Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/__VSPAaWRRSeierWRsZj5xujxdA.roa
File: __VSPAaWRRSeierWRsZj5xujxdA.roa (raw, json)
Hash identifier: sQfRfrWgHMK/AMMvmcH4XK/TArKOFDRM5akKMntUe1s=
Subject key identifier: FF:F5:52:3C:06:96:45:14:9E:89:EA:D6:46:C6:63:E7:1B:A3:C5:D0
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F998C486B257133E6160827A5468AB57E
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/__VSPAaWRRSeierWRsZj5xujxdA.roa
Signing time: Sat 25 Jul 2026 13:52:15 +0000
ROA not before: Sat 25 Jul 2026 13:52:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154132
IP address blocks: 77.67.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:99:8c:48:6b:25:71:33:e6:16:08:27:a5:46:8a:b5:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 25 13:52:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fff5523c069645149e89ead646c663e71ba3c5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9b:b1:68:c1:dc:99:9f:a4:b4:05:0a:50:d7:
e4:93:4d:2c:6e:7f:49:ec:de:96:2e:5a:34:ae:e4:
e5:f3:f9:c2:8d:49:15:67:1d:d7:10:2b:4e:56:39:
85:77:99:33:e2:6a:43:10:83:fd:88:84:b4:b0:c8:
a3:f3:30:15:cd:e6:99:47:9d:08:78:db:53:5c:59:
6c:89:ac:d4:38:ff:81:3f:32:ce:7e:47:e7:97:dd:
2b:a0:80:29:4a:ea:a3:c1:93:09:f9:37:f1:5b:5c:
47:36:62:44:b7:6c:34:61:ce:55:00:b4:56:1f:84:
52:7c:ae:c1:4d:69:06:e7:9c:82:22:c5:c3:eb:b9:
bf:d1:ea:0a:f9:ba:97:f6:b7:28:2c:6c:8e:27:e5:
ea:e2:0d:d8:b3:e1:cb:cd:e8:82:32:2c:30:ad:d6:
99:cb:1b:cc:f4:b6:fc:4a:5c:0d:42:88:a2:61:8c:
ec:c3:45:24:8a:dd:48:cf:2e:9c:87:f5:61:e1:24:
b3:42:2a:57:ca:10:81:28:6d:9d:a9:12:57:32:8c:
02:69:f8:4a:16:f8:a4:b8:65:0c:3e:d7:03:21:1d:
26:2f:1c:53:26:9c:5f:5b:ee:f7:04:e0:6f:a7:78:
23:ac:36:c0:a8:53:fa:c7:fe:19:a3:cc:43:89:e5:
c1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F5:52:3C:06:96:45:14:9E:89:EA:D6:46:C6:63:E7:1B:A3:C5:D0
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/__VSPAaWRRSeierWRsZj5xujxdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.15.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:27:23:7e:d6:ac:ec:61:c1:8d:32:ed:e4:30:0d:a7:9d:fc:
25:2f:0f:de:88:05:b1:8d:79:e8:b1:54:db:a9:a5:3b:ef:d4:
a3:ac:7b:21:6e:bd:c4:7c:86:fb:74:96:c0:23:e2:6b:ed:17:
c0:3b:ef:77:bc:70:42:37:e7:ec:05:ab:40:7b:99:6d:32:6e:
38:6f:6a:b4:e8:3c:7c:ff:09:73:5f:2d:9a:fa:95:e1:5b:33:
ab:b6:44:f6:c1:fd:f8:a5:e5:e5:d7:53:b1:45:44:5a:79:70:
e7:cf:15:86:96:42:b2:b3:51:0d:87:ca:f6:04:81:8d:9b:08:
2b:b1:c4:91:81:34:62:a6:1e:e7:3c:61:5f:50:c6:d6:41:f7:
62:5e:22:f5:4a:5e:f7:d8:73:9e:f4:84:be:62:ec:80:2f:a7:
3f:09:ac:77:e6:76:aa:ce:9f:68:e5:49:6f:8d:49:a6:97:06:
40:f7:f5:92:09:4e:6a:3d:72:d2:89:f2:15:20:d9:36:04:d0:
d2:12:ca:dd:bc:43:a5:ad:f3:4b:63:a3:40:f9:b3:2a:6c:df:
04:50:7d:15:18:cc:b2:74:ff:94:d9:f1:db:0d:18:34:60:65:
f6:76:57:2e:5e:08:49:92:39:2e:87:10:d2:59:1a:35:3a:2b:
a4:9d:24:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 16:54:31 2026 by rpki-client