Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/VAKZwMsOUpQM3ji4eQLR6rau3ro.roa
File: VAKZwMsOUpQM3ji4eQLR6rau3ro.roa (raw, json)
Hash identifier: 7mPx1NPTZPPn8IH1ERI2KaXkAsS9XTH6u3zSnaq3sNg=
Subject key identifier: 54:02:99:C0:CB:0E:52:94:0C:DE:38:B8:79:02:D1:EA:B6:AE:DE:BA
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01A1406369B78D4E737E75A2CD756C54D222
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/VAKZwMsOUpQM3ji4eQLR6rau3ro.roa
Signing time: Thu 15 Oct 2026 16:26:59 +0000
ROA not before: Thu 15 Oct 2026 16:26:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43260
IP address blocks: 5.181.84.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
195.211.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:63:69:b7:8d:4e:73:7e:75:a2:cd:75:6c:54:d2:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 15 16:26:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=540299c0cb0e52940cde38b87902d1eab6aedeba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ca:01:1f:ac:05:8b:f1:21:ab:10:c5:55:c9:
83:f7:59:ce:b0:ff:37:35:68:ac:c1:40:89:c8:90:
78:1b:71:95:f2:4e:bc:c8:60:95:df:4b:3a:54:16:
b7:8f:dc:1a:7d:1a:c8:11:6f:ab:60:a2:bc:a2:e9:
59:cb:db:38:30:dd:0f:84:ef:bf:32:9d:3b:f5:fc:
7b:f2:62:09:58:13:84:b7:c9:0e:ba:cb:4c:2b:e6:
78:08:3d:31:92:83:30:9e:e7:fb:3d:5a:2d:e4:98:
1c:48:ca:69:09:a3:90:b1:32:36:58:4e:1c:cb:49:
46:ce:8f:c8:2a:27:46:c3:7b:b5:2d:e3:75:01:2f:
9c:0c:d8:2b:f2:5b:19:e3:68:f4:82:6c:db:43:b2:
4a:67:10:79:75:89:2e:5d:92:97:53:dd:53:0f:19:
2d:19:39:77:17:81:86:7d:95:a7:44:e6:a8:04:a3:
e2:e9:ab:0b:1f:60:d7:28:a6:7a:a3:9a:5c:d7:8d:
41:85:c8:e6:2b:33:cb:19:e8:7c:bb:a2:84:a9:97:
ff:44:d3:e3:96:96:ab:a0:4c:c8:05:d8:42:30:85:
c4:34:dd:e7:b9:d1:ba:83:89:c8:f7:df:1a:a6:95:
6f:db:1a:19:53:1a:45:22:33:50:14:50:30:ab:f1:
0f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:02:99:C0:CB:0E:52:94:0C:DE:38:B8:79:02:D1:EA:B6:AE:DE:BA
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/VAKZwMsOUpQM3ji4eQLR6rau3ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.84.0/24
5.181.87.0/24
185.200.63.0/24
195.211.190.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:ff:47:33:ba:56:43:cd:7b:cc:47:d4:7c:1d:25:78:63:62:
e5:62:7e:ce:69:6e:78:15:39:f6:8c:50:83:b9:77:33:f9:d8:
de:fe:be:7b:0e:7d:62:7e:f0:b8:49:dd:40:5d:bf:c1:a8:0e:
03:f6:36:d6:aa:51:c8:87:a4:e0:01:d5:ef:a6:1d:85:8f:8b:
92:3e:03:4c:e2:f4:fc:94:ff:bb:5e:be:58:a0:f4:c3:85:e9:
52:bc:b9:e1:77:76:b1:b1:ea:31:7d:10:55:e7:b8:e7:99:46:
6e:f6:83:ee:91:97:e5:4d:ff:d9:37:fb:42:dd:37:65:ab:8b:
0f:26:5b:35:4c:53:93:e7:64:d5:eb:a0:70:36:0a:21:9b:78:
87:23:54:88:06:99:ef:80:30:43:3b:dc:3a:69:96:24:6f:10:
60:56:48:55:74:98:8c:f6:50:b5:3d:8c:d8:ed:4b:e3:60:0d:
78:bf:35:51:fe:cc:9d:01:d2:65:fa:85:11:59:07:d1:be:cc:
50:ae:8a:b7:a2:1e:77:47:1e:fd:62:ae:89:dd:87:99:00:b0:
40:27:e5:fa:55:90:c4:dc:b1:40:38:d2:a5:48:98:65:ca:f8:
33:42:5a:12:e0:f4:7e:0a:71:ef:c5:d0:db:ff:85:ea:9a:33:
6c:32:7f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:48:27 2026 by rpki-client