Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/vpcW0ASyWjfWJWvvCqaCGpZPbyo.roa
File: vpcW0ASyWjfWJWvvCqaCGpZPbyo.roa (raw, json)
Hash identifier: B0yxelyt26ZxGmvWUfyG/XNGIce+zZMZfsM4lchOpzA=
Subject key identifier: BE:97:16:D0:04:B2:5A:37:D6:25:6B:EF:0A:A6:82:1A:96:4F:6F:2A
Certificate issuer: /CN=3de2681dda00702a7597a71257e14f7a725e890e
Certificate serial: 01A063205CDE483DE4CFD95041F88AAB61DA
Authority key identifier: 3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/vpcW0ASyWjfWJWvvCqaCGpZPbyo.roa
Signing time: Wed 02 Sep 2026 17:17:40 +0000
ROA not before: Wed 02 Sep 2026 17:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30286
IP address blocks: 145.43.252.0/23 maxlen: 32
145.43.252.0/24 maxlen: 32
145.43.252.20/32 maxlen: 32
145.43.252.21/32 maxlen: 32
145.43.253.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:63:20:5c:de:48:3d:e4:cf:d9:50:41:f8:8a:ab:61:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de2681dda00702a7597a71257e14f7a725e890e
Validity
Not Before: Sep 2 17:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be9716d004b25a37d6256bef0aa6821a964f6f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bd:72:09:27:ae:bc:81:7c:a0:11:13:b8:19:
06:8f:39:f1:7b:f7:e2:b0:50:67:cc:a5:dd:19:32:
e4:9f:93:23:9b:0a:c4:52:7a:77:6d:59:50:ae:2f:
cc:52:6c:eb:36:24:5a:f3:f8:61:ac:09:89:64:0b:
97:94:8d:66:8b:3d:c1:b6:a0:38:18:11:cf:89:b9:
8d:bc:d2:21:1f:1d:1e:6c:87:45:7d:12:23:2f:59:
a4:41:c2:3e:43:b7:bb:8a:1e:70:df:5d:79:22:02:
f8:62:bf:0a:b6:4b:f3:03:25:40:f1:74:0b:f3:26:
4b:bd:f3:a6:62:3a:3d:1b:05:e8:32:6f:ea:7f:d7:
95:cf:49:18:33:a4:84:56:9e:26:71:95:ed:00:e3:
d2:02:ca:1b:24:f5:a4:e7:7c:ed:84:07:57:2f:e4:
81:2d:e7:80:73:1a:03:70:6e:f4:85:bc:01:34:de:
37:a2:db:3e:8c:f4:45:8b:56:1f:17:10:84:2c:9b:
5a:3d:5a:b6:92:db:eb:53:0b:df:8a:60:c7:d4:18:
cc:1b:42:18:fc:27:15:9c:9f:52:e0:e2:e4:5b:24:
27:0f:b6:ef:89:95:af:90:65:eb:84:25:30:d4:49:
b8:f8:c5:0c:95:96:ba:1e:fe:7c:b1:83:4a:85:cd:
b9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:97:16:D0:04:B2:5A:37:D6:25:6B:EF:0A:A6:82:1A:96:4F:6F:2A
X509v3 Authority Key Identifier:
keyid:3D:E2:68:1D:DA:00:70:2A:75:97:A7:12:57:E1:4F:7A:72:5E:89:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeJoHdoAcCp1l6cSV-FPenJeiQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/vpcW0ASyWjfWJWvvCqaCGpZPbyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/36d6e4-8d77-48d5-afb6-e0ac7263db12/1/PeJoHdoAcCp1l6cSV-FPenJeiQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.43.252.0/23
Signature Algorithm: sha256WithRSAEncryption
46:aa:94:ab:74:75:1e:7a:d6:68:04:28:dc:01:7c:c6:29:9f:
43:7a:0c:08:f4:b6:96:0f:4f:42:18:87:15:8b:cb:6e:af:bb:
9f:7f:8c:62:c6:7f:2f:3b:40:64:2f:46:67:f8:90:f5:43:c7:
b6:b1:39:4f:a6:fc:23:0b:87:c0:fb:6a:06:e3:ee:f4:fd:4c:
af:de:c5:30:eb:0d:8c:bc:7e:34:cf:72:a4:77:b0:3e:fa:00:
b8:9e:af:c8:b9:94:c1:50:3e:27:25:b4:e5:1d:a8:bb:0f:0c:
e3:42:e7:28:7d:f8:45:73:96:1e:0e:da:4c:fc:a2:99:6e:b8:
35:0a:67:63:06:9e:56:cc:e4:4b:68:55:4f:3e:50:57:3e:97:
32:26:b6:f8:e7:2a:58:68:68:dc:f6:ff:c4:c3:15:5d:f9:bd:
21:d1:fb:aa:66:df:a3:91:98:65:a2:ce:0b:cc:bb:32:2b:bd:
c9:ec:99:4a:8a:e8:05:33:73:06:52:6a:14:94:06:4b:0f:61:
54:f0:66:73:9f:b1:c5:53:ec:71:a3:9e:e9:15:73:78:8a:fb:
a7:30:14:c5:44:f9:de:8b:40:fe:30:c8:17:d4:64:4a:ab:bf:
82:82:c4:b8:45:69:75:29:1a:d4:42:05:55:4f:38:2b:4e:64:
31:fd:11:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:20 2026 by rpki-client