Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/VWM7lA-UncwK30_u4wZN9H8N1gk.roa
File: VWM7lA-UncwK30_u4wZN9H8N1gk.roa (raw, json)
Hash identifier: UAC5m76d6Heuh1OxbGU6JpOHUBx0MhMtwx6y8Lbk9fg=
Subject key identifier: 55:63:3B:94:0F:94:9D:CC:0A:DF:4F:EE:E3:06:4D:F4:7F:0D:D6:09
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 01A07FCF10DCD48A7E5C5893B81A4F8E9F0D
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/VWM7lA-UncwK30_u4wZN9H8N1gk.roa
Signing time: Tue 08 Sep 2026 06:57:51 +0000
ROA not before: Tue 08 Sep 2026 06:57:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199651
IP address blocks: 212.22.73.0/24 maxlen: 24
212.22.80.0/24 maxlen: 24
2a09:d007::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 11:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7f:cf:10:dc:d4:8a:7e:5c:58:93:b8:1a:4f:8e:9f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Sep 8 06:57:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55633b940f949dcc0adf4feee3064df47f0dd609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:39:c2:0b:d1:30:5c:76:57:9c:95:3a:5a:a4:
28:6b:c3:0c:ce:2e:96:46:ec:5a:80:a2:f7:ef:9e:
52:c7:f3:8b:04:71:90:2c:69:cd:b2:72:c1:ed:9f:
5e:a6:a8:f3:62:ff:63:e5:7d:85:ec:8c:be:b1:92:
75:6c:7f:e0:e7:df:9a:a9:12:9c:bb:36:92:74:b7:
eb:cd:85:78:6d:43:a1:66:fc:e6:fe:9a:75:fa:4d:
7c:fd:29:42:1f:fa:c9:a8:7b:7d:1f:23:4b:2e:d6:
1d:d0:b2:f3:f8:46:3e:ef:00:0a:1f:b8:7a:65:67:
26:97:e9:04:7d:dd:4d:d6:9e:90:7f:da:d2:a6:b1:
2c:14:78:b8:b2:dc:51:53:f9:88:f2:37:70:59:6e:
84:92:55:a1:2d:0e:7b:08:aa:8a:57:dd:6c:d2:6e:
a6:a9:24:2c:0a:c5:ec:ac:e2:68:59:a2:ee:8d:5f:
e1:c7:08:5b:40:ed:a4:0a:84:ae:dd:6f:bb:09:b4:
21:95:bb:12:9a:22:dc:f4:0e:5e:42:99:3e:9d:4c:
41:2c:08:1d:27:78:66:58:50:f3:b2:b0:a4:59:cb:
71:20:a5:a2:d7:09:7d:9c:84:c8:eb:cd:e4:71:9b:
d2:d3:66:73:91:39:37:c2:c5:f4:98:a6:e5:bf:32:
bb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:63:3B:94:0F:94:9D:CC:0A:DF:4F:EE:E3:06:4D:F4:7F:0D:D6:09
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/VWM7lA-UncwK30_u4wZN9H8N1gk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.22.73.0/24
212.22.80.0/24
IPv6:
2a09:d007::/48
Signature Algorithm: sha256WithRSAEncryption
28:07:fe:e3:b2:75:d4:eb:f3:9b:c6:99:b2:77:fa:51:ec:70:
29:48:a5:f4:00:6a:ec:b5:dc:2d:84:35:a4:70:13:a1:f2:f9:
70:38:b4:e4:ee:9f:72:48:2d:df:7f:56:10:4c:7f:6c:87:11:
df:ed:0e:5d:87:5b:c5:53:1b:78:5a:3a:1b:ee:85:6b:57:1a:
80:c4:33:1d:3d:6a:64:af:28:f1:8d:3d:42:56:3d:53:73:47:
b2:e9:e6:47:e5:59:f1:e0:59:b9:cf:87:18:ea:0d:eb:07:07:
cf:96:b9:e7:ce:f4:d3:a1:e4:77:cb:47:e4:f8:9d:69:b2:6b:
0b:a6:dc:9b:15:47:d2:5c:4f:05:2f:2c:8d:f7:93:73:64:99:
42:9c:02:46:78:92:1b:62:f4:b4:c1:c4:41:2f:1b:78:bb:06:
8c:48:81:10:5c:a6:d8:1f:08:bd:d1:c6:ae:b4:95:a2:c5:f8:
92:75:75:19:e7:fe:a6:64:78:2c:b9:6b:17:3a:1f:fa:a4:ce:
de:f3:fc:df:cb:41:f5:b1:90:d1:5d:86:e4:9c:13:dd:1a:41:
89:c1:24:b8:d0:91:a8:9f:c4:83:6e:49:4f:94:dc:8b:e6:fd:
ed:2e:fd:b9:dc:db:cc:10:c7:dd:82:b8:b4:62:99:c7:b1:cc:
1a:3f:88:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 20:56:22 2026 by rpki-client