Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/VtUPR5txMvOKSB-RRvz2lnGUzBw.roa
File: VtUPR5txMvOKSB-RRvz2lnGUzBw.roa (raw, json)
Hash identifier: /n63NtQtTLB5J2NnNpteLhm3vnivVT2r7eEipyLZoGI=
Subject key identifier: 56:D5:0F:47:9B:71:32:F3:8A:48:1F:91:46:FC:F6:96:71:94:CC:1C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019FCE42DB6B37268E943BAABD6DFEACE46C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/VtUPR5txMvOKSB-RRvz2lnGUzBw.roa
Signing time: Tue 04 Aug 2026 19:31:55 +0000
ROA not before: Tue 04 Aug 2026 19:31:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 195.58.40.0/22 maxlen: 22
195.58.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 16:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ce:42:db:6b:37:26:8e:94:3b:aa:bd:6d:fe:ac:e4:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 4 19:31:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56d50f479b7132f38a481f9146fcf6967194cc1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2b:4a:ec:6b:1b:d6:ee:d7:9e:88:85:26:c2:
0a:a3:02:84:ad:55:4d:45:70:f5:21:69:e3:b5:26:
fe:e6:a9:8a:58:8f:4b:ad:c5:a7:d1:04:a4:96:a5:
d3:71:51:32:37:d0:69:93:7c:e5:c6:93:b9:cf:99:
76:f8:49:74:ee:da:1e:2a:fe:eb:52:97:dd:a0:bb:
d1:d0:ae:a6:52:34:0d:be:89:51:ee:ce:e9:c6:0b:
57:04:4b:a8:7d:f1:22:21:ae:37:c8:1e:fe:3c:bc:
2b:6c:9e:b2:42:5d:be:25:3b:ab:d1:cd:9e:8f:16:
b3:45:0c:26:18:4e:ae:3e:55:f4:96:d0:8c:94:ea:
ad:69:7f:2f:c9:1a:e8:35:c3:ad:8d:80:a2:01:46:
57:65:6a:5d:3a:1f:70:07:db:08:63:2f:63:42:fe:
db:70:0d:fb:40:e5:6b:17:09:8a:09:52:57:26:f7:
37:18:46:21:8e:88:6d:a9:51:6c:ef:a6:de:96:97:
6f:a9:78:f0:e8:af:83:3f:b0:aa:1c:96:38:da:f9:
56:8d:0b:fb:33:10:fa:eb:65:7b:8f:79:81:ce:69:
43:dd:e4:c0:ad:25:9a:c9:3f:7c:c9:39:27:15:94:
7c:40:39:9f:51:23:3d:22:9e:12:30:8a:db:15:de:
80:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:D5:0F:47:9B:71:32:F3:8A:48:1F:91:46:FC:F6:96:71:94:CC:1C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/VtUPR5txMvOKSB-RRvz2lnGUzBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.40.0/22
195.58.59.0/24
Signature Algorithm: sha256WithRSAEncryption
01:2c:11:d7:0f:b0:7f:8b:5e:5e:6d:ee:cb:70:12:e1:0b:0b:
b5:00:e4:da:04:ae:5a:70:82:2e:9e:77:07:63:57:35:2f:76:
69:3c:70:c6:27:01:a9:10:03:6b:27:93:b7:70:90:32:e5:c4:
fd:92:5f:b7:aa:dd:cb:c3:85:a9:a8:f1:ed:79:0f:2f:2c:9e:
e8:91:7c:9c:5c:f4:73:c7:6d:15:75:50:24:e9:8c:dc:78:db:
7e:01:bf:b3:2d:e6:9e:2e:58:24:24:b7:99:bb:b9:ee:68:22:
81:b6:18:96:47:c6:71:40:e5:a6:2d:62:3f:c4:4f:19:97:72:
17:07:68:a4:4c:fb:ec:10:31:09:30:2d:9d:ad:03:e9:29:a7:
b5:66:d9:2f:53:f8:13:65:98:0b:a1:92:04:ab:23:de:93:9a:
bb:59:09:9c:e3:76:6e:cd:29:b3:ea:26:26:de:c2:0a:c1:04:
3e:56:0c:1b:55:27:c7:73:27:5b:ce:2d:e9:53:86:f8:df:df:
21:c0:4d:83:8b:b9:68:27:24:24:b2:e5:ed:a5:54:c2:c1:06:
91:bf:63:3e:5f:a9:2f:6a:cf:90:6d:97:00:54:d2:25:55:6b:
3b:5d:04:4b:0f:32:f7:80:0b:ad:57:38:4b:25:f5:c2:41:77:
6e:ef:36:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:08:45 2026 by rpki-client