Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/VoyMNhhHVQ4I5z9WjjUHws6hk2U.roa
File: VoyMNhhHVQ4I5z9WjjUHws6hk2U.roa (raw, json)
Hash identifier: 07v8p+Qbq8NkDFnmR77Sitj/ACMVAdh3jZDXmBPQOXA=
Subject key identifier: 56:8C:8C:36:18:47:55:0E:08:E7:3F:56:8E:35:07:C2:CE:A1:93:65
Certificate issuer: /CN=ff25d9c5293ba7bfe52074ac27fc7df9a649b21b
Certificate serial: 019F2368FB639288DB5C4CE149FC2FA161F2
Authority key identifier: FF:25:D9:C5:29:3B:A7:BF:E5:20:74:AC:27:FC:7D:F9:A6:49:B2:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_yXZxSk7p7_lIHSsJ_x9-aZJshs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/VoyMNhhHVQ4I5z9WjjUHws6hk2U.roa
Signing time: Thu 02 Jul 2026 15:18:30 +0000
ROA not before: Thu 02 Jul 2026 15:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215915
IP address blocks: 117.18.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/_yXZxSk7p7_lIHSsJ_x9-aZJshs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/_yXZxSk7p7_lIHSsJ_x9-aZJshs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_yXZxSk7p7_lIHSsJ_x9-aZJshs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:fb:63:92:88:db:5c:4c:e1:49:fc:2f:a1:61:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff25d9c5293ba7bfe52074ac27fc7df9a649b21b
Validity
Not Before: Jul 2 15:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=568c8c361847550e08e73f568e3507c2cea19365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:98:d2:05:f3:21:90:a1:29:fd:1f:d8:15:ad:
a2:1d:ea:01:c7:34:59:09:4a:13:6b:2d:71:a3:94:
b4:f3:6c:26:9d:aa:76:77:5f:77:61:0b:24:39:87:
08:f7:1c:0e:9f:04:06:c3:ab:48:3c:4d:fc:3d:35:
8b:3c:40:34:dc:a2:82:ea:93:ed:1a:da:9a:3b:09:
6d:22:50:b1:56:91:ad:db:75:36:fb:02:9d:aa:50:
6e:99:77:ee:2f:25:85:63:54:b2:be:38:e7:f6:ee:
3c:9a:73:33:30:20:d1:5d:14:ef:37:5f:d8:7b:33:
4c:e2:6e:6d:fd:77:8a:83:7e:77:61:be:a9:26:52:
84:87:dd:e7:0d:80:5f:8d:d1:dc:8e:f7:a4:34:d1:
9b:35:fe:ed:48:36:0d:c5:85:ac:2b:ae:38:22:d7:
9a:9a:13:15:9c:68:01:2f:65:c7:6c:a3:0e:da:95:
07:f1:4e:55:ec:fd:61:4f:f6:a8:bd:0c:e6:a9:e6:
34:59:b4:88:90:0a:da:ae:3f:95:1b:f7:cc:59:ec:
2e:33:1d:df:b3:91:6a:cc:15:62:4e:86:70:1d:ea:
6b:ea:d3:74:1e:59:fa:dd:ed:c1:06:f6:f3:b5:91:
c8:00:5e:0b:34:e4:6c:27:31:dd:c7:ac:fa:08:ac:
29:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8C:8C:36:18:47:55:0E:08:E7:3F:56:8E:35:07:C2:CE:A1:93:65
X509v3 Authority Key Identifier:
keyid:FF:25:D9:C5:29:3B:A7:BF:E5:20:74:AC:27:FC:7D:F9:A6:49:B2:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_yXZxSk7p7_lIHSsJ_x9-aZJshs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/VoyMNhhHVQ4I5z9WjjUHws6hk2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/797e65-3da0-4d6e-b695-346bd973c843/1/_yXZxSk7p7_lIHSsJ_x9-aZJshs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
117.18.102.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:cd:3f:ef:29:1e:04:97:6b:36:a2:97:06:de:31:9f:af:07:
88:c5:92:fe:e5:ca:5c:c5:5c:aa:52:0f:2c:f4:5b:d3:95:dc:
03:8d:eb:69:7d:3a:96:0b:c6:10:e1:24:b7:b8:f8:dd:67:6d:
38:cb:60:16:63:3f:f0:78:51:fb:a5:5e:96:d0:81:0f:94:14:
c2:32:b2:25:4a:83:6b:0d:22:3f:5a:ff:e4:1c:6c:66:d2:e6:
c5:cb:fd:d5:d5:a7:55:f1:a3:01:66:a5:ee:52:cb:07:c6:11:
6a:43:bb:3b:ad:c6:08:b0:d6:d4:88:69:09:a3:4c:a5:16:8c:
cb:0b:9a:c4:be:ec:f4:2f:9b:8c:e0:a0:57:6e:15:4c:1b:0c:
72:ac:2d:bf:98:58:01:ce:e7:54:b6:9b:71:7a:f8:96:80:63:
67:bc:d3:58:91:70:0b:51:02:3f:2f:47:9a:68:11:28:95:d8:
1d:c9:d6:5a:98:f1:51:bc:48:07:a9:a3:1c:ce:ca:7f:fa:20:
94:78:bf:96:38:e7:a4:e1:2a:ac:6c:c8:db:7d:ad:f0:74:53:
f5:84:0c:28:2b:6f:18:96:25:cc:ae:d2:0d:bf:4e:4a:de:a8:
d2:c6:1b:99:3d:09:c7:a4:6e:b3:69:20:31:d0:57:a3:cc:c4:
f8:90:e2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:25:50 2026 by rpki-client