Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/VQyFxclB4S79ZiZcISYdl5ii3Yc.roa
File: VQyFxclB4S79ZiZcISYdl5ii3Yc.roa (raw, json)
Hash identifier: iaO6GBvF8FB/BRFJa4EM0A0S19lMUnhNSB3q1meSxEw=
Subject key identifier: 55:0C:85:C5:C9:41:E1:2E:FD:66:26:5C:21:26:1D:97:98:A2:DD:87
Certificate issuer: /CN=d91786a069e4934b2681bb8e9b3738079b24ef65
Certificate serial: 019E7F3DA583478B3AE63CAD2DA706202BCC
Authority key identifier: D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/VQyFxclB4S79ZiZcISYdl5ii3Yc.roa
Signing time: Sun 31 May 2026 18:13:26 +0000
ROA not before: Sun 31 May 2026 18:13:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211421
IP address blocks: 212.108.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7f:3d:a5:83:47:8b:3a:e6:3c:ad:2d:a7:06:20:2b:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d91786a069e4934b2681bb8e9b3738079b24ef65
Validity
Not Before: May 31 18:13:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=550c85c5c941e12efd66265c21261d9798a2dd87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b1:83:67:83:3e:fe:c0:57:35:fd:06:24:21:
f2:81:8a:bd:10:70:52:3d:0f:f9:02:dc:33:ad:12:
c4:8f:71:db:a9:9d:8f:ac:52:50:81:1f:2c:4d:f0:
44:cc:d5:a7:5b:86:af:8e:a1:05:d2:6c:26:24:20:
f7:3d:35:df:aa:f2:58:f7:87:c3:46:59:11:91:72:
ee:b1:c3:2f:91:f9:be:b7:75:0c:9a:45:bd:c6:1d:
44:de:41:cf:f1:01:13:b3:9c:70:c4:5a:1f:8a:8d:
7e:cf:82:43:2c:38:00:85:38:b9:86:8a:4a:53:6b:
d3:1f:b9:c8:d2:e0:66:b3:b8:09:9b:d0:60:40:92:
45:80:69:b2:dd:dd:2f:f6:08:4c:40:b3:13:50:f8:
16:7d:c7:ec:75:bd:b9:8b:f4:14:40:bb:39:67:e5:
68:c5:8b:c5:92:2c:37:f9:dd:b2:0a:77:27:2a:78:
ad:1d:fc:c7:45:e1:0d:c1:d8:e0:83:3e:bc:4f:6d:
0d:ad:66:42:c9:74:ec:84:02:7f:95:3f:fc:54:7f:
7b:4c:7b:c5:6b:76:6d:ec:47:35:a5:58:b0:7b:06:
0b:c0:df:54:17:b1:c5:5c:55:1f:d5:c6:ab:5f:bf:
33:dd:7a:9d:4b:7d:48:85:db:25:bd:21:b2:8a:7c:
78:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:0C:85:C5:C9:41:E1:2E:FD:66:26:5C:21:26:1D:97:98:A2:DD:87
X509v3 Authority Key Identifier:
keyid:D9:17:86:A0:69:E4:93:4B:26:81:BB:8E:9B:37:38:07:9B:24:EF:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ReGoGnkk0smgbuOmzc4B5sk72U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/VQyFxclB4S79ZiZcISYdl5ii3Yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bce915-0783-4a54-8c45-52cba97d9b9e/1/2ReGoGnkk0smgbuOmzc4B5sk72U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.108.97.0/24
Signature Algorithm: sha256WithRSAEncryption
24:bb:9a:24:8d:43:b4:31:91:17:f1:8a:c9:90:69:9b:68:a1:
f0:06:e0:cf:64:60:80:79:5a:87:0e:df:df:2d:9e:54:04:40:
e6:6d:11:75:5a:c3:c6:0f:6e:06:8d:3e:8b:50:e0:1b:05:27:
5f:71:0c:fb:51:2b:1f:0a:f0:7f:13:b6:52:07:46:a5:4a:b7:
ba:e8:50:1c:08:e5:14:44:a7:6e:ad:59:c5:de:b9:52:a6:05:
57:47:92:78:e3:f6:1b:73:38:4d:34:7c:a3:56:21:35:97:55:
9d:5a:a7:24:fe:59:94:80:64:5f:c4:42:60:b4:31:74:72:fe:
fc:d5:b2:f5:10:5f:b8:8d:3a:d1:53:e3:57:2d:15:03:dc:34:
04:d4:9e:0d:c7:20:31:0c:da:d1:a9:b7:6d:a7:6d:47:60:6f:
85:74:6d:64:48:20:70:cc:46:99:94:54:c5:82:12:1b:d3:17:
05:4a:2b:43:89:b3:ea:20:c4:7c:a1:09:c8:8c:ed:8c:47:e4:
98:b1:93:c2:b4:1a:a0:bd:36:e9:25:c6:30:e7:10:b9:2d:76:
71:08:9b:61:28:ec:d7:53:d3:65:e9:58:d3:d9:92:f9:0e:94:
27:ba:e4:0d:93:12:4c:e9:ea:4f:26:14:01:89:32:d5:12:23:
0e:92:9f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:48:07 2026 by rpki-client