Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/f4de90-a312-47c2-a28b-3eb5f06b9717/1/VcA3UckODLoz1S7R5MoctsVXluU.roa
File: VcA3UckODLoz1S7R5MoctsVXluU.roa (raw, json)
Hash identifier: RqMqQLgcmTKOOjU1HEo17gZOBmti+5lxR7MDDBpd4a8=
Subject key identifier: 55:C0:37:51:C9:0E:0C:BA:33:D5:2E:D1:E4:CA:1C:B6:C5:57:96:E5
Certificate issuer: /CN=5df7fb39e201eba634d0203c4f28de5ae0795a88
Certificate serial: 019FEB325165CCDB8192A303C403F2896C08
Authority key identifier: 5D:F7:FB:39:E2:01:EB:A6:34:D0:20:3C:4F:28:DE:5A:E0:79:5A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xff7OeIB66Y00CA8TyjeWuB5Wog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f4de90-a312-47c2-a28b-3eb5f06b9717/1/VcA3UckODLoz1S7R5MoctsVXluU.roa
Signing time: Mon 10 Aug 2026 10:22:51 +0000
ROA not before: Mon 10 Aug 2026 10:22:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43395
IP address blocks: 109.68.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/f4de90-a312-47c2-a28b-3eb5f06b9717/1/Xff7OeIB66Y00CA8TyjeWuB5Wog.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/f4de90-a312-47c2-a28b-3eb5f06b9717/1/Xff7OeIB66Y00CA8TyjeWuB5Wog.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xff7OeIB66Y00CA8TyjeWuB5Wog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:32:51:65:cc:db:81:92:a3:03:c4:03:f2:89:6c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df7fb39e201eba634d0203c4f28de5ae0795a88
Validity
Not Before: Aug 10 10:22:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55c03751c90e0cba33d52ed1e4ca1cb6c55796e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cd:a1:e2:5c:41:2c:b4:78:e7:d1:ed:dc:2c:
40:1b:c2:3a:95:e8:89:ab:3f:fe:aa:49:8d:12:29:
79:27:0f:88:7c:78:0b:45:18:3c:1c:bf:f1:09:94:
5a:1c:dd:64:a7:23:4c:67:df:38:32:2b:85:ce:82:
d2:59:53:6a:5b:86:cd:5b:b7:69:84:b6:5a:63:d9:
82:7f:ce:68:b4:68:d1:71:78:21:1e:96:bd:a8:15:
cf:ed:64:3f:27:47:a3:8d:bf:ce:88:eb:b4:20:81:
05:15:3f:68:dc:d5:6f:b0:cc:73:f8:ff:b9:cb:42:
c9:1f:8d:10:a5:a2:f9:78:ce:fb:52:f3:d5:9a:be:
1d:42:ed:5b:33:28:63:4f:77:60:a9:18:b0:7d:b1:
96:aa:39:ac:6f:6b:1a:58:0d:c9:b7:9c:af:1f:6e:
a4:4f:2e:74:c9:26:ca:57:fe:d1:54:2c:93:f0:45:
c3:0a:50:86:a3:e0:2a:e3:bb:7c:a9:a4:39:1d:e5:
83:ed:2c:0f:95:af:0e:00:71:ba:4a:88:d5:cf:c1:
98:c9:32:d1:29:08:12:ea:7d:c6:96:08:8e:0e:5f:
d5:cc:8b:4a:63:5d:5a:6e:83:ff:91:46:45:f7:49:
c0:0a:e5:8c:2f:00:8b:04:4d:c9:62:c2:67:82:da:
3e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C0:37:51:C9:0E:0C:BA:33:D5:2E:D1:E4:CA:1C:B6:C5:57:96:E5
X509v3 Authority Key Identifier:
keyid:5D:F7:FB:39:E2:01:EB:A6:34:D0:20:3C:4F:28:DE:5A:E0:79:5A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xff7OeIB66Y00CA8TyjeWuB5Wog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4de90-a312-47c2-a28b-3eb5f06b9717/1/VcA3UckODLoz1S7R5MoctsVXluU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4de90-a312-47c2-a28b-3eb5f06b9717/1/Xff7OeIB66Y00CA8TyjeWuB5Wog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.68.217.0/24
Signature Algorithm: sha256WithRSAEncryption
66:42:f3:23:64:91:11:8a:93:bc:c1:92:ed:5d:43:4a:c5:34:
c4:d5:3d:6d:8a:aa:6a:3e:95:1b:d4:7b:d9:cb:da:3c:59:db:
68:10:04:aa:28:4f:88:6a:72:a9:5e:a6:c1:5c:cb:24:25:f6:
45:a9:f4:f0:91:69:96:68:7d:72:ac:3a:ad:93:34:be:6d:0e:
15:4d:80:e6:82:d3:f3:ed:c1:9a:ca:6a:9f:dd:13:76:32:8e:
74:cc:c3:89:22:b2:99:db:2e:e0:37:b3:f9:90:88:d8:de:67:
67:7f:9d:cd:04:13:ea:f4:79:0d:77:34:78:27:34:b9:c8:8d:
43:15:af:5e:55:e2:3b:e4:69:db:ee:43:03:a9:13:b4:18:68:
52:75:69:45:50:c4:7c:96:74:1d:53:b2:ae:ea:78:8a:2c:d8:
dd:2d:8b:fe:6b:44:94:9f:78:86:f2:46:de:1c:be:97:66:93:
f6:45:60:c1:66:14:03:d6:7e:ef:a6:bb:98:70:af:40:8f:a8:
c7:47:c9:ef:b6:87:85:54:e4:7b:ad:fb:36:40:db:d1:a3:a4:
53:84:ab:2b:1e:7a:03:7f:14:fc:e6:38:52:ce:ba:42:e7:79:
09:8e:c2:56:d0:9f:88:67:c9:e4:f6:a4:35:f4:01:9e:13:ec:
96:1d:a6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:57:17 2026 by rpki-client