Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/VcWF_8tZW-aKWRrexa4PZRlLUVk.roa
File: VcWF_8tZW-aKWRrexa4PZRlLUVk.roa (raw, json)
Hash identifier: kQ+9r5uhYNoqujRBI30qYZrKmKd4KGCvmxitPFyNcjk=
Subject key identifier: 55:C5:85:FF:CB:59:5B:E6:8A:59:1A:DE:C5:AE:0F:65:19:4B:51:59
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 01A00923AC593754503DFC12D37C05B505A0
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/VcWF_8tZW-aKWRrexa4PZRlLUVk.roa
Signing time: Sun 16 Aug 2026 05:55:27 +0000
ROA not before: Sun 16 Aug 2026 05:55:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21840
IP address blocks: 87.229.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:09:23:ac:59:37:54:50:3d:fc:12:d3:7c:05:b5:05:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Aug 16 05:55:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55c585ffcb595be68a591adec5ae0f65194b5159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:26:e6:36:57:03:ed:0c:41:8e:5b:2e:7b:ed:
9e:4a:c1:66:53:7a:fe:d2:03:6b:30:3b:6b:c3:bf:
d3:6f:34:2b:df:f9:dd:d9:b9:58:ae:0a:94:da:d8:
a5:ba:2e:80:ac:fe:85:1f:e8:54:2a:fa:97:0b:05:
5d:62:be:45:62:93:71:c5:db:17:2d:f7:3c:d1:2f:
b4:04:99:bc:9b:5c:a3:23:17:d3:c9:73:81:ca:e3:
1b:3c:5c:3a:f6:70:ff:c0:21:1f:52:40:21:44:2c:
6b:6a:6b:f5:e9:c1:76:9f:17:15:37:f6:9f:fd:ca:
9a:4c:c0:5c:9b:e1:fb:e8:a7:56:de:4b:8a:92:a9:
47:e9:ed:8d:44:c8:32:e0:ae:14:eb:60:b7:57:c3:
f9:f7:57:51:14:01:c9:36:2e:9c:6e:4c:3b:79:7c:
50:9a:ef:eb:eb:4a:10:d2:71:ea:ff:7b:46:0e:6e:
7d:a5:ef:8d:95:a4:70:67:b6:f4:55:93:c9:c8:42:
cd:fa:eb:27:05:98:13:8e:91:84:f8:65:03:b2:75:
32:ec:a2:ee:3e:c8:64:b3:5c:b4:3d:79:5a:bf:ad:
f2:c9:7c:19:bc:69:00:26:18:b6:6c:4c:4c:b2:70:
36:64:66:89:b5:a6:d4:6b:b3:2f:15:65:93:7c:88:
41:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C5:85:FF:CB:59:5B:E6:8A:59:1A:DE:C5:AE:0F:65:19:4B:51:59
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/VcWF_8tZW-aKWRrexa4PZRlLUVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.12.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:ac:91:a8:41:a2:3d:32:fc:42:08:92:fd:46:26:87:b7:1c:
75:f2:dc:75:22:37:50:42:1b:29:f6:44:69:0d:d0:18:d3:b2:
f4:c7:ab:e6:40:c7:cd:31:0c:d7:30:58:9a:fb:16:f7:f2:29:
b1:e0:95:c7:b7:fd:ce:c0:96:90:b7:99:3e:f7:50:ab:a0:0b:
94:ad:ba:0c:12:3b:27:c3:a7:36:34:5f:aa:e0:70:47:05:2e:
30:0b:46:26:b4:b7:78:f1:e3:46:0f:c7:f1:0e:8a:32:00:f1:
83:16:6f:17:1b:10:6a:76:27:bf:7f:a1:e9:a1:cd:50:98:27:
e6:84:58:02:89:ea:3d:75:7b:b9:ba:30:76:e5:80:39:1a:44:
ee:0d:01:8c:56:89:cb:e0:1a:97:99:c3:af:da:26:3a:47:05:
3a:6a:6a:aa:ab:b4:64:35:d3:8a:a2:23:39:84:25:92:f4:d8:
54:c3:b4:45:d4:2d:c5:84:d9:b3:77:d4:a8:bd:ec:95:fe:0a:
a8:80:3c:7d:37:8b:31:40:85:ac:88:a3:66:03:6b:14:fc:f9:
ec:77:b5:61:e3:57:f6:4c:f8:9b:e9:46:31:1c:da:82:34:2e:
d1:f1:c0:5f:75:4d:af:7f:64:6b:1d:6a:16:c3:cb:a9:e7:30:
98:49:76:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:21:07 2026 by rpki-client