Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/VYVttYZ6eh-FVP2l9smUTvzkisQ.roa
File: VYVttYZ6eh-FVP2l9smUTvzkisQ.roa (raw, json)
Hash identifier: aj+lOyE17KCo89DLgPDfN1NkWJX3b/mkunX6W40Tl7g=
Subject key identifier: 55:85:6D:B5:86:7A:7A:1F:85:54:FD:A5:F6:C9:94:4E:FC:E4:8A:C4
Certificate issuer: /CN=52226f671c2643a5c04846264fee01f943ac2bfc
Certificate serial: 019FF4E8E47884194AB5A03B2F7639D6347E
Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/VYVttYZ6eh-FVP2l9smUTvzkisQ.roa
Signing time: Wed 12 Aug 2026 07:38:51 +0000
ROA not before: Wed 12 Aug 2026 07:38:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135392
IP address blocks: 80.86.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f4:e8:e4:78:84:19:4a:b5:a0:3b:2f:76:39:d6:34:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc
Validity
Not Before: Aug 12 07:38:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55856db5867a7a1f8554fda5f6c9944efce48ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a5:ee:c2:99:db:3a:9a:98:81:bc:db:4e:8d:
01:41:06:c7:02:2e:01:49:f5:e1:40:82:fa:e9:3b:
22:93:30:5b:ee:ad:40:1a:f6:e5:38:6b:17:bd:93:
19:7d:7b:84:18:ab:25:25:e1:82:36:fa:54:ba:3d:
5b:90:57:46:1d:b5:22:92:f9:60:06:cc:4f:e4:ac:
1c:66:96:8b:fb:44:17:ab:97:81:43:94:a3:5a:2b:
25:19:9b:2b:6b:94:40:ed:e6:f3:97:7c:b7:32:91:
10:3a:ba:15:c5:bc:47:84:34:05:92:ff:4b:b9:f2:
04:05:29:4c:c3:d2:83:d8:0b:b3:08:ad:53:f7:1c:
7d:fd:8c:3f:f3:d1:81:66:96:68:28:78:b1:b4:0a:
39:4a:05:d9:86:06:8d:15:63:45:a3:3b:60:95:e5:
a4:d5:fc:cf:61:34:08:ae:83:9f:dc:bb:58:2e:f6:
ae:1b:ea:88:1e:24:a3:e1:9b:61:2f:c9:8e:12:33:
40:ce:15:5e:72:da:47:94:08:9c:a5:3d:0b:9d:09:
57:30:ab:b0:fd:d4:58:1b:38:57:77:5c:bf:36:bb:
7d:c2:33:bd:37:04:46:a2:96:3c:2e:01:49:3f:63:
63:0d:8b:8e:6a:43:a9:ce:09:1b:7e:89:9c:07:9f:
79:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:85:6D:B5:86:7A:7A:1F:85:54:FD:A5:F6:C9:94:4E:FC:E4:8A:C4
X509v3 Authority Key Identifier:
keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/VYVttYZ6eh-FVP2l9smUTvzkisQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.223.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:0d:a2:50:90:21:97:e0:92:fc:e0:85:ed:1d:e3:da:4b:de:
19:2d:f1:67:34:7d:50:26:05:c7:36:0a:dd:41:ff:e3:58:97:
5c:94:bf:a3:71:a4:f8:82:27:84:f6:a7:05:f5:41:70:dd:a7:
81:f7:a9:eb:40:33:0c:18:b5:59:8a:da:fd:ce:1f:64:5d:af:
3a:16:86:39:01:c3:35:ee:fb:50:1b:17:2d:c8:0e:13:96:9a:
97:e7:22:2e:11:ef:64:50:5e:a2:51:2b:e9:ed:21:69:56:0f:
1e:13:11:7a:45:be:b6:ad:5a:8d:a9:b3:81:6d:73:98:a1:4c:
2d:75:3e:93:c3:84:a0:5a:0c:41:39:1f:53:d2:8f:3d:d1:72:
2d:02:09:bf:08:d5:ab:98:24:0e:22:cd:46:36:62:7b:d3:f7:
95:2d:28:c4:fa:d9:e6:66:2d:2c:c3:c3:9d:ac:80:6e:7c:02:
5a:b1:c2:88:0c:5c:51:a5:1d:2a:9b:9f:30:ac:b1:48:95:26:
1b:5d:97:c9:86:16:03:88:4c:4c:14:94:f0:83:2b:1b:bf:50:
4f:10:21:6b:0c:10:7f:f0:04:25:26:5c:84:27:69:05:5b:5a:
ba:e5:bf:96:26:c8:d1:9b:be:8b:a9:27:3f:40:5b:35:da:eb:
6c:5a:06:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:17:52 2026 by rpki-client