Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/vAyvqClj_fNj-JPGw0WVFpTXnec.roa
File: vAyvqClj_fNj-JPGw0WVFpTXnec.roa (raw, json)
Hash identifier: zcYIEoZwOnalFjsK7SRCcbtULguKAUh8BvgH8JPZTCc=
Subject key identifier: BC:0C:AF:A8:29:63:FD:F3:63:F8:93:C6:C3:45:95:16:94:D7:9D:E7
Certificate issuer: /CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Certificate serial: 019E4F09CFA2E7398F4180921E637F43B7B6
Authority key identifier: 8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/vAyvqClj_fNj-JPGw0WVFpTXnec.roa
Signing time: Fri 22 May 2026 09:35:03 +0000
ROA not before: Fri 22 May 2026 09:35:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402221
IP address blocks: 195.238.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:09:cf:a2:e7:39:8f:41:80:92:1e:63:7f:43:b7:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Validity
Not Before: May 22 09:35:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc0cafa82963fdf363f893c6c345951694d79de7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:90:c6:b1:9d:e8:12:4d:e1:a9:2e:35:90:80:
84:40:ee:da:a4:78:b4:f9:90:4c:f6:c4:ff:ff:e8:
f2:b9:c0:3b:ca:c9:f1:53:ed:46:ac:da:5b:1c:b5:
c1:32:ba:ee:25:4f:80:f5:54:3f:05:0e:d8:06:56:
33:92:a8:33:5b:90:33:bd:c7:05:ce:84:e5:5e:6d:
fb:5d:b2:b0:1b:95:da:ef:3c:a6:24:93:87:d0:bd:
cb:e7:26:fe:2e:4f:5e:c0:25:ff:06:24:6d:36:90:
a1:db:cb:bf:2a:61:e7:04:e2:06:78:6a:1c:dc:80:
db:e0:c1:47:dc:39:f7:b0:55:34:4f:cd:a0:4f:6d:
24:9d:0f:0a:c8:96:0a:a6:a0:b1:c5:16:65:c0:b1:
d2:72:14:16:9a:8c:22:a5:dd:6d:57:0a:7a:dd:f1:
3d:f4:e4:8f:04:17:57:8d:9a:e4:f9:b5:68:cb:f4:
38:aa:61:c2:b6:10:59:67:7d:93:20:bb:b0:f7:b2:
11:fa:1b:c3:70:a8:76:c2:db:97:57:3b:ec:62:6f:
87:19:75:ad:94:28:6f:ef:24:85:c1:9c:ee:78:27:
b4:56:03:27:e4:36:2e:60:c7:f6:0b:40:fa:58:d0:
92:d2:54:1a:b8:ef:36:81:71:9f:f9:b2:02:ab:9f:
c1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:0C:AF:A8:29:63:FD:F3:63:F8:93:C6:C3:45:95:16:94:D7:9D:E7
X509v3 Authority Key Identifier:
keyid:8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/vAyvqClj_fNj-JPGw0WVFpTXnec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.238.99.0/24
Signature Algorithm: sha256WithRSAEncryption
47:7a:30:28:9e:13:35:9a:7f:85:ce:e1:e6:2b:d6:31:11:61:
15:98:9c:a5:01:12:51:fd:57:48:47:44:71:68:1f:bb:ad:e1:
80:50:9e:14:c9:77:36:01:c3:cd:a0:01:63:bf:03:fa:35:c3:
29:17:9a:68:eb:4a:14:8a:4a:d3:24:df:f0:b5:cb:ba:4b:bd:
19:92:d2:e2:b1:bf:68:71:e7:a3:cc:c6:69:d0:e4:4c:9d:3c:
d9:96:43:cf:43:ba:b3:94:48:34:05:27:42:5e:ca:16:8e:74:
87:7e:0a:e9:82:a5:ec:14:3c:8f:3c:d3:f4:3d:26:db:95:0f:
8d:47:2e:5b:15:9b:e3:85:cc:04:ed:ee:18:8d:05:61:6a:dd:
21:b1:9e:5a:b7:2b:2d:b7:0c:9c:d5:1e:5a:e5:28:0e:36:8f:
5b:45:33:e9:de:ad:da:d9:a6:6c:4f:8f:d6:be:50:f4:54:80:
4c:cc:f6:56:67:c3:00:30:42:16:56:9e:15:0c:eb:f6:41:ca:
e1:b3:0b:bf:2d:78:80:05:6b:39:c2:86:cb:39:29:74:ae:0f:
a8:6d:a4:d6:9b:ec:08:5b:1c:6f:10:41:1b:5c:02:c0:69:45:
51:03:a9:fd:36:31:fe:6a:08:65:ef:73:d6:d3:41:f9:64:1e:
e0:f4:8a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 07:54:25 2026 by rpki-client