Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/vkSBou13YVLJcpm4RzlvkM2VmEA.roa
File: vkSBou13YVLJcpm4RzlvkM2VmEA.roa (raw, json)
Hash identifier: Yt5SBPreKEhsGRzUNTyivVfBSSg7gYCaurShg3S49zg=
Subject key identifier: BE:44:81:A2:ED:77:61:52:C9:72:99:B8:47:39:6F:90:CD:95:98:40
Certificate issuer: /CN=1319f052bc9e7284888074390c9d0bc127606692
Certificate serial: 019E3BFA8F0A9727EF60BB7BB9C9826CE3C3
Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/vkSBou13YVLJcpm4RzlvkM2VmEA.roa
Signing time: Mon 18 May 2026 16:45:36 +0000
ROA not before: Mon 18 May 2026 16:45:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20940
IP address blocks: 193.126.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3b:fa:8f:0a:97:27:ef:60:bb:7b:b9:c9:82:6c:e3:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692
Validity
Not Before: May 18 16:45:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be4481a2ed776152c97299b847396f90cd959840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cd:5f:28:3c:ba:a0:4e:9f:cf:18:85:b8:26:
f1:04:9d:68:25:22:ec:f4:7a:88:ab:f8:dc:4c:1c:
ac:9f:d6:84:af:89:c2:07:d7:f1:e5:bf:6e:5a:c1:
75:ee:ae:64:1c:f6:69:79:09:71:6d:ae:60:df:b2:
b8:db:67:12:39:bb:63:97:ce:71:41:6e:77:a7:cb:
84:ad:3b:31:41:86:92:9f:33:d9:a6:fa:79:16:46:
67:24:16:96:f9:0e:48:a3:b5:9c:cc:60:cf:30:af:
5d:e6:ae:8c:3e:fe:b2:d8:34:56:f5:17:60:c9:a3:
23:9c:62:12:db:97:1c:68:5a:fd:fc:ee:db:11:38:
b4:06:95:3d:ad:c7:9a:c2:e9:cf:62:e8:af:2c:3d:
1d:ec:fe:e9:ec:c0:32:61:30:a5:46:b5:f8:d3:e5:
f8:48:a0:e1:79:33:96:11:e0:5e:59:2a:1f:c3:ac:
08:a3:6c:25:8e:e8:4a:c3:58:7e:07:62:ce:42:ad:
e5:85:55:b1:44:25:91:56:d6:a0:9b:c2:d4:a3:b8:
f6:19:a3:45:19:0b:81:18:87:6a:4b:af:31:27:5b:
89:cb:bd:4a:9f:13:10:b6:10:26:81:93:aa:c9:7a:
ee:9c:53:67:cd:67:59:12:92:06:2d:1d:53:5f:76:
18:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:44:81:A2:ED:77:61:52:C9:72:99:B8:47:39:6F:90:CD:95:98:40
X509v3 Authority Key Identifier:
keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/vkSBou13YVLJcpm4RzlvkM2VmEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.126.115.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:e0:34:dc:6a:32:a9:b0:8a:94:bf:7d:a9:32:11:25:37:0b:
03:56:6f:53:e9:1b:7e:e8:b4:a8:09:59:1a:32:62:b0:f7:08:
48:8e:6f:56:5a:22:e9:49:60:4e:a4:9d:80:e4:97:1b:41:29:
df:16:9d:2e:aa:33:74:5a:ae:5e:fd:49:f2:91:f3:51:36:02:
f8:af:1f:7f:f1:66:3a:79:0b:41:0d:07:80:7c:26:c6:7e:63:
f4:d8:29:c0:b8:0a:ea:da:a5:b7:aa:fb:ce:f4:b2:94:04:36:
5b:2e:47:3a:97:59:c9:be:19:44:84:0c:0a:fc:56:e7:c0:ac:
90:64:f3:f1:34:2c:76:e1:44:77:87:f1:b1:6f:a0:be:d4:62:
22:54:64:a2:90:02:b2:5d:17:47:45:c0:63:ca:4b:32:0f:bd:
cf:f5:22:4f:2b:6c:d4:c3:c7:d4:af:b1:24:ca:d5:17:9c:b5:
7e:98:54:49:75:3d:8e:03:51:65:16:a5:71:71:64:77:56:d5:
56:0b:7c:64:18:81:f8:b9:9d:8e:80:59:d9:15:e9:4c:82:f6:
eb:8e:88:c4:33:ad:22:44:89:3d:d0:e3:0f:83:20:72:e2:30:
13:c8:a1:b8:3f:1a:bc:d0:c2:4e:72:52:1f:34:ff:c0:fc:62:
82:54:05:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:48:12 2026 by rpki-client