Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/Vm_I-DBscNqiVbOgoypemEsb6QU.roa
File: Vm_I-DBscNqiVbOgoypemEsb6QU.roa (raw, json)
Hash identifier: ln44SBz8h1j445mliLf7/E0u0b9+iixoMeoBPujm+KU=
Subject key identifier: 56:6F:C8:F8:30:6C:70:DA:A2:55:B3:A0:A3:2A:5E:98:4B:1B:E9:05
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 019F23694B76CC57F3013D50E61B549649B6
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/Vm_I-DBscNqiVbOgoypemEsb6QU.roa
Signing time: Thu 02 Jul 2026 15:18:50 +0000
ROA not before: Thu 02 Jul 2026 15:18:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204229
IP address blocks: 91.245.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 06:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:4b:76:cc:57:f3:01:3d:50:e6:1b:54:96:49:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Jul 2 15:18:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=566fc8f8306c70daa255b3a0a32a5e984b1be905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ff:65:41:81:1c:05:3b:09:57:36:e1:c9:27:
a8:cb:cc:a4:3b:1b:e2:c4:a6:df:6a:ef:9b:76:d0:
8d:1d:8a:70:75:36:8c:f1:3c:9c:bf:f3:e7:3a:a7:
d3:d8:09:e8:a9:24:c7:80:4f:24:9a:5c:30:72:44:
c8:fd:c8:58:ff:98:2f:a2:db:95:9a:1d:b8:c7:aa:
f4:e3:25:3e:94:47:d6:13:af:c6:f4:71:02:74:cc:
3a:c7:29:4a:9a:8f:4b:71:32:28:41:36:1e:d1:b4:
f9:ba:8a:f6:b3:b5:c4:6b:30:de:83:ef:c5:d1:49:
d3:c6:5d:02:59:f0:41:6f:ad:ee:da:e3:81:56:14:
7f:91:3a:71:d4:7b:fa:4d:83:ee:07:6e:74:15:d3:
57:e7:3d:58:ad:04:73:e0:9f:ac:a8:e4:20:25:51:
42:81:aa:e4:4c:29:cc:03:eb:e1:39:14:8b:53:3d:
47:2e:f2:57:2f:69:5a:67:14:c9:91:71:70:fe:11:
4f:2d:94:b6:da:29:e0:ee:72:75:c9:05:76:4e:c2:
5e:cf:70:20:11:af:a0:aa:02:fc:b7:0f:b4:ad:5a:
45:62:25:03:0f:2a:7e:cb:ed:6c:9e:5c:63:2b:92:
e9:ef:78:13:09:6d:e7:67:4d:e3:68:40:0d:23:7a:
c9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:6F:C8:F8:30:6C:70:DA:A2:55:B3:A0:A3:2A:5E:98:4B:1B:E9:05
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/Vm_I-DBscNqiVbOgoypemEsb6QU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.245.188.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:a2:db:d3:66:ef:c0:9b:dc:b2:55:f2:8a:46:8f:5e:c1:58:
e1:11:29:b9:6e:63:8b:02:fa:4f:d0:a5:67:7f:bd:b3:46:8e:
75:b3:93:c5:3f:55:e8:aa:a4:35:74:57:03:26:ff:01:4b:0a:
39:e0:0e:cd:26:04:ad:fd:88:1f:a7:f5:2c:b8:79:90:be:e2:
8d:49:03:80:53:f4:87:14:53:2f:96:e4:9c:ec:31:d6:dc:be:
d6:72:5a:2e:50:37:59:07:7f:01:0b:64:e3:7a:d2:63:5e:ae:
8c:77:39:ac:cb:28:bf:6c:6b:45:f6:63:ad:50:8c:6a:6c:98:
d7:5e:8e:16:57:e2:2c:b8:83:07:a0:ec:81:95:83:5d:bd:34:
77:6a:6d:02:e5:f3:6b:dd:b8:c8:2c:76:bb:7d:b2:da:a0:a6:
95:84:25:47:96:8a:39:83:c7:a3:42:0c:a5:06:f3:e0:4c:de:
9c:a9:cc:7f:92:f1:c3:78:a9:53:12:ee:cb:52:49:41:4e:8b:
b9:9f:c3:f8:bc:6e:82:e3:3c:33:6c:9b:ff:26:2e:f5:fd:5d:
2a:85:dc:26:dd:90:fa:2e:0d:92:da:b3:3c:45:f2:d9:13:05:
64:cf:8a:cb:aa:22:bd:74:3e:fb:06:25:ff:91:eb:2f:5f:b7:
ca:6b:f9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:22:42 2026 by rpki-client