Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/Vv3v0d-nTDGMZuu49LCG26ffQe4.roa
File: Vv3v0d-nTDGMZuu49LCG26ffQe4.roa (raw, json)
Hash identifier: XOSEPRFlrg1Vmh8itKZY3UX/895YyITNImtXjyH/Lf8=
Subject key identifier: 56:FD:EF:D1:DF:A7:4C:31:8C:66:EB:B8:F4:B0:86:DB:A7:DF:41:EE
Certificate issuer: /CN=e939540fd16b633501fbf7441a746fc56f9f59bf
Certificate serial: 019E6EAA2D3D93D267C64C80E7D04D6F245F
Authority key identifier: E9:39:54:0F:D1:6B:63:35:01:FB:F7:44:1A:74:6F:C5:6F:9F:59:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/Vv3v0d-nTDGMZuu49LCG26ffQe4.roa
Signing time: Thu 28 May 2026 12:58:26 +0000
ROA not before: Thu 28 May 2026 12:58:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210705
IP address blocks: 176.120.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 18:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6e:aa:2d:3d:93:d2:67:c6:4c:80:e7:d0:4d:6f:24:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e939540fd16b633501fbf7441a746fc56f9f59bf
Validity
Not Before: May 28 12:58:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56fdefd1dfa74c318c66ebb8f4b086dba7df41ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:75:ec:28:ae:95:cb:84:eb:cd:eb:bb:a2:ae:
02:5f:3e:88:00:c1:24:46:39:69:b8:d4:46:56:c7:
a8:54:60:22:d2:ab:dc:2e:84:27:3d:e6:f2:dd:34:
c2:15:fe:03:36:f8:5a:87:5b:0f:b8:6e:50:2c:1f:
9b:9d:75:09:5e:cd:f6:2a:43:ae:81:1d:bc:e2:2b:
00:a3:04:db:2a:cb:4d:c4:2a:b9:01:78:ef:56:66:
bb:67:22:67:2d:62:91:90:bc:87:91:d8:df:cc:72:
d2:27:c0:a2:56:e4:c4:9b:d2:fd:7d:1e:83:29:41:
39:a3:90:3d:5a:3b:b6:41:f6:ae:b9:da:6e:ed:17:
3d:81:9e:2a:2b:10:47:38:d4:f6:fb:6f:14:c1:88:
12:63:e6:3d:ba:a3:47:5e:96:ea:83:03:cb:95:d6:
1c:c1:2e:02:9d:96:4f:64:0e:a1:36:38:c8:ba:13:
b1:89:93:5e:62:99:4e:de:cf:da:56:bf:ef:97:32:
77:61:7e:ce:56:1d:ea:73:b3:7c:b9:73:37:d6:b7:
c3:18:cf:4a:ae:dd:05:d4:55:66:1d:ad:83:2f:31:
19:ed:23:c1:aa:63:32:9c:27:89:59:60:0a:ce:c4:
d1:81:8c:c1:7f:51:c9:60:b9:1a:69:28:69:45:1c:
22:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FD:EF:D1:DF:A7:4C:31:8C:66:EB:B8:F4:B0:86:DB:A7:DF:41:EE
X509v3 Authority Key Identifier:
keyid:E9:39:54:0F:D1:6B:63:35:01:FB:F7:44:1A:74:6F:C5:6F:9F:59:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TlUD9FrYzUB-_dEGnRvxW-fWb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/Vv3v0d-nTDGMZuu49LCG26ffQe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5af4ce-0eee-4182-9094-9f52c730acdf/1/6TlUD9FrYzUB-_dEGnRvxW-fWb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.120.17.0/24
Signature Algorithm: sha256WithRSAEncryption
85:4d:b9:16:b8:09:73:7d:26:5e:42:06:99:12:ee:9b:b4:42:
0b:34:bb:0f:6b:3b:20:4b:9f:f5:dc:b3:fa:34:37:b0:86:fe:
10:28:15:f2:33:b0:eb:e1:73:35:f6:7e:f1:a6:b1:11:93:da:
87:07:da:97:30:09:4c:bd:3f:fa:35:47:ae:00:0f:2c:db:72:
dc:ed:48:2b:c3:c9:24:0b:84:5a:c2:f9:2e:d3:a3:a8:e3:cf:
39:06:57:e5:cf:f1:9e:40:e4:a9:3f:42:20:43:af:2d:e8:57:
39:e8:6d:3f:71:0b:c3:84:38:13:46:48:8c:5e:4f:51:61:06:
28:70:c9:f3:1d:0b:f8:cd:e0:c9:6c:2e:ee:8f:20:8d:47:3b:
a8:7b:93:69:94:e9:43:84:d9:35:6f:32:c1:96:5b:f1:1f:12:
32:9f:38:2b:31:2a:0d:97:c7:6c:75:72:70:4c:a6:6d:20:18:
dc:27:46:f8:11:09:db:4e:e1:76:87:34:dd:d2:e0:2c:ea:06:
6f:64:e3:68:99:7f:2c:3f:bb:9c:d9:07:70:a7:86:2e:3f:77:
76:80:57:66:d0:ad:8d:d9:bb:e9:0c:8d:d6:39:e7:86:11:ae:
86:37:05:d0:dc:d0:22:76:a8:a8:ad:fe:b6:21:e5:ff:0c:4d:
e8:09:c0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:32:54 2026 by rpki-client