Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vmz1qvrDT4gvqSXZhacYRIHq1vk.roa
File: vmz1qvrDT4gvqSXZhacYRIHq1vk.roa (raw, json)
Hash identifier: Yp5MelH+l6DIGmJHVyGgp8XFiwOG/vEXNIbFgwlIvtU=
Subject key identifier: BE:6C:F5:AA:FA:C3:4F:88:2F:A9:25:D9:85:A7:18:44:81:EA:D6:F9
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 019A254EA8A24C3D06BBDB26CD845CA84B73
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vmz1qvrDT4gvqSXZhacYRIHq1vk.roa
Signing time: Mon 27 Oct 2025 10:55:03 +0000
ROA not before: Mon 27 Oct 2025 10:55:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8285
IP address blocks: 2a06:e8c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:4e:a8:a2:4c:3d:06:bb:db:26:cd:84:5c:a8:4b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Oct 27 10:55:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be6cf5aafac34f882fa925d985a7184481ead6f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f2:59:28:26:94:60:93:b7:dc:46:4e:ba:c0:
72:42:06:dc:42:4e:b6:d5:be:54:d6:14:57:75:e4:
61:da:78:47:6e:f5:fe:8c:d4:55:c7:84:e6:1e:4b:
c4:80:e2:85:84:d6:1c:45:b6:9a:20:29:54:cc:53:
b3:c1:5f:d1:a8:2f:ae:81:30:92:89:59:b2:73:e6:
9d:74:b4:b9:37:84:7c:1b:1d:de:ba:32:9f:9e:df:
e5:0d:c7:38:54:8f:e8:dc:3d:2f:b7:32:89:52:a8:
57:63:ee:40:cb:b7:b9:dc:58:f4:f9:6c:c1:5d:ad:
2f:74:42:e4:76:72:45:9a:b5:b7:37:77:aa:41:e2:
f7:b4:b3:3a:86:6d:c8:48:c5:f3:57:64:de:f9:36:
ab:b1:71:f4:39:8e:4c:8c:80:e9:5c:0d:1c:36:4d:
09:e8:00:6a:3d:21:6f:c6:f6:34:f5:3e:10:45:63:
1e:6e:39:38:44:60:09:71:ec:ce:c5:24:5d:14:58:
60:b3:c7:4b:58:86:39:97:1b:23:f9:f5:00:60:e9:
c2:c1:df:8d:3b:81:fc:4f:51:8a:83:32:82:b4:9a:
51:53:d5:f4:2d:c4:43:e1:35:03:96:56:5b:dd:06:
d4:11:24:e7:76:cf:a5:dd:20:4a:f8:03:65:d3:84:
c2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:6C:F5:AA:FA:C3:4F:88:2F:A9:25:D9:85:A7:18:44:81:EA:D6:F9
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vmz1qvrDT4gvqSXZhacYRIHq1vk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e8c0::/29
Signature Algorithm: sha256WithRSAEncryption
32:49:72:7c:75:ae:2f:86:c1:17:cf:49:4c:4c:ad:26:ae:9d:
cd:27:3f:c8:c5:78:c6:48:05:1a:4c:65:0f:26:bb:83:da:18:
a1:4e:28:77:c1:37:7c:68:ba:14:3f:a4:60:e8:b5:e0:62:57:
a1:cf:60:16:22:ad:01:47:a3:3f:88:7b:3a:ac:cc:e3:be:2f:
48:28:53:1b:81:c6:8d:b6:1d:d4:8b:68:41:05:01:d7:19:0f:
1b:46:ac:9e:6d:49:b0:8f:70:e6:c2:f0:22:e9:d3:ae:28:6b:
a6:7d:e9:e4:7b:5c:d3:08:0c:73:cb:b0:07:78:e0:bb:0c:55:
7b:f6:d6:26:b5:bd:32:ec:84:57:24:b4:ea:ec:cc:0b:8d:8e:
77:32:d0:2e:85:1f:a1:90:d5:ef:e3:64:fd:bb:e2:19:2d:e1:
f7:04:37:41:f0:f5:0c:fd:01:6d:5c:ad:22:67:dc:df:44:a7:
db:26:6e:20:2c:47:51:5f:c5:4d:83:5f:51:d1:26:23:05:bf:
1b:b0:5e:ae:7b:3f:21:30:80:a1:0f:d2:9b:76:1d:55:57:dd:
31:5a:35:ba:d0:25:52:92:e4:e3:d9:85:97:c2:c6:b4:86:9a:
ae:71:7c:fe:4a:77:73:94:2a:96:8c:c3:29:cd:84:a8:f9:c0:
d1:97:db:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:11:58 2025 by rpki-client