Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/VasscNbVeJUsJcoHQY90Ngb7Tmo.roa
File: VasscNbVeJUsJcoHQY90Ngb7Tmo.roa (raw, json)
Hash identifier: VKTEWjmpa5bykA8CGKs60AlHYMKRuJqR6ptx3BxeTxo=
Subject key identifier: 55:AB:2C:70:D6:D5:78:95:2C:25:CA:07:41:8F:74:36:06:FB:4E:6A
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 01A163DC582B00C3DB3231E286FF60D3113D
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/VasscNbVeJUsJcoHQY90Ngb7Tmo.roa
Signing time: Thu 22 Oct 2026 13:45:47 +0000
ROA not before: Thu 22 Oct 2026 13:45:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215197
IP address blocks: 85.204.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 16:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:dc:58:2b:00:c3:db:32:31:e2:86:ff:60:d3:11:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Oct 22 13:45:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55ab2c70d6d578952c25ca07418f743606fb4e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0b:9f:22:11:3a:3d:1d:58:45:0f:0b:a2:e5:
43:21:d8:48:d3:d3:61:ef:8e:66:88:0f:ba:8a:11:
ac:f1:20:12:c0:0d:8a:49:98:5e:d2:72:51:99:55:
86:40:f4:e6:5d:e9:57:a9:70:e8:5d:b8:6b:58:75:
07:b6:56:ee:ef:fa:71:42:6d:d8:c1:de:b3:f9:3a:
30:dd:0b:11:b7:74:66:6d:34:49:1e:83:19:18:22:
ba:7b:6f:c5:27:04:c0:e0:2c:fb:03:4e:ab:bf:2e:
98:91:cb:12:1d:94:ad:14:8c:3a:e2:df:b3:0c:13:
b1:ae:36:ad:30:12:be:6b:8a:1d:17:03:37:0f:74:
4a:8f:43:d3:78:a0:48:4d:5d:09:86:31:96:c4:af:
92:3c:b2:38:10:c4:03:d0:a0:5b:a8:ce:ad:89:fa:
fb:93:46:85:76:59:b8:9a:3d:6c:84:78:2f:9c:52:
99:49:05:89:e1:8b:e0:3a:9e:0f:08:42:1b:d6:c4:
cb:43:d6:bd:d2:50:5c:09:df:b3:a5:80:76:84:b3:
95:21:57:54:3f:49:02:b8:73:e4:c5:f3:cd:e6:b6:
8c:e8:0d:fb:bf:bb:e1:1e:9d:8b:29:f3:ab:01:c9:
05:89:a5:44:50:c6:6d:e5:2a:96:37:a6:ce:8d:3d:
66:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:AB:2C:70:D6:D5:78:95:2C:25:CA:07:41:8F:74:36:06:FB:4E:6A
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/VasscNbVeJUsJcoHQY90Ngb7Tmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.142.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:7a:63:a9:45:ef:c5:cd:18:fd:c1:54:87:5d:63:24:41:9e:
21:11:56:42:a0:37:1d:a3:65:9e:d0:15:f9:e5:d4:fd:05:14:
60:b6:ae:93:c2:93:f6:72:76:5c:35:8b:9d:00:13:ca:28:7f:
cd:1a:c3:9b:a7:9d:03:55:a7:d9:52:2c:a8:eb:a0:b0:7a:e4:
ce:65:82:d6:f1:15:0f:ea:c5:cb:bd:8e:d7:26:82:76:c7:8b:
a9:8d:4c:ac:7c:c3:b0:08:8f:7c:7f:42:59:5a:3c:59:28:70:
c0:f7:1c:9f:31:24:6a:02:24:51:fc:41:45:d3:07:9e:7e:85:
ab:27:88:26:91:95:16:8e:bb:f8:0c:55:bf:57:81:ff:83:e6:
74:ab:3b:d1:57:ab:0b:8b:bb:65:44:0e:a9:4f:87:be:aa:e0:
33:6b:92:a9:27:8e:2c:68:a1:b5:ca:52:69:00:3f:49:aa:d3:
f4:f6:82:a4:1e:69:7c:fa:b7:79:5e:1b:de:70:20:dd:e1:1d:
fc:c6:7a:2d:1c:c7:c7:f4:21:07:52:c8:d6:41:1c:0a:3f:a3:
d4:29:db:60:16:c4:cf:ba:67:7f:e4:86:04:0d:95:cd:53:be:
ab:fc:fe:12:df:e9:23:a3:42:f9:a4:f6:c3:da:ac:c2:3f:3b:
78:c4:2c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:20:28 2026 by rpki-client