Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/VdpeYWicryHpzAB4DZOE2_eE8mU.roa
File: VdpeYWicryHpzAB4DZOE2_eE8mU.roa (raw, json)
Hash identifier: CNoqpW1D+k3FAIJqkeURjeLA7MboxVUVd4vLoWTzRRo=
Subject key identifier: 55:DA:5E:61:68:9C:AF:21:E9:CC:00:78:0D:93:84:DB:F7:84:F2:65
Certificate issuer: /CN=20283b148997cc5610120b4c4606ba72e5daef9f
Certificate serial: 019F23688E423C1B7EC0447F9E555FDC9B04
Authority key identifier: 20:28:3B:14:89:97:CC:56:10:12:0B:4C:46:06:BA:72:E5:DA:EF:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ICg7FImXzFYQEgtMRga6cuXa758.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/VdpeYWicryHpzAB4DZOE2_eE8mU.roa
Signing time: Thu 02 Jul 2026 15:18:02 +0000
ROA not before: Thu 02 Jul 2026 15:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206934
IP address blocks: 193.30.23.0/24 maxlen: 24
193.30.90.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/ICg7FImXzFYQEgtMRga6cuXa758.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/ICg7FImXzFYQEgtMRga6cuXa758.mft
rsync://rpki.ripe.net/repository/DEFAULT/ICg7FImXzFYQEgtMRga6cuXa758.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Jul 2026 18:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:8e:42:3c:1b:7e:c0:44:7f:9e:55:5f:dc:9b:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20283b148997cc5610120b4c4606ba72e5daef9f
Validity
Not Before: Jul 2 15:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55da5e61689caf21e9cc00780d9384dbf784f265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1a:db:2c:f3:1c:c6:04:5c:48:8d:98:c5:ff:
f6:4f:80:48:6c:34:e1:7c:5b:59:1b:83:38:46:7c:
6c:78:b5:bd:9d:20:6b:5b:1f:82:6a:9b:24:e7:16:
05:71:f2:94:4b:2e:6d:11:4a:83:be:2d:e9:ea:b5:
39:c3:6a:02:0c:a7:6e:9c:a8:a0:bd:1c:94:f6:0d:
47:80:20:c0:a2:8e:a7:f3:4f:5a:c2:0c:2a:13:31:
ff:e6:90:cf:25:42:e2:42:7b:09:e7:6e:4a:bc:82:
1a:ff:ff:ea:45:93:10:c7:2e:25:6b:c3:8f:67:42:
fe:b2:df:9d:ba:59:77:2a:e8:17:7f:2e:d7:54:12:
df:4b:1c:a2:da:01:6a:14:12:1a:69:d8:ef:c7:20:
77:db:5d:d9:b5:d3:3c:83:6d:48:f7:21:3d:f1:a7:
6b:f0:15:e5:3d:80:4e:38:11:ee:92:8a:9f:0f:41:
8b:dc:76:72:8b:ff:a0:ad:c1:0e:5a:09:b0:72:47:
c1:d5:7a:e3:76:e7:cb:bb:3a:93:91:12:af:07:b1:
01:b6:49:e8:fd:bd:01:f1:b0:78:52:d9:41:02:8e:
93:40:a2:6b:22:7e:8b:6d:57:5c:2b:8a:5d:de:e1:
6d:ab:ea:48:87:18:75:72:bd:30:01:39:c8:27:3b:
c9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:DA:5E:61:68:9C:AF:21:E9:CC:00:78:0D:93:84:DB:F7:84:F2:65
X509v3 Authority Key Identifier:
keyid:20:28:3B:14:89:97:CC:56:10:12:0B:4C:46:06:BA:72:E5:DA:EF:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ICg7FImXzFYQEgtMRga6cuXa758.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/VdpeYWicryHpzAB4DZOE2_eE8mU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa270a-c089-4778-9343-b7362edbd8ac/1/ICg7FImXzFYQEgtMRga6cuXa758.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.23.0/24
193.30.90.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:a8:12:40:d8:f0:50:e9:90:03:7f:e6:62:c1:c2:c1:65:2b:
6a:60:2a:a6:bb:81:5c:cf:fe:31:2f:47:3b:23:f6:91:02:3b:
01:b5:81:7b:97:bf:70:00:fc:ca:9f:68:1a:68:24:21:fd:9c:
7c:39:e4:f1:16:eb:ec:cb:da:ab:e8:3c:aa:7e:83:4b:e8:de:
40:3f:47:6d:d6:bc:75:fa:36:c3:6a:1e:3d:b2:f4:f7:de:06:
b8:0d:c1:53:b1:21:8c:38:5d:6b:3b:72:16:0d:b6:ae:17:60:
16:82:58:3f:84:6f:1b:90:6c:7d:11:60:5f:25:21:aa:a4:74:
4f:c3:40:dc:17:ff:ed:b8:d5:6f:8d:6c:0e:f4:59:03:23:64:
10:46:43:61:9a:f9:1e:e8:39:9f:ca:be:79:fc:2a:49:96:7c:
5e:25:e0:51:1e:9c:6f:16:00:ec:cc:cb:d5:b0:4f:f1:1a:e9:
77:ca:8d:c4:87:7c:50:68:34:b5:1e:9d:23:4e:29:14:3d:d3:
69:78:b9:51:61:fa:73:ef:a1:40:c6:39:61:ca:c2:84:42:d7:
88:09:7c:7a:40:98:76:09:57:d7:5b:7d:66:d3:4b:81:85:16:
cd:03:50:4a:2a:1a:42:09:a6:4f:d0:37:fc:df:00:5b:a6:c1:
d1:7a:64:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 03:17:02 2026 by rpki-client