ff:98:be:95:55:a5:ec:eb:e3:19:01:e2:63:
f0:54:b2:60:31:03:82:60:88:cb:01:e3:8a:59:fa:
69:25:06:86:d9:42:91:58:bb:d2:e8:e5:a8:42:3e:
9b:3e:87:46:7e:92:6c:59:f4:90:34:aa:7e:b2:5c:
f0:21:bf:e6:ec:cc:83:61:b6:4b:df:15:ee:5e:8e:
ba:a2:1f:ea:a5:8e:71:dd:a6:13:3c:c3:a1:77:99:
cd:3b:5c:fc:f4:cc:00:4c:8f:0a:0f:43:03:99:3b:
d2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:31:AD:9A:E8:4D:01:26:27:10:59:E9:32:21:1B:ED:5B:C7:84:F7
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/VTGtmuhNASYnEFnpMiEb7VvHhPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:3940::/29
2a12:f440::/29
Signature Algorithm: sha256WithRSAEncryption
af:ae:93:51:ae:8f:16:58:1a:20:71:e1:0c:e0:82:68:ec:6c:
ec:d7:1a:c9:c0:dd:0c:c3:8c:c4:d0:5f:47:91:6a:2b:9f:08:
ca:4b:61:11:76:1f:18:81:8c:78:ba:08:b2:7e:ff:5f:62:88:
c0:5b:20:05:44:97:70:73:b7:e8:bb:0a:19:33:cc:a5:73:e9:
7e:03:d7:22:7a:1a:91:ca:cb:59:b2:f3:59:b4:93:5a:b5:92:
0e:01:06:df:bc:f5:92:e9:a9:16:c6:f2:2f:b6:bc:e7:4e:66:
55:ae:1a:dc:a2:fc:dd:20:88:20:ff:0e:8c:34:53:5a:4b:f7:
c5:b4:31:a9:11:0a:50:8d:e9:32:36:c4:86:c7:4b:3d:52:b6:
77:e3:8a:43:3b:81:3d:82:f9:69:4a:cd:b9:d7:9b:66:85:30:
67:24:8d:71:36:af:7b:d8:37:46:c7:ef:24:4b:bc:45:ef:0f:
97:d1:43:1c:5f:ff:2c:6c:be:33:fd:50:17:b1:ff:99:0e:11:
cf:ec:13:e9:e4:ba:bf:ec:3c:b1:25:56:e2:e3:79:ff:1e:0f:
4b:fa:2e:b5:41:ab:36:71:ce:66:30:29:47:e2:97:fb:1b:3f:
e1:54:9f:f9:e2:64:1f:e5:e6:59:13:61:66:4e:5e:24:43:a0:
a8:8f:3d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:53:53 2026 by rpki-client