Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/vN3X2gJyA-NaxHofhY9qNnlihiU.roa
File: vN3X2gJyA-NaxHofhY9qNnlihiU.roa (raw, json)
Hash identifier: vFhwABOyS5jHOyrs6cugyR9qcbRtTvsFb7emOoRjLdk=
Subject key identifier: BC:DD:D7:DA:02:72:03:E3:5A:C4:7A:1F:85:8F:6A:36:79:62:86:25
Certificate issuer: /CN=dec0f14fac8ddb348037280076cc36614da305ec
Certificate serial: 019FD38851C9648D896E8E091446BB01DFF7
Authority key identifier: DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/vN3X2gJyA-NaxHofhY9qNnlihiU.roa
Signing time: Wed 05 Aug 2026 20:05:54 +0000
ROA not before: Wed 05 Aug 2026 20:05:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 185.127.200.0/24 maxlen: 24
185.127.201.0/24 maxlen: 24
185.127.202.0/24 maxlen: 24
185.127.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.mft
rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d3:88:51:c9:64:8d:89:6e:8e:09:14:46:bb:01:df:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dec0f14fac8ddb348037280076cc36614da305ec
Validity
Not Before: Aug 5 20:05:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bcddd7da027203e35ac47a1f858f6a3679628625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:86:28:19:53:19:f6:d4:0f:3c:e4:43:35:22:
38:d9:3b:19:95:d3:c4:fd:af:8b:43:10:43:fb:b3:
6c:e0:db:ce:94:7d:e4:ae:3e:d5:f3:27:89:b7:8d:
fe:aa:fa:3d:a6:2b:03:8f:d1:8d:3f:07:36:78:ff:
79:a1:0c:22:7d:93:31:bc:cf:fb:2f:99:a2:65:02:
12:ae:77:49:d4:9b:9f:18:e4:42:f0:45:64:81:4c:
c7:ab:91:e6:77:7e:71:cc:72:b5:97:12:0a:2c:0c:
75:b6:ad:61:ee:d0:2a:b9:87:c3:42:6a:e0:4d:a7:
e4:95:12:d9:40:ae:0a:13:0d:7c:11:c3:98:0e:59:
00:c6:3b:2f:80:46:d2:7f:84:ae:e5:08:ef:b2:2c:
98:89:e5:e0:da:0f:35:ba:8d:00:a1:03:26:6f:e4:
4e:2e:da:2e:dd:2d:56:86:36:91:78:e9:77:80:1e:
9f:3f:3f:be:bd:34:aa:26:cd:f7:5d:b8:0c:c8:3d:
95:43:42:52:31:89:eb:64:9c:f8:e0:1f:98:46:78:
53:7b:92:bf:db:11:49:4a:38:9f:b8:c8:95:d3:43:
20:04:67:78:5b:7f:b4:35:ba:de:04:04:00:ed:07:
0a:92:c0:65:fa:6b:c1:d4:be:4b:2f:b5:a2:3e:97:
9f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DD:D7:DA:02:72:03:E3:5A:C4:7A:1F:85:8F:6A:36:79:62:86:25
X509v3 Authority Key Identifier:
keyid:DE:C0:F1:4F:AC:8D:DB:34:80:37:28:00:76:CC:36:61:4D:A3:05:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3sDxT6yN2zSANygAdsw2YU2jBew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/vN3X2gJyA-NaxHofhY9qNnlihiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/00a9f9-14a1-4c96-8223-eeb6fd32e92f/1/3sDxT6yN2zSANygAdsw2YU2jBew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.200.0/22
Signature Algorithm: sha256WithRSAEncryption
80:ad:c2:8f:c6:49:20:56:68:b6:e0:ac:51:fa:26:a9:17:b9:
70:38:97:27:71:22:ad:7a:5d:7c:c0:33:e8:b8:5e:03:1f:e8:
86:ad:32:78:e4:00:88:41:6a:0b:9d:cb:c8:f9:5f:70:7c:f7:
fa:39:a3:49:a0:a3:ca:cf:8c:c7:7f:c6:de:c7:51:2a:c5:da:
c2:bb:d8:93:28:0c:be:2b:57:23:95:6d:be:90:53:e5:bc:c5:
0c:fd:30:4e:f1:51:1e:79:3f:d1:2e:a2:f2:33:ff:1c:d2:a2:
59:e7:00:c3:7c:b1:ee:ea:56:b2:75:64:11:26:7c:ae:6a:40:
c2:ab:48:e9:64:c2:c2:2d:47:6f:c0:e5:9c:8b:ae:46:22:00:
dc:03:33:e0:4e:0d:40:77:84:c7:cb:72:71:d5:c8:f1:ac:b8:
aa:a3:11:35:0d:d1:5c:c3:db:c5:c8:31:be:8a:f1:bd:cf:f7:
e5:51:d1:0a:bf:9a:73:0b:95:0d:00:b4:43:87:31:3d:7a:43:
9f:76:fe:dd:60:29:80:5c:08:d9:20:e7:d7:dc:46:27:40:2e:
2e:0d:08:65:36:45:a0:f0:91:24:cb:62:0c:1c:24:b9:90:49:
32:22:1f:f4:06:b1:aa:32:90:9d:4c:90:99:98:46:ca:3d:37:
e7:42:95:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:26:36 2026 by rpki-client