Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/Vj1ceHse-W6DG77iEw2ctRCbRVc.roa
File: Vj1ceHse-W6DG77iEw2ctRCbRVc.roa (raw, json)
Hash identifier: rDB5X+CUGWzAllZ8piq6jsvVLPwxsNa11KTdG3sOTe4=
Subject key identifier: 56:3D:5C:78:7B:1E:F9:6E:83:1B:BE:E2:13:0D:9C:B5:10:9B:45:57
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019F71AC246BFCDC4EDDEC27F7CB44580441
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/Vj1ceHse-W6DG77iEw2ctRCbRVc.roa
Signing time: Fri 17 Jul 2026 20:02:14 +0000
ROA not before: Fri 17 Jul 2026 20:02:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197528
IP address blocks: 87.232.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:71:ac:24:6b:fc:dc:4e:dd:ec:27:f7:cb:44:58:04:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Jul 17 20:02:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=563d5c787b1ef96e831bbee2130d9cb5109b4557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:2b:b3:9a:fa:1e:79:27:13:c0:1d:43:78:9c:
4d:88:a5:7a:4c:fa:e2:b4:38:66:8a:c8:73:fc:c4:
14:f6:00:96:b9:fb:54:fc:52:ee:09:8c:43:01:4a:
09:c6:2d:9e:4e:48:80:f7:2c:1a:0f:98:2e:67:23:
5d:f9:9d:81:c0:8a:20:03:92:b7:83:45:0e:5a:b1:
75:6e:ae:1b:3e:c0:cb:47:db:a9:44:b4:9f:23:cf:
00:6c:93:48:3f:0c:9f:6e:0d:a6:12:c9:34:5e:f0:
2b:f1:36:74:c7:85:34:0f:ad:ab:3a:c4:43:1b:25:
d5:95:3d:af:85:e9:54:f4:05:2d:59:18:53:bd:a9:
1e:ea:e9:87:cf:26:ad:34:d5:d4:4c:26:cb:ad:d2:
77:31:a1:fb:2e:2c:b9:44:27:94:c8:c4:0c:2b:f4:
1d:b1:78:3f:b9:52:ce:f0:a6:1b:b2:50:c9:80:a9:
2e:03:1f:83:23:c9:ef:b6:a7:91:92:a8:3e:7f:f5:
67:e7:0c:18:b3:19:d8:f2:0c:78:8a:8c:e5:52:41:
55:27:20:76:67:4b:b6:c2:d2:59:be:06:4b:d1:c4:
15:25:2b:d7:db:59:b1:1a:76:45:11:e3:74:9d:ba:
24:65:72:fc:34:ba:f8:31:c9:12:c1:82:1d:d5:b5:
33:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3D:5C:78:7B:1E:F9:6E:83:1B:BE:E2:13:0D:9C:B5:10:9B:45:57
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/Vj1ceHse-W6DG77iEw2ctRCbRVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.98.0/24
Signature Algorithm: sha256WithRSAEncryption
14:e2:b7:a5:53:dc:2f:85:78:be:64:76:29:03:26:1c:88:45:
77:fa:5a:1a:d4:af:f5:a5:46:8e:5d:6b:f9:2d:65:14:a3:1e:
71:c2:58:1d:e8:4e:04:6f:81:7f:f6:1b:a0:0b:d7:80:cf:62:
e5:24:04:10:a7:4e:71:10:11:9a:f0:d5:4e:02:c8:91:e7:cf:
4c:59:6e:c2:78:8b:05:e0:eb:77:8b:21:32:c0:bf:ec:72:1a:
ac:18:f6:40:22:ad:a7:0a:6d:67:6e:b0:e5:92:22:e3:32:42:
15:07:11:c6:9f:0b:4e:bd:8a:2a:35:07:0b:17:d1:83:de:b7:
8f:f3:dd:ed:43:6b:23:0d:8a:b7:6c:b6:50:7a:d3:55:b5:b5:
4c:ad:9c:c6:68:82:13:09:90:b4:f5:87:3a:5b:79:b6:da:39:
ec:50:69:e8:b1:f8:1c:0c:22:f7:79:a5:d2:38:d0:28:2a:5b:
d2:c2:4e:27:f7:99:ed:5f:87:0d:a3:1a:8a:ef:aa:ca:04:9b:
b7:61:0e:81:f9:ca:be:cd:88:2c:95:fb:c8:c5:5a:29:64:29:
02:9e:51:19:67:a1:d6:65:4f:67:b2:1d:7a:06:0a:16:26:1a:
9d:7b:19:47:08:f5:f9:fb:8f:35:9f:6c:af:c8:a7:81:f2:41:
be:10:18:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:52:18 2026 by rpki-client