Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/vW1_HCUVPJiZsXhTvnOJYpmVuBk.roa
File: vW1_HCUVPJiZsXhTvnOJYpmVuBk.roa (raw, json)
Hash identifier: xuxWiMxXBVeK5sdjrw081xO1T2VBxkkfICVoklrLLQ4=
Subject key identifier: BD:6D:7F:1C:25:15:3C:98:99:B1:78:53:BE:73:89:62:99:95:B8:19
Certificate issuer: /CN=771c7897c0ee3b269a67d2e1d64e3fd1c15a1d5f
Certificate serial: 019F23688EB1E0F7B35EEFAC04F2127FF914
Authority key identifier: 77:1C:78:97:C0:EE:3B:26:9A:67:D2:E1:D6:4E:3F:D1:C1:5A:1D:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/vW1_HCUVPJiZsXhTvnOJYpmVuBk.roa
Signing time: Thu 02 Jul 2026 15:18:02 +0000
ROA not before: Thu 02 Jul 2026 15:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133150
IP address blocks: 45.159.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:8e:b1:e0:f7:b3:5e:ef:ac:04:f2:12:7f:f9:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771c7897c0ee3b269a67d2e1d64e3fd1c15a1d5f
Validity
Not Before: Jul 2 15:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd6d7f1c25153c9899b17853be7389629995b819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:35:16:6a:bc:37:52:b0:18:a7:b3:93:ed:0c:
18:2d:a4:f5:db:8a:fb:30:fc:90:8d:e0:f1:20:38:
ef:07:d5:5f:60:3b:22:9d:97:c0:57:38:ab:27:36:
ca:c7:0f:33:de:5f:2b:72:42:58:82:91:0b:56:64:
e7:6a:20:4f:40:f7:c1:a7:f7:dc:6e:bc:a8:ae:d3:
d2:cd:a7:b2:0f:da:fb:3f:22:60:f9:87:44:22:20:
23:d0:ea:e6:92:f0:3f:ab:42:78:de:88:08:b9:23:
62:1d:65:53:8f:4c:ec:fb:f1:06:fc:92:51:63:a0:
7d:5c:5b:d6:a1:33:d1:b1:bd:8e:e4:2d:86:0e:2e:
81:28:04:05:34:80:88:26:46:72:28:6a:83:c6:05:
bd:95:25:de:1f:63:e7:3a:1a:60:50:3f:5e:f5:8b:
4b:91:96:2c:90:9d:d2:92:27:75:b0:c4:8b:fa:79:
9f:13:4d:77:0d:17:ab:d7:42:33:3f:d6:5d:1e:a4:
ef:15:d4:de:17:59:18:17:19:79:6d:77:90:c1:69:
d8:c2:67:67:b8:ab:b6:79:8f:10:13:c2:63:f4:b3:
45:1c:2d:52:30:8e:df:b4:0c:7c:dc:f9:fd:8c:06:
6c:94:d4:1e:39:22:e7:07:4c:1c:7d:61:ca:8e:15:
3d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6D:7F:1C:25:15:3C:98:99:B1:78:53:BE:73:89:62:99:95:B8:19
X509v3 Authority Key Identifier:
keyid:77:1C:78:97:C0:EE:3B:26:9A:67:D2:E1:D6:4E:3F:D1:C1:5A:1D:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/vW1_HCUVPJiZsXhTvnOJYpmVuBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.92.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:72:44:21:9b:49:d0:f1:42:13:4e:96:c9:ef:dc:0a:2a:85:
a2:ec:29:3c:3e:60:60:07:08:00:e8:27:3e:21:53:5f:53:c9:
56:43:c4:6d:24:4f:ff:6d:f3:2b:2d:55:d3:ef:5a:bb:34:74:
d5:bb:ca:c6:c4:e2:a7:41:4f:c4:63:76:0a:01:29:e7:39:4b:
ba:da:b9:14:78:29:b6:f6:18:67:80:0a:fe:b5:46:ab:15:fa:
47:6f:8e:e3:64:4a:68:00:ce:88:3b:1d:22:2b:e7:4d:f9:f5:
a6:5e:9f:cd:f2:8f:57:d3:6d:8c:9f:49:98:dd:ef:1e:74:bf:
0e:7b:b1:a1:9e:3d:84:9c:ac:c2:b0:50:1d:57:b4:78:61:4c:
5d:e8:d6:71:14:e8:e5:30:f5:c2:26:a9:db:bb:c5:1d:71:c4:
a0:dd:c3:01:16:b5:e1:57:d3:63:8b:11:ff:f5:f0:eb:7a:ea:
bd:d5:67:6a:85:ea:a6:11:ef:e1:52:8d:23:69:d6:e5:c4:40:
53:a9:80:d6:f8:02:eb:33:2b:76:f8:67:eb:17:15:1f:6d:4f:
2a:83:57:84:12:fd:ff:68:f2:d8:95:e3:c1:5e:31:17:ee:6b:
4a:00:4e:69:e6:dc:1a:55:93:98:3f:fb:c5:75:93:16:9e:b0:
7e:d6:1d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:44 2026 by rpki-client