Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/kVvC-_-04DQXpYRg6lgLRiqfMyM.roa
File: kVvC-_-04DQXpYRg6lgLRiqfMyM.roa (raw, json)
Hash identifier: wW4B7Glo9u2CvT2Wk4ZEfWPagqRobvUbw8zAr1FyeoA=
Subject key identifier: 91:5B:C2:FB:FF:B4:E0:34:17:A5:84:60:EA:58:0B:46:2A:9F:33:23
Certificate issuer: /CN=9893aef5fb507ef0e35b682daa8e7abc03c3a2af
Certificate serial: 019F236845E2ACEE17461677FA8AF0B70924
Authority key identifier: 98:93:AE:F5:FB:50:7E:F0:E3:5B:68:2D:AA:8E:7A:BC:03:C3:A2:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJOu9ftQfvDjW2gtqo56vAPDoq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/kVvC-_-04DQXpYRg6lgLRiqfMyM.roa
Signing time: Thu 02 Jul 2026 15:17:43 +0000
ROA not before: Thu 02 Jul 2026 15:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1299
IP address blocks: 194.174.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJOu9ftQfvDjW2gtqo56vAPDoq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:45:e2:ac:ee:17:46:16:77:fa:8a:f0:b7:09:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9893aef5fb507ef0e35b682daa8e7abc03c3a2af
Validity
Not Before: Jul 2 15:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=915bc2fbffb4e03417a58460ea580b462a9f3323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6b:1c:c4:bb:ec:5e:a0:3e:55:8f:ce:90:b7:
bb:42:e9:d9:f1:fd:3b:ab:15:e6:3a:c0:44:07:28:
52:54:d2:20:6d:cc:28:f0:e1:08:2a:f6:f3:d9:e5:
1e:d3:0f:f0:a1:43:14:fe:ab:af:ae:93:6d:14:bc:
ec:fd:b0:bf:10:37:48:79:ab:3e:64:d2:29:bb:14:
1e:cb:73:22:9b:56:61:e1:17:18:45:88:a0:d0:b3:
bd:20:d4:f4:d6:0e:5d:9b:bf:09:00:85:14:bb:92:
88:58:00:93:53:9d:66:64:29:10:50:17:35:de:55:
ad:78:95:f7:36:7a:36:40:64:46:8a:a4:03:fe:1f:
1e:d8:19:79:87:8b:88:82:d8:6d:1f:01:c2:02:00:
09:2f:c6:ff:df:a7:94:80:dc:fc:b9:52:62:52:63:
e4:ac:82:4b:33:f3:94:be:09:ef:07:bc:b8:43:ee:
3e:eb:65:20:b4:e6:e0:c5:79:0f:f3:e9:55:14:a0:
bf:0d:c5:ef:a8:62:67:d5:f4:54:03:2f:08:6a:89:
10:e0:c4:2c:d1:22:89:28:3e:3b:0d:01:23:13:d8:
85:c0:ff:53:37:60:51:a1:34:e3:7f:a3:7e:3e:34:
e5:0f:c9:1c:16:8e:53:35:16:25:b2:be:2b:dd:1b:
b0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5B:C2:FB:FF:B4:E0:34:17:A5:84:60:EA:58:0B:46:2A:9F:33:23
X509v3 Authority Key Identifier:
keyid:98:93:AE:F5:FB:50:7E:F0:E3:5B:68:2D:AA:8E:7A:BC:03:C3:A2:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJOu9ftQfvDjW2gtqo56vAPDoq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/kVvC-_-04DQXpYRg6lgLRiqfMyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/3798d2-28f2-4b18-a17c-cb86db350931/1/mJOu9ftQfvDjW2gtqo56vAPDoq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.174.11.0/24
Signature Algorithm: sha256WithRSAEncryption
58:81:b5:d6:ba:b8:1c:41:bb:39:fc:ac:bd:6d:97:15:79:17:
49:c8:68:64:d8:e3:8b:b6:0f:0b:53:d7:24:b5:e1:e8:0a:ae:
47:e3:a0:e4:48:43:c9:c2:9a:c1:a9:ce:45:8a:51:cb:06:63:
16:30:5a:91:2b:31:8e:ba:6f:d4:ae:80:17:89:e1:b8:bb:b0:
68:f5:cc:9f:61:e4:1e:ef:ce:b9:63:56:98:ee:54:1c:78:2e:
62:e7:1b:73:e6:74:de:d9:a7:e5:23:88:0f:3c:cb:e0:16:01:
2a:29:a4:3e:cc:7f:63:92:9d:2e:78:a2:fc:99:85:eb:40:65:
da:da:62:97:89:af:be:5c:3c:68:27:cb:1e:50:b3:81:9c:bb:
e2:d1:60:10:cd:1e:ac:e4:79:56:cc:fa:23:41:7a:ef:ec:ba:
75:8b:04:f5:72:0f:8a:c2:71:7f:55:1f:76:aa:a2:ee:be:4e:
12:f8:ab:30:b2:ba:04:a1:bd:93:2e:94:e0:b2:33:d7:c9:8a:
23:6c:41:55:7e:74:3f:13:43:f5:9a:e5:8b:d8:72:e6:d4:c5:
ce:85:25:9a:0b:46:49:d4:50:1f:14:b1:e4:54:d7:f3:7a:d9:
29:6d:16:67:11:8e:20:a0:bb:31:95:01:64:13:a8:fd:0c:cc:
d2:3d:48:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:02:48 2026 by rpki-client