Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/cd3876-db6f-4325-9a9b-94d3bad2db84/1/Vc-AnL_35bb4kR8JSxGMfPzGPt0.roa
File: Vc-AnL_35bb4kR8JSxGMfPzGPt0.roa (raw, json)
Hash identifier: Lv4xeKV0FyCXQbfH7NFsPPUSM7nGu6VgRd7vYocaQNI=
Subject key identifier: 55:CF:80:9C:BF:F7:E5:B6:F8:91:1F:09:4B:11:8C:7C:FC:C6:3E:DD
Certificate issuer: /CN=ed742498697c9189c301a16c88087a971fdba0f6
Certificate serial: 01A1196EB008890C63F94A0A3FEA693D9D36
Authority key identifier: ED:74:24:98:69:7C:91:89:C3:01:A1:6C:88:08:7A:97:1F:DB:A0:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XQkmGl8kYnDAaFsiAh6lx_boPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/cd3876-db6f-4325-9a9b-94d3bad2db84/1/Vc-AnL_35bb4kR8JSxGMfPzGPt0.roa
Signing time: Thu 08 Oct 2026 02:54:06 +0000
ROA not before: Thu 08 Oct 2026 02:54:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.87.108.0/22 maxlen: 22
2a07:9ac0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/cd3876-db6f-4325-9a9b-94d3bad2db84/1/7XQkmGl8kYnDAaFsiAh6lx_boPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/cd3876-db6f-4325-9a9b-94d3bad2db84/1/7XQkmGl8kYnDAaFsiAh6lx_boPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7XQkmGl8kYnDAaFsiAh6lx_boPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:19:6e:b0:08:89:0c:63:f9:4a:0a:3f:ea:69:3d:9d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed742498697c9189c301a16c88087a971fdba0f6
Validity
Not Before: Oct 8 02:54:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55cf809cbff7e5b6f8911f094b118c7cfcc63edd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cf:b5:bc:c8:a2:f4:77:d5:4b:92:7e:bb:9f:
db:95:04:3c:15:a7:6c:84:70:5d:66:ca:67:5e:0e:
c1:d1:5a:ba:61:fe:01:55:cc:a0:d4:a8:21:cc:c5:
bf:79:cd:2a:0e:99:9b:a5:1d:99:31:45:68:54:db:
f4:a3:2c:16:fb:c2:d4:d9:46:95:fa:ca:bb:b2:80:
8c:72:ac:37:f4:99:ef:0c:fa:c6:9c:db:0e:b3:aa:
f0:11:60:98:c8:e3:7b:ba:ae:84:21:b6:10:a1:8b:
95:e2:9e:47:bf:1b:a5:98:f8:56:d9:92:60:93:37:
fb:f6:7a:3c:dc:03:89:13:37:b1:9e:11:33:08:bb:
59:8b:d3:2c:99:19:d3:29:82:ad:8e:f4:d5:9b:e4:
53:c6:97:67:ff:b4:1c:91:a4:65:9f:d8:45:3c:cc:
79:d2:a4:38:3f:ee:f1:28:90:98:65:20:ea:2f:53:
1e:75:49:1c:ce:f3:c4:75:28:0a:88:f4:16:7d:23:
b6:7b:35:e0:34:37:fc:93:c4:21:01:fa:cb:59:27:
fa:a8:5b:cd:73:48:2c:cd:b0:c0:0c:5f:7f:e3:0c:
7a:c4:52:2b:17:b1:b6:90:e3:cd:ec:11:0c:41:d9:
06:28:de:e2:c5:ac:1b:5d:aa:f5:55:0f:8b:91:36:
fd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:CF:80:9C:BF:F7:E5:B6:F8:91:1F:09:4B:11:8C:7C:FC:C6:3E:DD
X509v3 Authority Key Identifier:
keyid:ED:74:24:98:69:7C:91:89:C3:01:A1:6C:88:08:7A:97:1F:DB:A0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XQkmGl8kYnDAaFsiAh6lx_boPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cd3876-db6f-4325-9a9b-94d3bad2db84/1/Vc-AnL_35bb4kR8JSxGMfPzGPt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cd3876-db6f-4325-9a9b-94d3bad2db84/1/7XQkmGl8kYnDAaFsiAh6lx_boPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.108.0/22
IPv6:
2a07:9ac0::/29
Signature Algorithm: sha256WithRSAEncryption
48:d1:1f:ba:17:01:4d:e7:81:45:96:00:7d:02:49:5a:e3:10:
fc:64:8f:99:12:19:6a:c3:26:7f:b9:f2:ff:c1:5e:0b:f3:1d:
17:ce:96:63:e4:21:50:3d:d2:09:9b:3f:ee:b1:fd:0e:24:03:
40:92:2d:20:78:61:95:a3:54:8d:1c:af:4c:ea:bd:db:ab:60:
93:2a:5e:f0:bc:f3:d6:33:57:45:9a:f4:a3:d0:29:e2:04:8b:
c9:fd:d7:a2:37:b6:59:e5:7c:48:39:48:75:59:5c:6d:e4:5f:
0e:6c:d6:50:5e:fe:ab:ac:98:d9:7d:83:df:95:22:9a:34:a5:
99:db:d3:66:ac:ff:20:5c:96:8a:14:a9:0d:4e:65:f8:24:ee:
87:ac:2f:10:ea:da:94:b0:5c:a2:7b:22:a9:07:1a:9a:5e:52:
61:84:86:d1:43:81:58:52:f0:30:20:f6:35:f0:93:2e:3e:7e:
ac:66:90:0e:ba:25:31:75:76:64:54:a6:16:da:4f:b3:25:ab:
d4:79:b8:30:04:f3:33:c9:23:6a:cc:96:0d:5a:1f:aa:0c:b4:
3d:f3:27:53:3d:53:cd:42:57:ac:e3:b3:69:c4:14:e0:55:3b:
f4:58:f6:9c:c4:fe:3c:15:56:21:05:c0:bf:35:8e:e3:32:8b:
c9:8e:7e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:29:39 2026 by rpki-client