Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/vaws-jaW3PuTPx0z2nsRGCr0OGQ.roa
File: vaws-jaW3PuTPx0z2nsRGCr0OGQ.roa (raw, json)
Hash identifier: Zv1crVWU2SJCgoulPO5QlvRO9ESYG9SyXRdgkNWxWmM=
Subject key identifier: BD:AC:2C:FA:36:96:DC:FB:93:3F:1D:33:DA:7B:11:18:2A:F4:38:64
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 019F4CB69CC7DFC60BED77FCFE8A17997948
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/vaws-jaW3PuTPx0z2nsRGCr0OGQ.roa
Signing time: Fri 10 Jul 2026 15:47:43 +0000
ROA not before: Fri 10 Jul 2026 15:47:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 43.240.150.0/24 maxlen: 24
43.240.151.0/24 maxlen: 24
91.109.40.0/24 maxlen: 24
91.109.41.0/24 maxlen: 24
91.109.43.0/24 maxlen: 24
91.109.44.0/24 maxlen: 24
91.109.45.0/24 maxlen: 24
91.109.46.0/24 maxlen: 24
147.185.196.0/24 maxlen: 24
207.244.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4c:b6:9c:c7:df:c6:0b:ed:77:fc:fe:8a:17:99:79:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Jul 10 15:47:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bdac2cfa3696dcfb933f1d33da7b11182af43864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:51:31:88:2f:14:07:5a:0f:f8:2c:48:b2:f4:
bb:97:13:9d:27:f9:00:09:a6:df:0a:f9:44:2f:90:
d5:f2:de:ff:0a:e6:1e:e8:47:5c:8e:86:d8:22:07:
d3:a5:f1:2b:1d:96:28:29:3b:ca:17:2f:23:61:97:
76:43:f1:b3:d7:5b:15:06:bf:be:e3:b1:2c:a0:85:
ef:f0:f5:4c:d4:6d:d6:94:c1:c0:30:23:14:66:6f:
f7:14:62:c9:92:bd:f3:35:ed:93:1b:d9:d2:fa:8c:
80:5e:c2:0f:8a:7d:a4:b5:ea:9c:88:eb:30:f5:de:
26:4b:e5:d2:ba:65:e5:2f:96:12:46:be:18:9d:a2:
36:48:c5:07:81:bc:6b:2e:9f:31:93:b1:b4:62:f6:
3d:c6:b8:10:24:e6:a5:ab:d9:81:fc:c4:a5:4a:cb:
7f:7b:87:2d:1c:dc:20:08:45:30:26:06:13:79:38:
bc:0f:7b:66:e0:3f:d4:c3:6b:24:c8:a2:b2:72:6a:
00:71:ec:23:4a:12:bd:17:73:44:33:5c:cc:3d:36:
fa:ed:67:ca:c0:2a:e3:8a:4d:36:4e:b9:72:9d:70:
ae:15:21:31:f4:56:95:7a:a7:5c:7d:0f:24:56:fa:
7c:4a:f2:fa:c9:fc:dc:85:86:32:62:cb:8b:56:0b:
df:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:AC:2C:FA:36:96:DC:FB:93:3F:1D:33:DA:7B:11:18:2A:F4:38:64
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/vaws-jaW3PuTPx0z2nsRGCr0OGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.240.150.0/23
91.109.40.0/23
91.109.43.0-91.109.46.255
147.185.196.0/24
207.244.198.0/24
Signature Algorithm: sha256WithRSAEncryption
52:e3:b7:f9:b7:db:fb:49:cc:52:47:85:d3:a4:53:06:28:ce:
4e:a3:b2:17:25:4a:d8:0d:10:ef:67:91:48:08:b5:75:6c:5a:
75:90:a3:ed:02:9c:10:91:92:6f:53:ef:26:57:b6:09:5d:60:
fd:32:84:39:92:92:7d:45:f0:d3:2e:a3:bb:f6:c2:92:80:84:
af:b6:bd:77:05:ed:d1:1a:83:41:ab:24:75:20:1a:c5:a2:97:
a0:24:49:8d:11:b9:6a:eb:cd:f1:38:ad:39:03:51:12:20:d5:
3a:46:fe:b9:95:07:af:09:cb:5f:0e:5d:4a:75:62:78:83:3f:
f8:9f:47:52:ff:a0:de:30:84:57:d4:30:21:d9:53:39:c2:16:
7f:59:4e:86:12:04:00:47:05:61:e2:8c:cb:b1:7f:9b:d7:78:
90:4f:9c:59:ac:6f:51:f9:b3:19:0b:13:8c:f8:97:e0:d5:92:
05:29:ea:5a:df:cd:a7:60:69:e1:b7:52:d4:2d:f1:b8:09:cb:
a9:ce:38:a8:28:2d:17:28:e3:45:14:df:4b:99:b7:29:c0:41:
8e:02:d7:84:54:c1:c1:b9:3f:f0:67:d8:f4:52:9c:65:8c:15:
28:a6:b2:61:29:28:30:22:1f:8e:73:33:90:8a:3d:a9:8e:8a:
f6:a7:03:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:46:58 2026 by rpki-client