Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/vqgsCdnQjdwb8knW65OqR5JZyMQ.roa
File: vqgsCdnQjdwb8knW65OqR5JZyMQ.roa (raw, json)
Hash identifier: vaE98kS/d3xxz0YZliXnz/1dmO+QWIKwmXrkaJQJaCI=
Subject key identifier: BE:A8:2C:09:D9:D0:8D:DC:1B:F2:49:D6:EB:93:AA:47:92:59:C8:C4
Certificate issuer: /CN=510b419f0c17b4c8be217f64388d268d14dc261e
Certificate serial: 019FD1E072CDF91761FD9444A2B5FD56D25B
Authority key identifier: 51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/vqgsCdnQjdwb8knW65OqR5JZyMQ.roa
Signing time: Wed 05 Aug 2026 12:22:55 +0000
ROA not before: Wed 05 Aug 2026 12:22:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1273
IP address blocks: 81.172.56.0/24 maxlen: 24
81.172.57.0/24 maxlen: 24
81.172.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Aug 2026 00:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:e0:72:cd:f9:17:61:fd:94:44:a2:b5:fd:56:d2:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=510b419f0c17b4c8be217f64388d268d14dc261e
Validity
Not Before: Aug 5 12:22:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bea82c09d9d08ddc1bf249d6eb93aa479259c8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:94:87:18:27:9b:e2:25:52:c6:d2:53:6b:fd:
b7:9a:be:8e:1c:e8:17:16:c4:08:d5:d2:d2:26:51:
c6:0c:4b:4a:d9:4e:ab:e4:74:e8:e8:b2:7a:63:f4:
8d:3b:28:dd:98:20:6f:7c:a7:2e:2f:f5:04:ca:71:
8a:df:2d:ed:7a:97:b0:60:38:a6:54:93:4c:de:35:
c1:3c:3e:23:24:ca:2d:0e:0f:1f:71:77:94:46:34:
09:87:71:a5:c1:ed:8d:6b:97:08:a5:8e:ea:69:47:
90:19:23:6b:95:a0:c1:dc:c7:f8:38:4a:79:15:5e:
e4:47:4e:48:06:04:c0:73:75:d8:b5:e8:e3:61:5c:
1b:29:42:a8:cb:ad:56:ad:6b:9f:af:a6:a4:99:e8:
8b:a7:5e:98:75:21:6f:b6:cf:d9:da:1f:68:7b:29:
79:06:6e:6f:ad:38:a8:0a:8f:13:e9:af:f5:1b:1e:
22:80:29:69:99:79:85:81:fe:b8:dd:72:d6:73:a6:
de:e7:b3:82:e7:d5:4d:7d:41:9c:65:60:ee:c2:fe:
fa:7a:ba:5d:a0:7f:9a:79:8c:15:d5:51:ed:25:69:
40:49:ff:b5:0a:5f:5c:c8:ed:df:28:f5:3f:fa:0f:
c2:3e:7b:55:74:9c:94:ed:88:4c:b1:b7:eb:73:63:
8f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A8:2C:09:D9:D0:8D:DC:1B:F2:49:D6:EB:93:AA:47:92:59:C8:C4
X509v3 Authority Key Identifier:
keyid:51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/vqgsCdnQjdwb8knW65OqR5JZyMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.172.56.0-81.172.58.255
Signature Algorithm: sha256WithRSAEncryption
cb:f3:73:4a:a8:a8:80:0c:74:8d:c6:bf:3b:50:b2:66:dd:18:
31:66:e8:88:6d:6b:58:e7:60:54:b8:d9:ce:9b:c2:ec:f0:a5:
14:71:49:dc:dc:8d:25:04:d2:b1:f9:04:f4:5c:a1:60:d9:99:
8b:af:ed:2f:ec:3c:c6:46:71:37:46:2c:f9:c7:70:e0:3f:ce:
59:39:c5:bf:80:2e:20:d8:4d:6a:cc:5d:88:eb:11:70:00:1b:
36:52:af:11:48:e4:f2:79:47:1d:b4:1a:ed:a6:f9:b4:de:a4:
85:b4:73:2a:6a:61:74:7b:61:a2:62:55:48:b3:62:50:c8:9d:
a8:6b:d1:da:df:32:91:44:87:35:43:9a:9e:9d:7b:ea:55:a9:
ad:03:b7:3e:ed:d4:4d:95:b9:69:6b:21:95:72:97:28:2b:e9:
ac:e9:cd:da:5e:be:40:b1:f8:87:e8:ef:6f:6d:d4:c8:ed:71:
9c:b3:ab:fc:d5:49:dc:5e:5a:58:5c:c3:26:88:be:8e:8e:e8:
07:66:c5:1d:8b:f4:3e:5e:4a:13:ef:de:bd:74:e4:91:a4:a1:
ff:57:de:ba:91:73:3b:eb:2d:9b:d2:12:16:0d:40:3d:d1:7a:
17:44:5e:dc:98:39:ac:18:c2:ac:24:5f:f8:59:37:cd:92:c7:
18:80:3e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 06:49:08 2026 by rpki-client