Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/VpPugUwpNHHib5991tPCGdRefFY.roa
File: VpPugUwpNHHib5991tPCGdRefFY.roa (raw, json)
Hash identifier: EpUcGsNtANn2I92T+Rtp83mAtSBCb2jhc++YQOzThrE=
Subject key identifier: 56:93:EE:81:4C:29:34:71:E2:6F:9F:7D:D6:D3:C2:19:D4:5E:7C:56
Certificate issuer: /CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Certificate serial: 019EEDFC474CD2E85963962A72E97343EFFB
Authority key identifier: EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/VpPugUwpNHHib5991tPCGdRefFY.roa
Signing time: Mon 22 Jun 2026 06:19:53 +0000
ROA not before: Mon 22 Jun 2026 06:19:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400951
IP address blocks: 64.178.112.0/23 maxlen: 24
189.24.122.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft
rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ed:fc:47:4c:d2:e8:59:63:96:2a:72:e9:73:43:ef:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebaf0d20f98e3a20550c996d74292688f0d2279d
Validity
Not Before: Jun 22 06:19:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5693ee814c293471e26f9f7dd6d3c219d45e7c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:95:63:16:d5:da:e0:1b:e0:5e:15:3b:92:c5:
c2:1f:ee:1e:a0:21:e2:23:c0:1f:c4:be:69:6d:46:
55:ba:86:5b:88:57:39:eb:d1:15:93:5d:6e:aa:de:
a9:aa:c5:c3:ca:d7:7b:88:79:0a:52:8e:e6:5b:8d:
cd:d7:ed:c0:31:64:54:61:d3:1a:e4:42:c0:e8:32:
61:c5:dc:e5:24:8a:8f:ca:43:0e:be:8c:0b:ab:25:
8b:c8:32:3c:59:4b:39:22:60:2a:7e:78:8d:59:3e:
46:b2:76:eb:2f:da:82:85:1b:bc:c3:a4:87:ce:e8:
3a:59:c4:fa:6b:73:ae:e2:e6:bc:80:c6:0c:94:77:
b5:40:08:49:3e:77:80:64:ce:ee:91:7f:f9:2a:6d:
ea:2f:10:fa:21:d6:4d:08:a8:fb:a0:48:98:43:c3:
8f:bc:54:1f:fb:d0:6d:29:21:c9:96:45:49:0f:95:
8c:31:ae:d4:45:70:7b:31:df:fc:6a:42:b9:cb:3a:
29:ce:92:b7:0f:92:25:e6:93:25:a2:23:89:13:49:
9c:bc:7f:a4:b8:5f:75:70:f3:90:e5:9e:21:2b:67:
95:b0:81:f4:c8:e5:3e:6f:37:50:4e:23:f5:ca:1e:
9c:de:08:79:9d:c2:3a:38:f4:b9:44:eb:58:2a:12:
73:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:93:EE:81:4C:29:34:71:E2:6F:9F:7D:D6:D3:C2:19:D4:5E:7C:56
X509v3 Authority Key Identifier:
keyid:EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/VpPugUwpNHHib5991tPCGdRefFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.178.112.0/23
189.24.122.0/23
Signature Algorithm: sha256WithRSAEncryption
57:c8:2b:49:eb:64:a7:05:c5:96:59:b6:7e:21:90:e6:bf:b3:
67:5d:a8:80:18:5b:ae:51:51:6c:de:d4:e7:c3:b9:ac:8d:9f:
c5:1c:55:6f:9f:f3:90:ee:c5:cf:33:3d:81:2a:4b:f5:18:d3:
e0:98:2d:13:42:31:ab:1b:30:39:a5:a3:65:24:f3:dd:ef:3d:
ca:ea:16:4f:09:5a:7b:25:db:77:7a:3c:d6:6a:5d:8e:aa:76:
04:6f:76:52:72:ae:b1:51:29:a0:24:ae:12:da:b3:d1:ea:db:
ec:19:f8:bb:a4:a8:80:1f:af:60:72:a4:d7:fe:b3:68:f7:6b:
d6:e9:07:c1:c8:b3:9f:d9:cf:70:d9:de:d2:76:fa:e2:bf:5d:
89:d6:76:3f:e9:18:02:be:83:38:f3:c4:a8:89:55:27:a8:03:
b7:88:89:76:99:d6:e7:d2:3d:44:b5:d5:80:28:16:9b:46:3d:
b9:ab:50:dc:cc:37:f1:cc:62:5f:35:29:75:27:e3:54:bd:fd:
b2:21:67:aa:a5:f7:26:31:60:37:2c:b9:9a:b3:39:79:48:20:
45:79:a5:4b:88:33:e8:a8:fa:76:10:c8:f2:eb:ec:1f:f8:27:
0b:f4:41:5e:ad:c4:84:7a:4f:9e:4e:5b:c6:56:50:db:c5:97:
59:ee:83:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:26:39 2026 by rpki-client