Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/VIHswKloBTz_t9AoHJWNnNEBMUI.roa
File: VIHswKloBTz_t9AoHJWNnNEBMUI.roa (raw, json)
Hash identifier: WAmtMAhBc13uGgrmDPdaVCQ0HLUvc9oHeQeyCGtDrss=
Subject key identifier: 54:81:EC:C0:A9:68:05:3C:FF:B7:D0:28:1C:95:8D:9C:D1:01:31:42
Certificate issuer: /CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Certificate serial: 019F7226D20690BF760B24773C4BF570A24C
Authority key identifier: 0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/VIHswKloBTz_t9AoHJWNnNEBMUI.roa
Signing time: Fri 17 Jul 2026 22:16:14 +0000
ROA not before: Fri 17 Jul 2026 22:16:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12083
IP address blocks: 217.78.40.0/21 maxlen: 24
217.118.208.0/21 maxlen: 24
217.118.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:72:26:d2:06:90:bf:76:0b:24:77:3c:4b:f5:70:a2:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Validity
Not Before: Jul 17 22:16:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5481ecc0a968053cffb7d0281c958d9cd1013142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0d:3b:3a:bb:43:5e:92:3d:d6:2f:c3:f5:cb:
00:77:4b:c4:5d:3a:27:44:46:7b:89:ef:31:ad:1b:
bf:d2:b1:08:0e:ea:53:e1:39:b1:00:0d:60:68:fb:
1f:45:68:3b:7b:d6:4c:a8:23:7f:9e:db:80:a8:50:
c1:16:ad:d4:4b:dc:11:e1:46:a4:4f:98:45:11:fc:
e6:a5:96:95:08:7c:43:6c:f1:33:2a:f2:c7:97:c0:
4c:40:6b:8b:dc:76:85:99:c9:d4:e8:31:96:02:80:
ca:d2:1b:b4:f2:fd:bd:b7:76:a4:9e:77:2a:45:ce:
0c:ae:9c:ab:d1:75:cd:55:e7:0c:72:31:0a:48:07:
38:d0:87:37:be:fc:56:ac:0a:06:65:3f:27:3f:f5:
f9:a6:a6:a4:36:18:ba:14:16:c5:20:06:25:54:3f:
f6:8a:6e:df:e0:2e:d9:1a:e6:45:e0:08:30:c3:54:
97:d2:f4:b6:78:75:08:a4:25:02:f8:d2:d4:f1:2e:
30:8e:48:10:4b:21:4d:8b:13:8e:d8:c7:56:63:2d:
4e:6c:22:f0:46:e3:c4:49:97:c4:c2:12:38:ba:b6:
86:c2:06:c2:87:99:2c:96:8e:6f:66:2d:35:83:51:
49:ba:80:14:86:56:93:d5:0e:74:3c:30:7b:e3:e7:
84:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:81:EC:C0:A9:68:05:3C:FF:B7:D0:28:1C:95:8D:9C:D1:01:31:42
X509v3 Authority Key Identifier:
keyid:0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/VIHswKloBTz_t9AoHJWNnNEBMUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.78.40.0/21
217.118.208.0/20
Signature Algorithm: sha256WithRSAEncryption
43:0b:67:9a:72:8f:dc:9d:fc:96:3f:a7:a5:fa:58:97:64:ae:
22:f4:c3:b8:9e:d1:39:59:6c:09:90:90:11:68:5b:54:60:13:
f7:c6:e5:d3:95:d1:f9:cf:a5:86:46:91:c4:fe:d7:1c:a2:72:
ab:7f:c5:b3:e2:db:c5:35:58:52:1d:8a:dc:f3:d3:0a:98:4f:
7e:dc:a4:4d:c0:3f:5a:5e:25:16:c8:14:0e:ed:ac:7e:ec:0c:
fa:34:54:14:bb:7f:a6:6f:64:2d:4c:87:cc:65:56:2f:04:e0:
cb:c2:ad:45:58:38:1c:2f:25:71:74:ff:29:70:9a:8c:68:99:
38:31:ba:e8:39:c4:c6:3b:0f:df:0f:72:1e:b7:41:2a:2f:0c:
59:99:3f:f0:14:eb:6b:4b:fc:56:84:6d:2a:75:dc:d2:69:56:
43:30:2b:e0:b6:32:22:a9:c3:53:90:28:10:0b:03:ec:1f:5d:
26:4b:14:43:6a:04:c5:fe:fa:39:8f:d8:be:bf:df:89:35:2f:
70:80:79:e0:f1:77:7f:79:d7:b1:b8:32:51:12:f0:f2:bf:95:
47:9e:e0:91:38:0d:d2:43:1d:5d:d7:63:f5:2d:1f:30:8a:8e:
de:a0:f7:a7:73:df:f7:c8:2e:42:b4:4f:49:0f:65:20:80:b8:
45:12:b8:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:25:24 2026 by rpki-client