Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/VsCifY8XLUBVZAJIXlh4tHs6Tys.roa
File: VsCifY8XLUBVZAJIXlh4tHs6Tys.roa (raw, json)
Hash identifier: yx2cdHQ3fO2iayrPEdicOAnB23aOaGWVWINVVkpgEOY=
Subject key identifier: 56:C0:A2:7D:8F:17:2D:40:55:64:02:48:5E:58:78:B4:7B:3A:4F:2B
Certificate issuer: /CN=661691ca9c58d0859b6b870230b0f581be66a58a
Certificate serial: 019CAE63080933E798FEDD5F6A9363C13A0A
Authority key identifier: 66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/VsCifY8XLUBVZAJIXlh4tHs6Tys.roa
Signing time: Mon 02 Mar 2026 11:50:51 +0000
ROA not before: Mon 02 Mar 2026 11:50:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206264
IP address blocks: 45.84.192.0/24 maxlen: 24
45.84.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 08:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:63:08:09:33:e7:98:fe:dd:5f:6a:93:63:c1:3a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=661691ca9c58d0859b6b870230b0f581be66a58a
Validity
Not Before: Mar 2 11:50:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56c0a27d8f172d40556402485e5878b47b3a4f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f9:b5:aa:b7:59:dc:af:d0:8f:3d:d7:ba:2b:
11:16:98:e2:fe:c6:46:c5:f1:af:47:ff:b4:ca:1d:
4c:01:a8:1a:28:f3:d3:dd:06:bc:7e:81:8e:9e:08:
60:28:96:e0:42:6a:fb:d6:e8:cd:ba:4a:35:eb:32:
13:0d:87:de:71:5a:5a:f0:c5:f2:32:ab:68:d4:c5:
52:29:5d:6c:7e:96:10:10:10:75:dc:42:ac:8e:d3:
9a:6e:5e:7b:65:cc:c1:4c:5b:47:99:ce:27:f9:78:
77:f5:ca:1e:f7:34:5c:be:9c:d3:77:16:96:7a:a6:
15:43:b8:8f:2d:0e:7b:55:9b:41:15:3f:85:a6:0e:
0e:42:f2:84:a6:22:f5:96:26:cd:25:c3:e4:56:dc:
2a:10:65:aa:ad:10:66:9d:8f:82:39:f0:35:7c:b7:
61:3f:a5:6d:50:19:7d:68:2e:5a:5e:46:d9:90:45:
21:40:da:95:38:e4:d4:d5:87:cd:1e:c9:99:52:8c:
03:b8:72:e3:99:e6:8e:73:56:e6:3a:84:ec:fb:c0:
91:66:72:02:b0:aa:a7:fa:1b:e6:a5:30:b5:6b:cc:
12:b4:97:df:a2:21:f5:85:11:26:db:0d:14:4c:a9:
99:f5:76:f3:06:52:b2:1a:b8:1a:1a:4f:c5:bc:3b:
50:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C0:A2:7D:8F:17:2D:40:55:64:02:48:5E:58:78:B4:7B:3A:4F:2B
X509v3 Authority Key Identifier:
keyid:66:16:91:CA:9C:58:D0:85:9B:6B:87:02:30:B0:F5:81:BE:66:A5:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhaRypxY0IWba4cCMLD1gb5mpYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/VsCifY8XLUBVZAJIXlh4tHs6Tys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/8f0259-9bc8-4fdc-926d-1a80daffd796/1/ZhaRypxY0IWba4cCMLD1gb5mpYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.192.0/23
Signature Algorithm: sha256WithRSAEncryption
80:12:c2:39:b5:6b:10:03:69:9d:7c:bf:ab:0d:47:39:06:19:
8f:22:b7:a5:de:03:15:54:3a:78:52:f9:da:de:55:34:2b:2f:
fa:a9:12:1e:46:14:66:54:6f:ad:9a:cb:b3:d4:a7:bc:d1:d4:
ea:f8:70:ee:52:0d:23:f2:0d:05:b3:16:f7:b5:ae:b7:de:ff:
6e:8c:35:e8:7e:eb:aa:a6:1f:e0:31:d7:5d:46:56:f7:32:40:
fa:21:29:49:8c:c6:57:f4:25:51:e9:0b:2e:cd:70:5e:81:9f:
8a:8c:08:bb:77:71:bf:87:b2:98:69:c1:19:b2:f7:54:27:c9:
d3:09:a1:f1:00:9c:e1:54:d8:a1:3c:6c:dc:dc:a6:82:29:df:
d3:15:88:37:40:87:85:69:a6:f5:ff:32:b2:c9:8f:73:2a:30:
df:02:fe:c7:7c:b2:86:70:b3:3d:80:99:56:e6:f5:95:92:18:
4c:e3:c1:fe:7f:8e:26:df:f2:8e:9c:07:54:d6:87:9d:4d:83:
ca:69:0b:b7:12:a7:2b:2a:e6:a2:1e:39:3f:66:a4:93:8d:37:
eb:5b:09:7d:89:30:02:c3:48:a4:fa:fd:2a:d9:c1:6d:3f:7f:
5d:f4:f1:4d:3c:fb:37:ad:c8:1d:30:68:63:12:ae:84:8b:03:
5b:e1:d5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:25:15 2026 by rpki-client