Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/VtxOAyC1jurfOeVKtdTTH8iTEcc.roa
File: VtxOAyC1jurfOeVKtdTTH8iTEcc.roa (raw, json)
Hash identifier: f9BSHjZ9424D+yaM+htnDTunEdlUEZPPbziVKsnaNgU=
Subject key identifier: 56:DC:4E:03:20:B5:8E:EA:DF:39:E5:4A:B5:D4:D3:1F:C8:93:11:C7
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0ED2C0653AA91A9971B6817E7E67BBA48
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/VtxOAyC1jurfOeVKtdTTH8iTEcc.roa
Signing time: Tue 29 Sep 2026 12:38:00 +0000
ROA not before: Tue 29 Sep 2026 12:38:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62005
IP address blocks: 140.225.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:2c:06:53:aa:91:a9:97:1b:68:17:e7:e6:7b:ba:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 29 12:38:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56dc4e0320b58eeadf39e54ab5d4d31fc89311c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d0:cf:8d:d3:81:6a:b4:69:f6:5e:d8:ae:b7:
72:57:ae:60:87:32:49:56:99:57:cd:8c:83:62:08:
01:07:12:4c:42:49:f8:a6:ba:f6:8b:7f:03:15:db:
e9:5e:34:8e:0a:8d:85:75:07:0a:26:96:64:82:b6:
d7:e4:83:11:e1:99:a6:df:79:00:db:a2:d5:35:84:
e8:b0:75:46:6f:78:1b:e6:b4:e0:6f:fa:1c:70:7f:
5c:89:c7:ba:5d:3f:75:ed:69:2c:37:06:b8:4b:ef:
b4:19:89:75:96:53:b1:34:a7:2a:8a:77:6d:56:24:
f5:49:0b:c1:eb:a6:79:04:87:9f:e5:a7:e8:c4:73:
90:1f:61:46:7a:83:1f:0c:68:0c:a5:60:b7:3f:96:
f1:54:b9:49:c6:9c:2e:c2:b6:96:62:f7:86:c9:e9:
2a:df:f4:1d:f2:eb:86:e3:9f:b8:7f:54:33:bb:bd:
be:bf:18:e9:e1:92:a7:20:96:eb:f0:3a:8f:59:cf:
5b:5a:5c:e2:2d:5a:f4:72:ef:cd:ee:72:0c:e4:1d:
e0:5a:2c:b6:1c:78:69:a8:e0:3f:36:b4:78:c2:fc:
07:e6:2b:33:94:dd:29:13:51:a3:4f:c9:03:90:c7:
13:70:3b:ea:38:14:2d:d3:5e:b6:7c:01:2a:dc:c5:
b6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DC:4E:03:20:B5:8E:EA:DF:39:E5:4A:B5:D4:D3:1F:C8:93:11:C7
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/VtxOAyC1jurfOeVKtdTTH8iTEcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.225.199.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:43:9a:0b:58:0f:79:a6:2c:fc:7a:03:50:c9:ea:1c:3d:0f:
a2:0b:7d:2b:83:2c:53:97:a6:1e:a6:9d:34:36:87:12:4b:85:
25:72:16:dc:e3:f5:e5:73:35:f5:54:ea:ae:35:77:34:0c:d9:
54:0d:fb:f5:fe:72:b6:76:e6:0b:36:dc:b7:83:29:94:2c:a9:
87:6a:03:f9:01:1e:8d:99:cc:7f:6f:8b:28:2d:a2:f7:b9:af:
a7:3a:f6:d4:bb:2c:3b:d4:0f:e5:66:bd:e6:ea:fb:75:fd:12:
02:b8:fb:dd:4f:f5:29:ac:f1:3e:1b:d9:aa:ed:04:16:87:49:
8e:3a:c2:16:14:f8:e7:29:b3:a5:09:83:d2:d2:42:5e:de:c7:
9b:ae:ed:50:21:aa:de:43:0a:da:ff:68:1d:16:00:7c:33:5f:
0a:5c:9c:9f:42:cd:a3:c0:87:cd:15:03:a9:7a:d8:54:a9:28:
f4:2f:89:84:a4:68:f0:c1:11:45:45:d7:ce:5d:2a:24:d6:4e:
49:b6:49:e6:ff:6e:a7:f6:fb:5a:d5:9b:25:50:59:80:b7:4a:
93:74:cb:f7:a2:e3:ce:e1:2e:de:50:c1:77:01:3c:4a:74:a4:
01:8b:65:a6:59:41:04:13:60:dd:3b:59:3c:bf:9c:2c:76:61:
64:a0:f4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:44:00 2026 by rpki-client