Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vh1lCT9zmqsP56N1MFs0Wj5G9sU.roa
File: vh1lCT9zmqsP56N1MFs0Wj5G9sU.roa (raw, json)
Hash identifier: yplRe2yLGZy82mirYwcgoDQyTS8G+/Pxm/GFuIMQm5I=
Subject key identifier: BE:1D:65:09:3F:73:9A:AB:0F:E7:A3:75:30:5B:34:5A:3E:46:F6:C5
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019D0A387447C015CD696067321DABD26F88
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vh1lCT9zmqsP56N1MFs0Wj5G9sU.roa
Signing time: Fri 20 Mar 2026 07:49:25 +0000
ROA not before: Fri 20 Mar 2026 07:49:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36666
IP address blocks: 83.143.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 02:18:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0a:38:74:47:c0:15:cd:69:60:67:32:1d:ab:d2:6f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 20 07:49:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be1d65093f739aab0fe7a375305b345a3e46f6c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:41:9d:a3:ab:e7:6a:bd:2c:4b:b5:1c:1e:25:
94:ea:86:2b:4b:b1:e6:31:0f:ea:14:20:4f:90:3d:
63:1d:81:68:83:66:bd:ef:94:9f:36:97:93:9c:71:
5e:a5:6e:45:a0:e6:60:8a:c5:32:a3:35:8f:27:7e:
b0:5c:23:7f:66:da:0d:79:ff:bb:97:0e:e7:7f:5a:
e1:1b:68:07:cc:5c:be:16:60:bb:9d:37:4b:4b:69:
e0:b9:ac:fe:d0:57:23:78:2b:cf:f8:8d:59:16:c2:
0f:b0:f6:34:6c:ba:4d:d8:8b:b9:c4:e8:0a:14:05:
5f:fc:95:ed:16:64:f8:39:c7:b8:f7:69:eb:8f:2b:
8c:70:96:ea:b0:76:bc:db:bf:c8:21:0b:ee:89:90:
aa:8b:7c:9d:cc:5b:a1:2a:4d:0a:4a:25:1c:1d:e4:
ec:46:11:f5:f0:f1:65:6a:ce:f5:ab:f4:17:86:66:
0d:43:52:02:2f:46:5d:ca:94:78:51:48:dd:82:ee:
8e:e9:f2:a2:29:00:1f:1b:93:c8:80:dd:33:3d:48:
18:ce:db:7f:41:34:2c:83:b2:65:e5:97:c2:b3:12:
92:ce:f7:f5:a2:31:49:8b:dc:85:73:8a:34:41:a6:
19:a6:41:0f:69:65:db:10:cc:c5:e4:f0:2c:07:65:
e1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:1D:65:09:3F:73:9A:AB:0F:E7:A3:75:30:5B:34:5A:3E:46:F6:C5
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vh1lCT9zmqsP56N1MFs0Wj5G9sU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.143.115.0/24
Signature Algorithm: sha256WithRSAEncryption
82:64:02:80:a6:a4:57:ac:0f:04:8d:ab:5f:28:19:84:30:f7:
05:1e:bf:d3:ef:31:e4:f3:ef:47:98:e0:0e:0f:fb:9e:17:c1:
c7:37:59:4e:a4:74:7f:64:15:c1:80:5c:22:ae:c2:b6:a1:22:
c3:fd:d1:bf:eb:23:fe:c3:a2:22:b2:42:98:5d:63:f3:d3:5d:
6a:98:45:5a:35:fc:c9:4c:1e:b8:2e:dc:fb:f4:97:f7:9f:30:
f1:99:a7:5d:ee:37:2d:f9:96:dd:c9:8a:95:f9:c1:78:83:41:
73:e3:bf:56:c6:a6:04:cf:43:6d:d9:25:9a:7b:8a:79:25:ac:
3b:6b:8e:11:e6:9a:5e:47:77:28:1d:e8:45:a7:fa:50:57:44:
92:c2:f6:bc:54:2e:74:fa:18:9b:0a:57:a2:eb:46:02:ff:c8:
f0:d8:90:a1:54:b0:be:6f:43:46:5f:8c:ec:9c:be:2c:65:f4:
a5:4b:23:a3:77:0a:78:c7:9a:8b:de:d6:75:26:42:28:8f:49:
4e:95:d9:d8:fa:68:4a:73:ad:29:87:88:eb:0b:07:fb:04:dd:
76:dd:f9:36:c2:5a:48:3e:6f:01:ce:5a:d8:ec:0d:5a:a7:02:
1a:47:92:d8:49:6c:bd:c0:61:7a:6a:d9:cd:01:cb:50:74:63:
ac:c2:c5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 12:22:39 2026 by rpki-client