Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/vtKFCgLOZ8wS2x-s6VKfUtZdS6A.roa
File: vtKFCgLOZ8wS2x-s6VKfUtZdS6A.roa (raw, json)
Hash identifier: NB2FmYbPK0dEJHV51l4eabkaH3jjAUfpLoCOp7+GBrM=
Subject key identifier: BE:D2:85:0A:02:CE:67:CC:12:DB:1F:AC:E9:52:9F:52:D6:5D:4B:A0
Certificate issuer: /CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Certificate serial: 01A01F213F972CCDD691F262FF0AE1ED3089
Authority key identifier: 8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/vtKFCgLOZ8wS2x-s6VKfUtZdS6A.roa
Signing time: Thu 20 Aug 2026 12:24:27 +0000
ROA not before: Thu 20 Aug 2026 12:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203872
IP address blocks: 141.0.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:21:3f:97:2c:cd:d6:91:f2:62:ff:0a:e1:ed:30:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cd802512ccb745b2a1b8f315714ebe39395403e
Validity
Not Before: Aug 20 12:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bed2850a02ce67cc12db1face9529f52d65d4ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1a:78:ac:bb:e0:0c:fa:53:4e:11:17:1c:93:
c2:0c:3f:95:c6:f4:11:69:97:e3:88:b8:8f:c4:c1:
c3:6c:a0:a8:ce:45:07:b6:00:af:0d:84:ec:49:54:
40:b5:6d:2c:a9:ec:e8:fb:77:66:97:75:39:67:90:
1a:3b:33:a1:7f:6e:68:67:74:54:00:b4:2c:09:46:
99:af:4c:78:2d:64:4e:92:c7:5c:1a:d3:b9:32:a6:
1e:ed:f6:69:ec:05:9d:2f:d9:41:77:99:4e:6a:f2:
f5:f1:46:36:aa:23:31:04:b3:d3:08:47:5f:e9:2d:
88:8c:37:76:ae:a5:6d:33:fb:03:60:37:6e:00:77:
0c:bc:24:37:25:e1:e9:e0:f0:f1:ad:75:4c:3f:a5:
37:eb:bc:64:a7:51:7b:d1:c5:16:af:ac:6e:0c:93:
9a:64:e9:10:8b:06:33:e5:c2:af:5a:da:fc:c1:4c:
4c:b2:7e:67:5a:61:61:c0:54:9f:1a:69:65:bd:61:
fb:4f:52:ee:82:ad:e7:ce:9a:d8:a4:59:33:4e:0d:
11:48:d0:73:41:bc:30:cf:20:4b:5f:44:1b:da:f1:
be:69:65:58:e3:1f:04:5a:88:d7:6b:f3:7b:ae:79:
1a:dd:12:38:a5:a1:b9:23:31:b5:9f:3f:4c:bf:77:
4a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D2:85:0A:02:CE:67:CC:12:DB:1F:AC:E9:52:9F:52:D6:5D:4B:A0
X509v3 Authority Key Identifier:
keyid:8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/vtKFCgLOZ8wS2x-s6VKfUtZdS6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.0.191.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:92:21:a3:55:b4:b0:df:1b:e1:4b:bf:af:55:69:de:49:4c:
0a:32:c6:05:ec:c5:89:be:c1:a3:8b:ac:80:35:03:07:e0:53:
96:9a:dc:50:43:55:ea:c1:28:51:2b:f9:92:3b:bf:78:54:50:
16:79:48:26:44:5c:73:f3:d6:b4:b0:39:d2:de:7c:77:ee:7c:
27:1d:de:d6:6b:2b:58:b9:aa:65:82:99:16:66:b4:00:ec:9f:
ae:11:82:bb:91:89:18:a7:ae:f1:e8:45:b0:0a:c2:ef:3f:60:
48:71:5f:74:f2:49:f8:55:07:0d:89:d2:0c:52:20:94:9f:67:
ac:e2:e8:67:d2:48:61:50:44:2d:c9:39:ba:d3:34:64:4f:5e:
08:08:0c:c2:91:82:51:1e:9d:f3:65:94:83:92:c1:53:74:9b:
c1:1b:6e:c3:d9:59:57:56:04:3d:ee:22:0e:d6:77:55:05:c4:
b2:d6:90:14:ac:5b:a9:31:62:7e:b1:2a:61:52:cf:10:e5:be:
4f:17:41:88:ce:c8:af:fb:62:fd:1c:ea:a1:94:e3:12:9d:12:
16:d0:3e:1b:cf:05:79:af:db:74:82:28:f4:30:3f:35:41:3f:
cb:23:8f:0b:96:84:52:a8:55:20:a4:f5:e3:5c:f8:75:f2:f3:
cc:7c:ba:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 09:23:58 2026 by rpki-client