Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/vChO-vpf9CU6-cIDHi6Si1rNTgI.roa
File: vChO-vpf9CU6-cIDHi6Si1rNTgI.roa (raw, json)
Hash identifier: PLgA9Mjh1nSwZ7yCAQUoY+nA9ADiLlg/FNKW6oLUeHI=
Subject key identifier: BC:28:4E:FA:FA:5F:F4:25:3A:F9:C2:03:1E:2E:92:8B:5A:CD:4E:02
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019E9349D740762CF397D050E3C42D550A8E
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/vChO-vpf9CU6-cIDHi6Si1rNTgI.roa
Signing time: Thu 04 Jun 2026 15:39:10 +0000
ROA not before: Thu 04 Jun 2026 15:39:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215133
IP address blocks: 87.232.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:93:49:d7:40:76:2c:f3:97:d0:50:e3:c4:2d:55:0a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Jun 4 15:39:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc284efafa5ff4253af9c2031e2e928b5acd4e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3e:24:7e:6c:53:81:fb:a7:fb:38:9f:f7:5e:
71:16:8f:6c:b4:52:37:77:76:67:8f:99:fe:89:0d:
c2:d5:35:03:27:39:19:a3:82:76:6c:4f:04:61:20:
6b:92:d0:1d:34:13:9b:6c:ec:5c:ed:e7:be:cb:e7:
98:4b:93:b1:73:b9:fe:62:29:b6:49:e2:9c:2f:f5:
40:2d:5c:d7:d3:c5:25:df:3c:46:48:db:e2:59:f1:
d8:86:15:a8:93:3c:05:7b:35:c2:0c:e7:33:1d:03:
e0:7f:94:ec:c2:34:90:f2:f5:87:4a:78:fd:d3:8a:
13:84:13:d4:4e:4e:93:76:4b:ed:be:42:0d:b8:ab:
bb:b3:ed:bf:fc:19:62:05:bd:70:5c:37:ef:a1:75:
80:7f:0d:bd:df:05:f2:92:a9:ce:cb:18:7f:ee:50:
12:a6:cd:2f:13:57:bb:25:07:78:42:7f:c8:c1:89:
91:7f:8b:7b:d5:e0:04:11:71:c0:66:33:24:a4:4d:
cc:ef:30:6a:6f:99:f9:64:2f:19:ac:4a:7c:c8:22:
2e:f4:b8:91:fc:2e:23:43:fb:51:cf:31:d5:b6:51:
a0:cc:db:2c:dd:b1:fe:e7:f9:46:23:2f:0f:08:c0:
2e:e7:b7:e1:6c:d6:c5:05:f2:24:9b:b1:82:28:50:
59:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:28:4E:FA:FA:5F:F4:25:3A:F9:C2:03:1E:2E:92:8B:5A:CD:4E:02
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/vChO-vpf9CU6-cIDHi6Si1rNTgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.111.0/24
Signature Algorithm: sha256WithRSAEncryption
94:9e:13:58:74:f6:29:50:93:a8:63:cd:1b:00:4c:b6:ab:7b:
86:3e:f1:72:9f:b6:00:f7:2e:a2:9a:58:4d:94:99:ed:6d:da:
ea:a9:bb:5c:1d:1b:d4:ce:e1:99:0e:19:69:3f:27:a8:ab:97:
28:84:7d:9c:3e:86:2e:b4:84:d1:c4:c3:36:0b:c1:7c:e1:f1:
10:a6:3d:01:3a:61:ac:74:ee:dc:68:56:b2:28:3e:ce:b8:37:
1e:2a:e6:81:26:64:4d:4c:74:f3:58:d8:d8:52:ae:51:1d:73:
4e:61:ad:dc:d4:95:3d:9f:ed:29:10:fe:c1:b4:ac:d3:20:33:
9a:db:22:28:44:36:79:21:4b:27:aa:c7:5d:48:d4:c6:65:fe:
e5:7a:62:de:78:52:92:33:b5:e1:8f:d4:81:01:a6:2a:e8:7c:
b0:e7:6f:a0:b5:ed:28:f1:d4:3b:4b:28:f7:e0:e2:3c:fe:05:
35:e9:e1:f0:e6:c1:de:de:1a:b2:fb:20:a0:8e:f4:60:11:f9:
9a:a7:0c:b0:e5:04:16:34:2d:65:5a:cf:19:ac:a7:8d:8b:7b:
ad:04:63:6c:7d:cf:f6:eb:b7:1b:5f:93:ee:b9:9b:af:e9:85:
30:73:05:e7:40:93:1f:26:a9:87:81:71:a9:2a:6b:f2:e4:c5:
2f:32:49:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:30:58 2026 by rpki-client