Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vcQA0zaGpufCXamrkBB23URi-5s.roa
File: vcQA0zaGpufCXamrkBB23URi-5s.roa (raw, json)
Hash identifier: ob3/hjVNA2Vvp+4TXEX5m6UQquf9UknqKYECmBYOgVw=
Subject key identifier: BD:C4:00:D3:36:86:A6:E7:C2:5D:A9:AB:90:10:76:DD:44:62:FB:9B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A0A9AFF1974B97F046A6D706285BDF0C53
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vcQA0zaGpufCXamrkBB23URi-5s.roa
Signing time: Wed 16 Sep 2026 10:07:55 +0000
ROA not before: Wed 16 Sep 2026 10:07:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 185.252.160.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:af:f1:97:4b:97:f0:46:a6:d7:06:28:5b:df:0c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 16 10:07:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bdc400d33686a6e7c25da9ab901076dd4462fb9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a4:83:3b:c4:a2:b0:f6:65:f5:a3:80:e9:de:
17:b5:5d:db:eb:c8:59:aa:2a:88:76:6e:f0:fa:0f:
2a:fd:d3:50:02:9a:31:38:ed:4b:43:a3:19:40:15:
90:83:13:d5:32:e7:0d:ff:cd:0d:5b:9d:1b:6f:b1:
2d:4b:30:c7:fb:c2:0e:74:09:0e:29:c8:95:7e:5c:
81:3d:36:fb:4d:b7:40:14:11:60:8a:2e:29:04:1e:
87:fe:89:30:18:7b:84:ec:b8:10:25:19:2e:b2:bc:
3b:43:9e:48:23:06:8b:dd:76:5e:72:af:97:28:aa:
93:aa:99:a1:b6:b5:ee:39:9d:99:13:42:ca:fd:8a:
49:b5:7e:9c:cf:2b:48:c8:19:e7:ef:c5:00:e1:de:
47:24:64:b9:a2:69:36:f9:41:fe:4a:93:73:99:cb:
63:28:60:e7:af:6a:75:cd:fa:82:dd:46:2e:46:31:
89:26:49:c9:49:a6:be:fc:58:a1:8d:fe:3d:b4:13:
0a:e4:1f:48:0d:53:d0:04:3c:1a:2c:7f:c6:2e:db:
57:5a:eb:e0:d9:5c:aa:6a:c6:6a:b4:e2:d2:83:07:
b7:50:30:88:6a:42:cf:4d:f8:91:66:b6:8a:e0:cf:
96:82:e6:0e:80:24:15:12:6b:b2:cb:c5:ab:92:93:
c6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C4:00:D3:36:86:A6:E7:C2:5D:A9:AB:90:10:76:DD:44:62:FB:9B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vcQA0zaGpufCXamrkBB23URi-5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.160.0/23
Signature Algorithm: sha256WithRSAEncryption
94:6b:52:34:8a:1b:ab:16:e4:c9:59:61:2b:c6:ab:97:c2:97:
77:67:19:c6:6a:c1:e2:df:31:3d:0b:e2:f2:01:c5:94:cc:36:
c3:92:02:e8:c9:0c:ce:f8:f2:3a:c0:83:06:b0:b9:12:e0:63:
82:c0:ab:1c:2b:2c:6b:fc:27:ec:11:34:71:c8:15:3f:36:e3:
53:7b:08:44:2a:6a:14:3f:21:a2:4f:8e:fc:74:52:98:04:55:
dc:d2:60:a5:55:0e:89:42:3e:a4:f7:8d:5a:9b:ef:c5:a7:1e:
1f:28:5f:84:3d:2c:06:3d:12:ba:1a:db:58:2a:75:d6:97:5f:
2d:43:45:d1:e6:ce:5d:19:6e:f8:55:85:12:8d:75:dd:62:60:
34:31:79:24:c0:fd:ad:d1:41:9e:27:7d:10:fa:c6:b2:76:4c:
70:29:ae:58:9c:73:61:04:83:93:56:2d:42:c1:51:2c:df:10:
d0:2f:e4:3e:6c:1c:33:58:4d:0a:0c:a6:f2:d9:52:37:b5:14:
a1:63:7f:5a:6c:53:d2:1f:3a:05:00:3b:86:0f:48:a6:65:20:
a5:7c:c6:d4:c4:41:39:a6:6b:eb:ae:d8:ab:7f:b5:75:b7:13:
39:9b:e2:d3:ae:e1:ab:e3:1b:34:cc:da:89:e7:9c:42:42:72:
99:26:58:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 12:28:38 2026 by rpki-client