Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/VGNTVsc9nejbVwiuI2nbOHrhT4A.roa
File: VGNTVsc9nejbVwiuI2nbOHrhT4A.roa (raw, json)
Hash identifier: wG2E1ysGhVBc57CqY90n2KOFbOVGCHFK1WJuuKwNSso=
Subject key identifier: 54:63:53:56:C7:3D:9D:E8:DB:57:08:AE:23:69:DB:38:7A:E1:4F:80
Certificate issuer: /CN=94808a6ddb340d0a8a2127c64da28d770eedde93
Certificate serial: 01A04735E5EAB4D1693275EE6CE9DF812303
Authority key identifier: 94:80:8A:6D:DB:34:0D:0A:8A:21:27:C6:4D:A2:8D:77:0E:ED:DE:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lICKbds0DQqKISfGTaKNdw7t3pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/VGNTVsc9nejbVwiuI2nbOHrhT4A.roa
Signing time: Fri 28 Aug 2026 07:11:49 +0000
ROA not before: Fri 28 Aug 2026 07:11:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219194
IP address blocks: 185.69.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lICKbds0DQqKISfGTaKNdw7t3pM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 01:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:35:e5:ea:b4:d1:69:32:75:ee:6c:e9:df:81:23:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94808a6ddb340d0a8a2127c64da28d770eedde93
Validity
Not Before: Aug 28 07:11:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54635356c73d9de8db5708ae2369db387ae14f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:41:41:c8:2f:4d:5f:c2:2d:64:b0:16:fd:45:
1b:33:64:1a:0c:33:72:3d:4d:78:43:91:8f:90:3b:
5f:50:38:de:3a:7f:aa:2e:50:e5:77:21:6d:21:84:
68:40:7f:df:39:0d:b4:3a:64:7b:58:2b:04:a1:f8:
3e:98:7d:05:22:f9:07:a9:1b:f2:6c:f4:da:86:27:
d2:10:f0:35:8b:9b:fd:b6:fe:19:24:fd:56:e4:20:
28:76:60:89:b0:d4:13:d7:df:a4:68:d6:94:b4:5c:
2e:6a:f7:62:fc:46:12:1b:5d:23:28:20:8b:30:61:
59:b6:00:1b:6e:cb:86:5f:fb:6c:ce:97:2b:66:2b:
7f:70:c7:b2:cd:41:f4:23:22:43:a0:78:8a:6d:a6:
ff:1d:fd:e5:c0:c2:1e:94:b4:21:20:e1:a5:c8:c6:
d5:4a:97:b3:71:85:be:27:75:17:f4:c2:75:66:af:
02:29:ca:61:61:80:e2:d5:27:19:22:ef:73:a2:3c:
cf:37:fc:c7:ab:6f:0f:0c:c2:56:ac:6f:83:1e:74:
b1:cd:53:c1:7c:b5:98:df:5a:52:43:cf:32:5e:0e:
ab:2a:71:ed:b6:a1:1e:c9:0f:62:7f:48:b4:b3:99:
1b:29:63:9d:5f:40:51:09:bf:ac:3f:dd:fd:7b:03:
66:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:63:53:56:C7:3D:9D:E8:DB:57:08:AE:23:69:DB:38:7A:E1:4F:80
X509v3 Authority Key Identifier:
keyid:94:80:8A:6D:DB:34:0D:0A:8A:21:27:C6:4D:A2:8D:77:0E:ED:DE:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lICKbds0DQqKISfGTaKNdw7t3pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/VGNTVsc9nejbVwiuI2nbOHrhT4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9d4203-2eee-41de-8d85-08bf22f64097/1/lICKbds0DQqKISfGTaKNdw7t3pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.184.0/24
Signature Algorithm: sha256WithRSAEncryption
74:79:b7:79:93:54:3c:cb:f0:96:6b:c0:45:0b:bd:e3:56:86:
4b:03:fd:5e:d3:d4:77:7f:7f:a4:46:3d:bb:b8:3e:17:f4:d4:
13:bb:7b:2b:58:b0:e5:8b:42:5b:f6:28:bf:af:ec:41:49:28:
5a:f8:8d:fa:18:41:36:b5:23:44:73:69:b6:6c:4f:96:c2:ad:
f4:17:c9:d3:90:91:8c:9d:1c:eb:d4:a8:2f:d2:82:ae:14:d6:
fe:3f:63:2d:76:bf:eb:99:2e:51:a6:80:3a:08:be:e2:ee:83:
91:5d:05:63:9e:44:78:75:f6:02:90:27:89:cc:bf:03:c2:84:
e6:a4:77:09:c4:2c:c4:ed:4e:02:41:f4:7f:c2:fa:6c:9e:a7:
77:df:28:48:51:17:6c:4f:c9:4b:04:a0:03:c9:7e:ad:53:11:
7a:4e:57:33:7e:c7:c6:f2:fc:00:3e:6a:21:79:84:fc:9a:e7:
ec:4a:85:6b:f7:bf:b8:44:2c:88:28:64:1b:40:87:86:13:1f:
1f:64:c8:2f:20:12:30:5c:5b:71:96:9f:00:bd:09:ca:81:df:
d4:d4:48:a8:0d:12:a2:cd:b4:21:07:b9:db:0f:8e:e1:7b:06:
41:61:52:41:ad:1d:d4:03:7c:6a:5b:71:8c:27:40:f8:46:cc:
1f:4a:46:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:29:04 2026 by rpki-client