Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/Vjt2enEGcDBtYv9b6752XSP8Ceo.roa
File: Vjt2enEGcDBtYv9b6752XSP8Ceo.roa (raw, json)
Hash identifier: aTnBr/fYlAMGqM2sA2H2zF3PkYRkNNogihz4GE1f07s=
Subject key identifier: 56:3B:76:7A:71:06:70:30:6D:62:FF:5B:EB:BE:76:5D:23:FC:09:EA
Certificate issuer: /CN=2c9e85c15a4540be2ed3e164f646235f5863c74d
Certificate serial: 019F23691E96CB7DAD0713A5ED9AA3A0F8E8
Authority key identifier: 2C:9E:85:C1:5A:45:40:BE:2E:D3:E1:64:F6:46:23:5F:58:63:C7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LJ6FwVpFQL4u0-Fk9kYjX1hjx00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/Vjt2enEGcDBtYv9b6752XSP8Ceo.roa
Signing time: Thu 02 Jul 2026 15:18:39 +0000
ROA not before: Thu 02 Jul 2026 15:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199946
IP address blocks: 185.37.196.0/24 maxlen: 24
185.37.197.0/24 maxlen: 24
185.37.198.0/24 maxlen: 24
185.37.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/LJ6FwVpFQL4u0-Fk9kYjX1hjx00.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/LJ6FwVpFQL4u0-Fk9kYjX1hjx00.mft
rsync://rpki.ripe.net/repository/DEFAULT/LJ6FwVpFQL4u0-Fk9kYjX1hjx00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1e:96:cb:7d:ad:07:13:a5:ed:9a:a3:a0:f8:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c9e85c15a4540be2ed3e164f646235f5863c74d
Validity
Not Before: Jul 2 15:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=563b767a710670306d62ff5bebbe765d23fc09ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e7:6f:ca:3b:63:ca:f7:23:2d:a0:87:5d:dd:
dd:93:0b:12:0e:7c:cb:1e:b7:72:8c:c0:29:97:36:
23:e4:e8:a7:3b:91:4b:76:ff:d8:8e:b0:54:a8:52:
4f:5b:13:19:10:5b:ff:f3:e9:06:65:d7:1e:ee:5c:
ad:54:7f:34:37:5e:b0:f5:c1:1d:d7:79:02:39:c2:
3d:47:d8:67:41:69:76:0a:34:3f:90:2c:be:77:e7:
12:7d:cf:ce:0f:db:90:9e:5b:c8:b9:fe:c7:19:86:
62:96:aa:ec:ec:16:e8:62:af:bb:bd:98:0b:97:80:
8e:c0:e5:1c:96:90:00:d3:db:56:28:e6:f7:75:82:
54:05:c7:9f:b0:c5:89:b3:c4:33:ae:fe:9d:8d:e4:
96:d1:71:69:3a:d1:20:92:25:ac:3c:bd:a5:63:a0:
fd:dc:26:73:7d:9c:0a:31:9f:a3:03:56:35:0f:a8:
74:78:7c:59:ce:f4:c7:37:a3:e9:6c:b8:a3:05:d0:
68:a4:83:45:e8:d7:aa:ea:f4:bf:29:97:eb:5d:18:
95:a6:3d:07:73:aa:ea:be:ed:1f:7e:6d:93:77:10:
b9:64:35:9b:73:41:41:bf:8b:d0:b2:58:0a:a5:57:
ac:8e:62:0a:25:6f:b2:26:63:4a:10:4e:fa:23:f3:
90:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3B:76:7A:71:06:70:30:6D:62:FF:5B:EB:BE:76:5D:23:FC:09:EA
X509v3 Authority Key Identifier:
keyid:2C:9E:85:C1:5A:45:40:BE:2E:D3:E1:64:F6:46:23:5F:58:63:C7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LJ6FwVpFQL4u0-Fk9kYjX1hjx00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/Vjt2enEGcDBtYv9b6752XSP8Ceo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/548ef6-e72e-4503-8af9-b55d88f7c9de/1/LJ6FwVpFQL4u0-Fk9kYjX1hjx00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.196.0/22
Signature Algorithm: sha256WithRSAEncryption
32:3d:d6:be:c2:71:86:24:cb:73:4d:1c:b5:b8:a1:6b:3c:9c:
a3:15:88:3c:09:43:af:c9:5c:0d:08:5a:36:8f:5b:30:ed:c2:
18:83:b0:0c:35:9c:46:29:2e:c4:15:93:ce:ea:5b:cf:ae:99:
0e:58:43:49:18:87:6a:1f:ce:bd:cc:3d:df:ce:fe:54:56:76:
0c:e5:d5:af:ef:19:fa:4b:20:14:3e:8f:00:e7:7c:16:9b:18:
eb:4d:01:99:7e:4c:a8:4b:22:f9:47:b7:a7:f0:fe:b3:4a:a3:
92:e1:39:b5:0b:b1:37:06:6e:5c:93:8c:28:51:c8:fa:82:4d:
43:a8:8c:af:8c:17:e1:81:9e:32:60:70:36:8d:78:45:7e:ff:
b1:f3:1c:4f:77:bb:1c:31:01:9a:09:dd:84:b8:cf:e3:2f:38:
ea:8b:51:dd:ea:7a:07:b2:e4:3a:56:68:2e:02:c5:c6:8c:4b:
cc:7d:cf:70:23:a7:08:c3:b1:05:ec:2d:7a:b8:b1:1e:91:e5:
79:26:b0:bb:41:db:c0:d8:96:bc:19:b5:65:b1:4c:65:7a:ea:
c1:8b:70:e9:44:3a:82:e8:48:40:66:30:20:3e:40:2c:f0:6f:
0c:cd:2e:f0:ae:56:ed:9c:0c:8a:db:62:c3:ae:3f:3b:53:57:
39:10:8c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:19:47 2026 by rpki-client