Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/VKOQ1y_Uw5fzQd8b1Hdd3EKQAlM.roa
File: VKOQ1y_Uw5fzQd8b1Hdd3EKQAlM.roa (raw, json)
Hash identifier: 32JiiJLEtTayhYhvmHeuz5r0x6saNvGEu+svv9Ba2PA=
Subject key identifier: 54:A3:90:D7:2F:D4:C3:97:F3:41:DF:1B:D4:77:5D:DC:42:90:02:53
Certificate issuer: /CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Certificate serial: 01A032D5CD2FF443A6609AC8F79BFDE6B208
Authority key identifier: 5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/VKOQ1y_Uw5fzQd8b1Hdd3EKQAlM.roa
Signing time: Mon 24 Aug 2026 08:14:27 +0000
ROA not before: Mon 24 Aug 2026 08:14:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19905
IP address blocks: 94.128.1.0/24 maxlen: 24
94.128.2.0/24 maxlen: 24
94.128.5.0/24 maxlen: 24
94.128.6.0/24 maxlen: 24
94.128.7.0/24 maxlen: 24
94.128.8.0/24 maxlen: 24
94.128.9.0/24 maxlen: 24
94.128.10.0/24 maxlen: 24
94.128.11.0/24 maxlen: 24
94.128.12.0/24 maxlen: 24
94.128.14.0/24 maxlen: 24
94.128.16.0/24 maxlen: 24
94.128.17.0/24 maxlen: 24
94.128.18.0/24 maxlen: 24
94.128.19.0/24 maxlen: 24
94.128.128.0/24 maxlen: 24
94.128.129.0/24 maxlen: 24
94.128.130.0/24 maxlen: 24
94.128.131.0/24 maxlen: 24
94.128.132.0/24 maxlen: 24
94.128.133.0/24 maxlen: 24
94.128.134.0/24 maxlen: 24
94.128.135.0/24 maxlen: 24
94.129.1.0/24 maxlen: 24
94.129.2.0/24 maxlen: 24
94.129.3.0/24 maxlen: 24
94.129.4.0/24 maxlen: 24
94.129.5.0/24 maxlen: 24
94.129.6.0/24 maxlen: 24
94.129.7.0/24 maxlen: 24
94.129.8.0/24 maxlen: 24
94.129.9.0/24 maxlen: 24
94.129.10.0/24 maxlen: 24
94.129.11.0/24 maxlen: 24
94.129.12.0/24 maxlen: 24
94.129.13.0/24 maxlen: 24
94.129.14.0/24 maxlen: 24
94.129.15.0/24 maxlen: 24
94.129.17.0/24 maxlen: 24
94.129.18.0/24 maxlen: 24
94.129.19.0/24 maxlen: 24
94.129.128.0/24 maxlen: 24
94.129.132.0/24 maxlen: 24
94.129.133.0/24 maxlen: 24
94.129.134.0/24 maxlen: 24
94.129.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 02:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:32:d5:cd:2f:f4:43:a6:60:9a:c8:f7:9b:fd:e6:b2:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Validity
Not Before: Aug 24 08:14:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54a390d72fd4c397f341df1bd4775ddc42900253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a6:4c:cd:66:1b:a7:dc:2c:59:e4:09:24:cf:
d1:92:ca:aa:50:4a:1a:81:b3:b8:f1:08:a4:10:b7:
62:35:7d:08:fa:5f:d8:6c:81:4a:97:95:97:aa:12:
85:31:ab:76:0c:42:07:b8:bc:95:b9:5b:69:a2:bc:
8c:c6:9f:a3:f0:56:2b:50:94:57:9a:53:3e:c0:bf:
a1:07:25:9d:95:ae:b9:2f:42:a7:7a:8f:be:10:9a:
ba:c8:c6:bd:df:09:f5:4f:fe:22:6a:a8:20:75:43:
f4:18:60:b2:74:a8:8b:84:ca:e4:8a:15:b0:ce:3e:
7d:27:9b:f3:45:d6:3a:c7:3c:93:f9:1e:04:85:f1:
12:cc:c5:e3:7c:f0:99:d4:f7:28:e0:80:6c:4e:40:
1e:9c:bc:14:a7:3b:61:ff:4a:b9:da:4c:e2:88:8d:
23:c7:60:e0:57:38:2d:cc:2d:2a:99:d4:8c:33:18:
5c:ec:f8:2e:8e:13:15:e5:ee:70:7e:b7:44:e4:b4:
73:42:55:eb:0c:d8:52:d0:d9:40:be:ce:d8:7a:bf:
c3:dd:b9:77:d0:24:ef:a6:5f:f4:62:c9:d9:cd:a7:
9b:6d:63:25:fe:dc:04:a8:65:25:83:7c:0b:c4:c3:
e7:d3:be:e0:05:a5:8a:67:33:2a:06:ed:cf:dd:14:
85:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A3:90:D7:2F:D4:C3:97:F3:41:DF:1B:D4:77:5D:DC:42:90:02:53
X509v3 Authority Key Identifier:
keyid:5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/VKOQ1y_Uw5fzQd8b1Hdd3EKQAlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.128.1.0-94.128.2.255
94.128.5.0-94.128.12.255
94.128.14.0/24
94.128.16.0/22
94.128.128.0/21
94.129.1.0-94.129.15.255
94.129.17.0-94.129.19.255
94.129.128.0/24
94.129.132.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:4e:5f:56:34:3a:22:3d:39:0a:b1:a2:6a:05:90:c5:80:64:
11:6e:26:6c:77:9e:3e:6f:6d:39:d2:86:f6:84:26:1e:65:37:
4f:e9:bd:0b:bb:04:7e:75:64:8d:ac:90:ed:65:c3:ed:19:b8:
3a:08:76:f7:24:07:fd:6f:65:52:eb:00:19:25:e7:f2:66:dc:
63:a6:c5:08:4d:57:1a:12:20:35:1f:b1:48:22:59:b6:3a:88:
ba:59:ee:3e:2a:9e:f8:27:18:81:0a:eb:ee:79:7e:c1:78:71:
a8:14:6d:8a:44:8e:a6:a3:1a:b9:ab:ea:c4:01:d1:67:66:23:
67:c3:db:fa:69:2e:2d:88:f6:3d:8c:2c:cc:b8:59:97:dc:36:
0e:f4:83:5b:c2:ff:5f:e1:47:3d:0b:05:47:f8:de:cf:7a:01:
bc:3a:dc:94:26:c2:df:4b:48:02:a8:5d:7d:37:7c:00:9c:2c:
11:c2:18:66:20:d1:7d:61:23:e7:f0:3f:33:00:02:67:a0:bf:
44:8d:05:b8:d2:4f:21:a8:f2:0e:57:bb:7c:e2:1d:a9:3c:df:
23:4a:45:ed:70:a9:36:09:a3:f5:a7:36:c5:67:fa:cd:29:a0:
0a:20:26:bc:6b:e3:cc:f9:c3:ec:75:e7:78:ee:70:f2:88:3c:
b0:82:8a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:44:46 2026 by rpki-client