Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/VBZnZaxJkQHfgvSxcA_HYb9EzrA.roa
File: VBZnZaxJkQHfgvSxcA_HYb9EzrA.roa (raw, json)
Hash identifier: 9C23r030WWJQgdKICW4rbznKfFHyOPuj73RFrEUf0II=
Subject key identifier: 54:16:67:65:AC:49:91:01:DF:82:F4:B1:70:0F:C7:61:BF:44:CE:B0
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A00DABA72A5A0DAA2FA078FE7209B750F5
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/VBZnZaxJkQHfgvSxcA_HYb9EzrA.roa
Signing time: Mon 17 Aug 2026 03:02:28 +0000
ROA not before: Mon 17 Aug 2026 03:02:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219393
IP address blocks: 212.189.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0d:ab:a7:2a:5a:0d:aa:2f:a0:78:fe:72:09:b7:50:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 17 03:02:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54166765ac499101df82f4b1700fc761bf44ceb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:de:fb:cb:bc:93:02:3d:14:e7:6d:69:f4:d0:
ae:7e:b6:e3:bb:ce:28:7d:ed:81:54:59:7a:e4:22:
2b:56:ef:a8:f5:a3:fa:08:95:5f:57:a7:85:c4:ed:
7a:7e:53:69:e2:8c:36:ba:10:b6:ea:5b:5e:1c:d1:
2d:a0:49:f6:b2:2b:c0:98:66:5a:96:9a:6c:1a:ec:
38:f9:c1:f0:51:f8:70:57:55:0e:3d:0f:34:a5:a4:
0b:03:fa:4d:49:6f:08:64:26:81:cc:81:60:4b:c5:
31:0d:7f:f5:d0:02:a4:fe:9d:09:b3:21:4a:e8:e7:
04:44:f9:0b:1c:2b:50:ca:d5:35:c7:68:22:b0:18:
9c:35:15:a9:b8:d7:01:f1:42:6c:9d:a8:a3:53:44:
2a:fd:d0:67:49:cf:0c:1c:39:dc:90:77:4b:29:34:
cd:c7:08:97:11:76:7e:54:04:99:57:08:26:5b:1a:
6f:a4:23:27:49:b5:ec:84:2c:d6:7e:ff:9d:61:c6:
f8:24:12:80:02:1b:9b:b0:0d:69:40:cf:9d:42:a3:
f0:a4:4f:86:72:49:72:6b:5e:9e:28:89:b6:98:b0:
ac:9f:3a:00:e2:2d:c6:25:0f:08:81:77:01:58:f7:
79:f5:dd:80:cf:ac:61:27:c0:56:8c:b4:89:3a:78:
c7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:16:67:65:AC:49:91:01:DF:82:F4:B1:70:0F:C7:61:BF:44:CE:B0
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/VBZnZaxJkQHfgvSxcA_HYb9EzrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.189.18.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:e8:6a:5d:b5:fe:27:6e:76:8e:79:f1:ab:5a:b5:7b:e4:b4:
86:50:17:62:40:55:dc:a0:f9:15:de:21:a0:bd:23:d9:44:89:
23:a9:70:ad:4b:51:25:11:4f:a3:30:ea:09:ef:8d:41:04:fe:
ae:d7:fd:61:51:45:b9:68:ab:92:76:88:cb:57:43:3d:7a:1e:
e6:d1:e4:cf:82:00:98:f8:9e:e3:57:e5:20:4b:72:c5:17:01:
5e:a9:3b:32:76:28:a4:90:7c:90:45:c8:9c:71:78:00:02:b7:
20:8b:e0:a5:b9:19:27:d4:71:ea:eb:ac:d2:1c:1a:36:90:39:
96:c5:fb:43:ae:2b:4b:08:a1:e2:fa:8e:92:d0:f1:58:87:a4:
17:a9:7a:f4:a8:96:f0:24:15:21:59:98:03:eb:c6:cd:8e:7b:
33:c3:85:b7:ee:1c:7c:2c:e9:07:6c:e9:b6:22:ce:c4:98:bb:
cf:f6:25:78:f7:1d:35:97:81:cd:2d:88:1f:de:80:8e:07:55:
fc:5b:41:44:82:35:48:36:67:85:fb:59:b2:25:76:8d:58:2d:
33:7b:ed:08:e6:80:6a:85:11:c3:ab:fe:89:1f:ab:83:69:52:
f1:18:9d:b9:14:18:fa:fb:d9:50:df:90:31:65:cb:77:34:6e:
99:c7:46:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 00:07:47 2026 by rpki-client