Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/VPHkQZxlSZ6jK0WJvFhP9fLco6w.roa
File: VPHkQZxlSZ6jK0WJvFhP9fLco6w.roa (raw, json)
Hash identifier: OykPyMbbDbrSC5LOWpwv8WDbODQjJRr7Y49080Gol9Q=
Subject key identifier: 54:F1:E4:41:9C:65:49:9E:A3:2B:45:89:BC:58:4F:F5:F2:DC:A3:AC
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A00DABA790BA731F0537BE0A0E0495C62B
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/VPHkQZxlSZ6jK0WJvFhP9fLco6w.roa
Signing time: Mon 17 Aug 2026 03:02:28 +0000
ROA not before: Mon 17 Aug 2026 03:02:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219394
IP address blocks: 212.189.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0d:ab:a7:90:ba:73:1f:05:37:be:0a:0e:04:95:c6:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 17 03:02:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54f1e4419c65499ea32b4589bc584ff5f2dca3ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0b:a3:0f:43:2c:3c:87:9c:30:6a:fe:17:cc:
c6:38:4a:ae:22:e9:04:4f:a1:5d:6e:2b:3e:d1:5b:
ba:03:73:7d:f6:b4:e7:76:b2:13:00:f9:28:19:7d:
69:b9:ce:cb:5c:79:7d:ce:5c:6b:b4:d3:2e:f6:0f:
8c:23:b5:6e:4c:fa:bf:d2:4e:fd:dc:0b:fc:77:d5:
20:f3:74:b5:c5:b3:68:e7:19:28:ee:81:2d:f0:23:
41:27:6b:81:c7:a5:3a:60:ec:15:35:c8:ee:97:da:
8c:08:02:1f:a3:94:e6:d6:80:5f:00:46:1a:c1:2f:
7e:7d:f6:62:96:d8:1d:0b:af:cc:21:99:d7:bb:21:
1a:43:57:17:43:f4:a6:86:27:c4:03:bc:4f:3c:88:
ab:f5:4e:56:22:00:3f:4a:a4:64:96:5e:dd:a8:13:
e2:fd:96:4e:5d:64:42:69:c1:02:b1:d6:9d:01:01:
a7:3e:dd:3e:28:3c:09:fe:e3:33:3a:85:e3:8b:67:
ff:b8:df:6f:c2:b6:26:1a:91:90:84:49:20:fc:af:
21:ad:6d:a8:b9:3a:65:4f:c3:c4:fb:44:31:01:23:
b5:be:44:a6:4d:d0:0d:fa:5e:c5:3e:d4:18:2b:33:
b7:e6:51:92:2d:07:1a:0a:74:45:19:43:07:67:e9:
16:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F1:E4:41:9C:65:49:9E:A3:2B:45:89:BC:58:4F:F5:F2:DC:A3:AC
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/VPHkQZxlSZ6jK0WJvFhP9fLco6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.189.18.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:1b:02:64:7c:5b:27:97:fb:08:40:fe:3b:65:e2:5b:c7:f3:
2d:b7:3b:98:f2:26:07:d1:ac:e8:df:fb:11:da:d8:fb:ed:21:
da:65:75:f1:67:a7:5b:60:ce:7c:f8:68:b1:45:6d:f7:18:77:
5b:d9:54:b0:54:32:0d:5a:75:13:b0:92:72:29:dd:f0:2a:2a:
a0:6c:b0:3d:49:17:a0:8e:15:f6:f6:e7:7e:65:fa:e0:e4:e1:
38:3f:3f:f7:64:73:5a:3f:35:d4:48:5a:81:95:93:c3:7c:32:
f4:4d:17:a0:50:7c:b7:8a:2f:42:1f:13:98:b3:c5:c3:fe:ca:
31:1b:a5:95:c7:73:29:30:92:1e:b8:15:d9:71:30:2b:84:3f:
a7:bb:ce:03:9b:e5:65:ae:64:f5:27:ec:ce:97:78:f1:67:98:
56:d2:c6:0e:16:76:73:de:2c:da:3b:c9:67:4f:be:5f:68:21:
28:73:da:98:62:74:91:d2:d8:8c:98:46:25:f3:71:16:33:c4:
be:95:dd:10:0e:95:32:c3:a2:00:25:aa:a7:52:0f:63:a0:b7:
98:6d:53:9d:0d:c0:7b:31:4d:2c:c1:ee:9d:c6:3f:4f:94:ee:
c6:43:e5:40:7c:9e:9b:53:b3:a8:b9:27:00:ac:1a:18:a2:57:
21:9f:e3:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaANq6eQunMfBTe+Cg4ElcYrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYwODE3MDMwMjI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NGYxZTQ0MTljNjU0OTllYTMyYjQ1ODliYzU4NGZmNWYyZGNhM2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QujD0MsPIecMGr+F8zGOEquIukE
T6Fdbis+0Vu6A3N99rTndrITAPkoGX1puc7LXHl9zlxrtNMu9g+MI7VuTPq/0k79
3Av8d9Ug83S1xbNo5xko7oEt8CNBJ2uBx6U6YOwVNcjul9qMCAIfo5Tm1oBfAEYa
wS9+ffZiltgdC6/MIZnXuyEaQ1cXQ/SmhifEA7xPPIir9U5WIgA/SqRkll7dqBPi
/ZZOXWRCacECsdadAQGnPt0+KDwJ/uMzOoXji2f/uN9vwrYmGpGQhEkg/K8hrW2o
uTplT8PE+0QxASO1vkSmTdAN+l7FPtQYKzO35lGSLQcaCnRFGUMHZ+kWKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFTx5EGcZUmeoytFibxYT/Xy3KOsMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvVlBIa1FaeGxTWjZqSzBXSnZGaFA5ZkxjbzZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1L0SMA0G
CSqGSIb3DQEBCwUAA4IBAQChGwJkfFsnl/sIQP47ZeJbx/MttzuY8iYH0azo3/sR
2tj77SHaZXXxZ6dbYM58+GixRW33GHdb2VSwVDINWnUTsJJyKd3wKiqgbLA9SReg
jhX29ud+Zfrg5OE4Pz/3ZHNaPzXUSFqBlZPDfDL0TRegUHy3ii9CHxOYs8XD/sox
G6WVx3MpMJIeuBXZcTArhD+nu84Dm+VlrmT1J+zOl3jxZ5hW0sYOFnZz3izaO8ln
T75faCEoc9qYYnSR0tiMmEYl83EWM8S+ld0QDpUyw6IAJaqnUg9joLeYbVOdDcB7
MU0swe6dxj9PlO7GQ+VAfJ6bU7OouScArBoYolchn+NI
-----END CERTIFICATE-----
Generated at Tue Aug 18 00:08:23 2026 by rpki-client