Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/vxK22FrQeol1z1T5kocbd4vcApY.roa
File: vxK22FrQeol1z1T5kocbd4vcApY.roa (raw, json)
Hash identifier: N3qYiB5IYfSxPtYJirle9FvfdxcaVmwY/ECfel7WScI=
Subject key identifier: BF:12:B6:D8:5A:D0:7A:89:75:CF:54:F9:92:87:1B:77:8B:DC:02:96
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 019FDCD0FB1D31987534CC221B2F18AB3D1F
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/vxK22FrQeol1z1T5kocbd4vcApY.roa
Signing time: Fri 07 Aug 2026 15:21:51 +0000
ROA not before: Fri 07 Aug 2026 15:21:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219025
IP address blocks: 141.98.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dc:d0:fb:1d:31:98:75:34:cc:22:1b:2f:18:ab:3d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Aug 7 15:21:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf12b6d85ad07a8975cf54f992871b778bdc0296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5b:b9:a3:2d:c8:bc:0d:db:6d:68:cf:85:46:
5d:ff:6e:b7:35:cb:c1:00:2b:08:49:54:7c:01:6a:
7e:67:e8:b4:60:b6:25:d4:4c:dd:98:d9:c1:b9:44:
45:42:a6:6b:c6:e4:2b:2c:78:ca:45:12:d4:93:4c:
55:cc:b9:09:75:6c:86:83:e1:93:4c:9f:1c:ed:31:
50:5b:dd:ae:cd:15:bb:72:7f:12:bd:e6:7d:6c:56:
cc:65:b5:07:01:39:8f:13:54:bb:57:87:22:29:d2:
40:78:b8:1b:28:86:f0:39:4c:4c:2b:5e:6a:d9:bd:
06:f6:16:dc:36:76:01:b5:35:00:e0:54:b9:33:85:
5a:02:fc:39:c5:bb:b9:0e:02:bd:c5:c5:a2:6c:62:
3a:1f:fd:09:f9:bf:81:39:dd:61:e2:98:4b:69:00:
e9:b0:21:b2:23:8c:97:1e:9e:2e:74:af:63:ba:20:
2c:f3:f3:06:03:16:17:97:ee:f8:c3:06:48:4b:80:
c9:4a:b7:5c:f0:82:ab:4c:e4:2c:b7:21:bd:99:5d:
81:2e:ff:c8:cb:c5:e9:49:d2:75:83:16:1a:15:47:
4f:33:eb:50:3c:5c:45:9f:f9:71:b5:f2:18:a7:ec:
2b:0a:e2:5f:c0:1f:2f:f7:20:b2:ec:d5:50:58:35:
ad:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:12:B6:D8:5A:D0:7A:89:75:CF:54:F9:92:87:1B:77:8B:DC:02:96
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/vxK22FrQeol1z1T5kocbd4vcApY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.47.0/24
Signature Algorithm: sha256WithRSAEncryption
04:41:98:2e:90:f2:ba:70:fb:06:7e:50:76:db:72:d4:ac:dc:
a1:77:97:33:7e:92:95:99:5d:2a:10:90:d3:32:2c:78:30:e2:
ed:43:78:4c:11:4b:0d:da:c3:45:94:26:af:ae:1d:09:7b:97:
8a:f8:ce:f7:8c:73:02:7f:69:09:be:9c:3e:06:54:c4:77:5b:
45:aa:73:ff:dc:ec:2c:f4:8f:21:ac:ae:fd:48:3d:1c:6f:f8:
1b:d0:68:fd:ee:af:9f:b0:7b:a1:e9:93:64:9f:88:81:0d:8a:
57:2b:c6:30:7a:3f:15:bb:c0:8f:58:0a:74:ee:a0:e7:74:f4:
ca:5d:74:5e:88:3c:a9:67:c7:8f:6e:1b:53:73:94:d5:7b:4b:
bd:60:ef:34:3a:d0:ac:5d:43:08:d5:9a:dc:fd:62:dc:25:f3:
24:ee:50:86:51:63:eb:25:39:dd:9e:52:cc:ad:4c:7b:1c:2f:
79:6c:e2:0d:e6:fa:e0:5e:0e:2d:ec:a3:f1:dc:22:f4:4a:5b:
9b:ef:f7:78:9a:50:f1:e8:a9:92:ef:fd:0e:0a:6d:04:6f:98:
2f:7d:2b:a8:15:71:e3:3c:3b:55:ae:05:96:77:da:cd:39:bb:
44:4b:3d:b8:21:a0:0e:70:12:0c:cf:9c:7c:a3:0f:cb:6d:41:
52:70:5c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:15:37 2026 by rpki-client