Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/vrDhZX2ZNfjnx26fxl3vAAI9s6E.roa
File: vrDhZX2ZNfjnx26fxl3vAAI9s6E.roa (raw, json)
Hash identifier: 84pKlbPZ9+QV78kYwmFxovpheGyIQe5S0FnW9646W5M=
Subject key identifier: BE:B0:E1:65:7D:99:35:F8:E7:C7:6E:9F:C6:5D:EF:00:02:3D:B3:A1
Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321
Certificate serial: 01A139E5F1F6A7CFB67A9391A770B483D2AC
Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/vrDhZX2ZNfjnx26fxl3vAAI9s6E.roa
Signing time: Wed 14 Oct 2026 10:12:13 +0000
ROA not before: Wed 14 Oct 2026 10:12:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215391
IP address blocks: 185.7.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:e5:f1:f6:a7:cf:b6:7a:93:91:a7:70:b4:83:d2:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321
Validity
Not Before: Oct 14 10:12:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=beb0e1657d9935f8e7c76e9fc65def00023db3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d4:18:7d:65:1d:66:cd:55:65:4e:fe:92:6b:
4f:59:c1:fb:73:a9:ea:84:89:07:b5:8c:db:4b:0a:
9a:e8:b6:da:cf:5f:56:16:0b:85:1c:ba:19:35:04:
aa:d5:94:6e:5c:2b:16:e3:ba:9b:6c:96:fe:69:61:
d1:a2:47:09:4c:50:2e:92:05:e8:81:13:9f:22:04:
13:d8:77:81:2c:91:d4:a8:b2:93:9c:f1:62:67:1b:
ce:6d:f9:82:17:a0:c1:f9:4e:6d:4f:fe:5e:59:80:
d1:0f:08:00:07:37:23:6a:ab:bd:8c:dc:be:04:cd:
8f:e1:34:e4:74:38:9f:e5:11:dc:d1:0d:d7:3a:17:
61:64:92:9c:e2:9a:8b:51:4a:f4:2b:3c:48:62:a6:
43:fa:48:b3:65:e3:de:5c:e1:45:59:0a:3e:82:d7:
14:46:95:a4:1d:92:bf:aa:76:52:f2:16:0b:9a:b9:
24:83:6e:72:ca:a2:80:10:52:b4:a3:dc:9b:2b:32:
46:f6:b5:06:a4:4a:dc:93:5a:b8:54:8e:6e:f1:fc:
e2:31:0a:95:e4:67:c4:7e:2e:c5:cf:25:73:50:f9:
a0:f2:2e:cd:9e:7a:76:90:d9:2e:50:64:06:8a:4a:
e0:eb:cf:1e:8d:25:9e:2d:ea:1b:6b:ed:36:04:6b:
b6:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B0:E1:65:7D:99:35:F8:E7:C7:6E:9F:C6:5D:EF:00:02:3D:B3:A1
X509v3 Authority Key Identifier:
keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/vrDhZX2ZNfjnx26fxl3vAAI9s6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.243.0/24
Signature Algorithm: sha256WithRSAEncryption
56:be:55:97:d3:a4:13:f0:92:28:dc:e1:82:c2:81:53:18:37:
f5:5a:88:b7:fc:7f:2f:aa:cf:8e:df:7c:49:e5:23:8f:00:78:
1b:4d:9d:f5:b4:1a:d7:3f:04:96:54:ba:dc:95:c1:8e:ab:19:
a0:a7:31:2a:c3:b2:b1:ee:ff:0c:62:23:88:a1:c2:bb:96:7a:
17:c9:44:c5:da:3b:82:ab:a2:29:16:54:19:4b:ab:ad:87:6b:
46:f0:be:9d:f3:a9:82:fb:70:8f:7d:03:ab:a1:2a:6a:14:5c:
9a:f9:a4:48:43:f4:07:bf:99:2f:e0:d0:8a:80:f2:89:8b:c9:
bb:86:ef:17:dd:bf:4a:d6:ad:f0:15:de:2c:93:0a:cc:04:31:
75:4e:19:b0:37:28:fd:06:ca:f0:2b:c2:37:42:fe:25:fd:72:
37:32:1f:ed:ec:91:18:9b:23:a0:0c:36:dd:db:52:72:9c:d3:
03:7b:96:6c:ea:bc:2e:de:b1:0a:73:48:9a:1f:95:d2:6d:8e:
be:c9:87:63:f1:b3:7d:7e:a7:b8:3b:5c:f8:0c:3a:3b:a9:ea:
4a:13:dc:07:42:a0:8a:ca:c1:e5:37:8f:1e:b2:cf:99:54:40:
8e:28:bb:6e:dc:2e:69:ac:b8:b5:a7:15:4a:a7:e6:9f:c1:64:
dd:b6:e4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:54:48 2026 by rpki-client