Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/Vn2rK68gO4hX2pWnjN-oM43j8yc.roa
File: Vn2rK68gO4hX2pWnjN-oM43j8yc.roa (raw, json)
Hash identifier: 5XKdFtGJBT5wIpudLsMAqxPWo69CxAm2hTM1+edfkJo=
Subject key identifier: 56:7D:AB:2B:AF:20:3B:88:57:DA:95:A7:8C:DF:A8:33:8D:E3:F3:27
Certificate issuer: /CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd
Certificate serial: 01A15446A7C297B764AC53791D41DE472F9D
Authority key identifier: 55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/Vn2rK68gO4hX2pWnjN-oM43j8yc.roa
Signing time: Mon 19 Oct 2026 13:07:58 +0000
ROA not before: Mon 19 Oct 2026 13:07:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207567
IP address blocks: 168.222.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 16:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:46:a7:c2:97:b7:64:ac:53:79:1d:41:de:47:2f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd
Validity
Not Before: Oct 19 13:07:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=567dab2baf203b8857da95a78cdfa8338de3f327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:9e:19:2f:ba:8e:9b:c1:55:23:1c:35:68:c3:
18:6e:6c:2c:93:65:0c:5f:68:6f:85:aa:62:f1:d3:
fd:98:2d:09:46:a4:c9:f1:d6:05:3a:00:22:7b:d6:
26:1e:6e:7a:94:b6:7d:69:e1:0e:9d:36:16:63:87:
b9:98:ac:b4:c6:17:7f:08:32:29:18:38:69:46:b2:
77:0d:81:9d:dc:9c:d5:ca:7e:8f:e9:cd:c2:28:61:
be:e9:9b:61:87:18:5e:8a:68:ce:9a:b1:7d:12:8f:
03:71:a2:e7:30:a2:cd:00:65:bf:23:f7:fb:c4:a0:
44:ff:8b:33:7f:35:75:99:9a:33:90:64:07:fd:f2:
2c:50:6b:21:ec:5b:ce:ac:ee:d6:70:8c:48:c4:91:
62:8c:9b:01:87:2c:c4:e1:9e:18:54:55:b4:e3:54:
07:37:ba:06:15:2d:85:a9:64:1c:fe:09:af:25:94:
39:61:53:da:24:46:8f:e5:66:24:9b:a2:0f:2b:a0:
b3:28:53:1b:40:43:56:89:19:e6:26:f5:8d:d3:38:
1e:bd:db:e5:68:2a:61:8d:86:9f:28:08:e4:32:ad:
49:10:e8:7f:2f:3e:8b:75:b0:13:13:e9:fd:3b:06:
f9:dd:5b:f8:c7:e2:74:9c:59:ed:aa:d1:9c:8d:2b:
7b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:7D:AB:2B:AF:20:3B:88:57:DA:95:A7:8C:DF:A8:33:8D:E3:F3:27
X509v3 Authority Key Identifier:
keyid:55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/Vn2rK68gO4hX2pWnjN-oM43j8yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.222.254.0/24
Signature Algorithm: sha256WithRSAEncryption
ed:c9:b2:0d:34:74:9b:60:0b:ce:bd:e2:7b:fc:db:63:cb:ea:
34:1e:af:7d:6a:ba:42:ac:e0:2c:a2:6a:4f:af:bc:e6:d8:92:
80:9e:68:9b:03:d3:2e:3b:86:22:4b:e6:43:c2:14:b4:e2:fe:
02:f1:0f:80:43:f5:49:2b:cc:41:64:33:32:b1:ef:cb:2b:ab:
86:13:ba:b4:3c:65:88:56:8b:d3:08:b0:90:60:c6:4b:87:61:
d4:80:e0:70:8a:d7:5f:91:da:ac:ee:99:3c:b2:a3:0a:f8:cd:
c4:de:08:53:24:ae:e9:1a:6d:60:c5:9d:24:21:a2:7c:b6:b7:
3e:b8:8b:b8:93:34:49:46:43:60:1b:09:a2:12:ed:d7:e6:de:
a1:7d:a7:aa:1a:a0:8a:e9:6d:e3:c0:cd:ac:f1:1f:bc:5b:19:
d0:61:e2:85:03:da:96:e5:38:fd:5d:9a:73:68:92:0a:4b:7d:
f2:f6:8a:26:66:e2:a7:74:89:27:71:2d:97:99:7a:84:38:b8:
c4:cf:cd:d9:c7:7f:cb:87:1a:a6:1a:83:42:60:78:59:e2:25:
17:08:21:66:4a:bb:24:c5:c8:87:70:f9:8c:c3:27:54:f6:54:
10:f1:c5:27:9e:cf:e1:e9:5e:86:8a:e5:47:53:1c:a3:7e:5f:
4e:1e:a4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:16:42 2026 by rpki-client