Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/VA3axwwQBEAh3SAZjVNVTalZ9aI.roa
File: VA3axwwQBEAh3SAZjVNVTalZ9aI.roa (raw, json)
Hash identifier: YtFl8mLZl6C/LoW3ZfK8hDiYR/xZr0E23c6JNCbR4jI=
Subject key identifier: 54:0D:DA:C7:0C:10:04:40:21:DD:20:19:8D:53:55:4D:A9:59:F5:A2
Certificate issuer: /CN=d716209d7def98a2bb34977f65009b3520da256e
Certificate serial: 019DB3C1F72B7216499E649FC6702CFC7AA2
Authority key identifier: D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/VA3axwwQBEAh3SAZjVNVTalZ9aI.roa
Signing time: Wed 22 Apr 2026 05:55:26 +0000
ROA not before: Wed 22 Apr 2026 05:55:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208185
IP address blocks: 91.239.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 17:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b3:c1:f7:2b:72:16:49:9e:64:9f:c6:70:2c:fc:7a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d716209d7def98a2bb34977f65009b3520da256e
Validity
Not Before: Apr 22 05:55:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=540ddac70c10044021dd20198d53554da959f5a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:22:98:92:4a:ab:a7:46:24:94:92:70:0c:64:
f6:a8:79:d0:b4:75:33:d9:87:c7:fa:83:53:0e:2f:
9f:08:28:47:46:e7:8e:f4:b3:22:bc:89:a8:e9:e7:
d5:1f:56:5d:25:2a:dd:70:c5:f5:3d:da:7f:c0:fd:
dd:e3:22:fd:04:ab:e8:51:fe:89:7e:dc:ab:e2:af:
11:fa:36:f7:4f:20:5b:e5:30:97:3b:73:8a:54:bc:
02:e9:d1:71:b5:20:ea:50:66:2e:3d:9a:7b:f2:58:
a1:c6:14:a2:16:0b:80:92:a0:08:ca:ce:7d:9e:f9:
51:49:23:85:f6:53:c3:55:c6:07:f8:cf:ac:44:79:
8d:8a:b2:85:59:c7:2e:1a:f4:68:4e:90:df:43:62:
34:7d:43:91:ba:36:6b:6b:6f:20:6b:20:ef:4d:ca:
53:4e:15:93:56:b8:7a:fa:1e:d0:15:a9:6c:fc:1d:
e7:d5:fb:ad:3b:2a:ba:e9:30:d3:ef:c0:ca:93:1e:
5a:31:a5:c8:00:9f:e6:38:ca:10:44:a9:42:0e:a4:
b7:83:32:c0:13:b0:5d:13:1d:94:b9:6a:25:cc:6c:
99:2e:02:a8:d4:de:79:ca:d2:82:93:b3:40:ab:18:
f3:13:9a:af:b0:dc:31:9d:a3:fe:2f:93:49:0a:eb:
0d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:0D:DA:C7:0C:10:04:40:21:DD:20:19:8D:53:55:4D:A9:59:F5:A2
X509v3 Authority Key Identifier:
keyid:D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/VA3axwwQBEAh3SAZjVNVTalZ9aI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.192.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:ff:ba:a5:17:6f:ab:c0:ae:19:c1:58:b1:d6:21:d2:20:03:
45:9f:12:ca:7b:80:5e:fc:8f:4d:4c:a0:ed:27:72:f4:ad:79:
8a:2e:21:8e:38:22:db:2d:08:65:a4:7e:26:84:ab:71:ae:5b:
78:4f:97:44:9a:cd:45:b5:83:2c:8a:9d:8a:8b:a7:55:d1:f2:
4d:8b:45:c7:6f:58:d8:77:52:cc:cf:47:da:c4:83:c8:f6:ad:
c7:e7:a9:2e:25:58:ee:80:bd:25:5e:96:9b:1a:f5:0c:15:dd:
ea:22:a7:d3:35:c5:de:04:c6:55:ef:f8:b9:87:b8:84:db:40:
dc:4c:bc:df:5b:40:79:3d:d1:77:a7:96:9b:d0:8e:82:59:21:
5c:88:72:42:10:02:35:e9:a0:a9:04:06:d9:32:cf:85:97:48:
8b:cd:b9:24:e4:e6:b5:13:d8:3c:1e:8b:3a:24:bf:21:8b:39:
b4:4f:ca:04:f6:b9:f6:5e:52:c1:7b:a4:3c:d8:5d:d6:c8:26:
7f:4a:79:e6:ad:38:3e:d0:49:c8:6a:b0:6b:91:a2:cf:ff:e3:
2c:2e:b0:80:56:e8:e7:d7:66:39:91:9e:c2:25:59:fe:0d:f2:
b2:d0:94:67:c4:1a:d7:d4:03:29:eb:38:1d:4e:1a:93:1d:00:
81:6a:79:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 02:40:18 2026 by rpki-client