Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/c95266-25ca-454c-ac24-4f781c8aef0f/1/vEwUaSXxvIfvctSXePlCZEZBjzw.roa
File: vEwUaSXxvIfvctSXePlCZEZBjzw.roa (raw, json)
Hash identifier: FjmDJ8E5du/TUIxjeS0OagTODZh1JzeQiPqiUgEg6KU=
Subject key identifier: BC:4C:14:69:25:F1:BC:87:EF:72:D4:97:78:F9:42:64:46:41:8F:3C
Certificate issuer: /CN=4ba1b3e9db4ee5263d0ab1ba7aeffe7c5f5d6aec
Certificate serial: 01A1101444043F12E77B4B3544DA30941810
Authority key identifier: 4B:A1:B3:E9:DB:4E:E5:26:3D:0A:B1:BA:7A:EF:FE:7C:5F:5D:6A:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6Gz6dtO5SY9CrG6eu_-fF9dauw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c95266-25ca-454c-ac24-4f781c8aef0f/1/vEwUaSXxvIfvctSXePlCZEZBjzw.roa
Signing time: Tue 06 Oct 2026 07:18:45 +0000
ROA not before: Tue 06 Oct 2026 07:18:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35258
IP address blocks: 136.176.194.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/c95266-25ca-454c-ac24-4f781c8aef0f/1/S6Gz6dtO5SY9CrG6eu_-fF9dauw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/c95266-25ca-454c-ac24-4f781c8aef0f/1/S6Gz6dtO5SY9CrG6eu_-fF9dauw.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6Gz6dtO5SY9CrG6eu_-fF9dauw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:14:44:04:3f:12:e7:7b:4b:35:44:da:30:94:18:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ba1b3e9db4ee5263d0ab1ba7aeffe7c5f5d6aec
Validity
Not Before: Oct 6 07:18:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc4c146925f1bc87ef72d49778f9426446418f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0d:ab:27:57:49:e9:d8:85:5d:d6:e9:20:31:
91:f5:f6:67:c0:ae:9d:ef:53:78:48:07:3e:45:41:
3b:a9:b7:7b:ec:74:26:92:ca:2c:36:0a:1f:e0:86:
a0:0e:08:91:91:96:7a:40:3c:6e:7c:fe:7b:bf:3c:
58:72:ec:dc:e0:5f:c9:af:a3:27:e2:42:f6:26:80:
91:f4:c1:90:66:b5:47:d0:bc:0d:05:bd:1c:7b:0d:
3b:38:a1:c7:38:72:86:f6:1b:3d:66:6a:34:87:84:
05:2c:d4:56:4a:95:ee:1f:14:c9:51:18:7a:9d:ce:
53:66:e0:52:ae:6b:30:81:28:d0:6c:1d:f2:b6:52:
47:54:36:18:e2:be:bf:a9:d6:73:98:95:ce:a0:22:
ec:ff:13:de:a1:7c:b7:bb:78:bf:18:45:e9:64:11:
52:d4:2c:64:24:1d:1d:49:f0:e2:0d:4d:2b:39:1f:
78:04:6a:ec:8d:c9:d4:94:2b:99:b9:4c:44:de:ba:
a4:da:59:5e:c3:ae:b4:bf:08:7b:c6:2b:25:8d:0c:
90:86:a2:70:db:f0:b7:75:d6:27:c6:cf:05:6c:83:
53:01:4b:4b:d5:1b:2d:c9:dc:e8:8f:6d:53:9d:8d:
21:b9:49:e6:7d:b1:67:b6:dd:87:4c:41:09:48:b8:
9b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:4C:14:69:25:F1:BC:87:EF:72:D4:97:78:F9:42:64:46:41:8F:3C
X509v3 Authority Key Identifier:
keyid:4B:A1:B3:E9:DB:4E:E5:26:3D:0A:B1:BA:7A:EF:FE:7C:5F:5D:6A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6Gz6dtO5SY9CrG6eu_-fF9dauw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c95266-25ca-454c-ac24-4f781c8aef0f/1/vEwUaSXxvIfvctSXePlCZEZBjzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c95266-25ca-454c-ac24-4f781c8aef0f/1/S6Gz6dtO5SY9CrG6eu_-fF9dauw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.176.194.0/23
Signature Algorithm: sha256WithRSAEncryption
98:2c:4a:16:92:47:9d:23:02:f3:75:2d:ea:cd:3d:28:ab:18:
a1:34:c6:44:84:29:44:a1:59:d8:6a:6d:f9:92:7c:70:ea:88:
29:2a:87:f9:a8:57:2b:d6:1b:cf:3f:51:69:ae:a2:26:45:49:
a2:e1:b7:d8:e9:dc:92:c9:c3:e5:bc:1b:1c:9b:dc:f3:d4:27:
b8:4a:ee:47:81:e5:f7:ae:2b:2c:e6:57:4b:a7:6a:ae:6c:56:
b7:a9:df:59:29:0e:de:1d:9c:cc:e8:f9:ad:d1:c6:e0:60:00:
91:15:c2:c6:84:4a:e4:36:59:fd:8e:48:93:b3:34:ed:6b:55:
96:d5:7b:a5:2a:46:34:bf:8a:f3:0f:cc:87:48:4d:71:0f:2d:
b6:4f:2c:36:09:fb:85:fd:2f:cb:22:ab:40:c2:77:0c:c1:30:
0f:16:cb:54:30:fe:e8:9e:69:9e:77:07:53:f0:eb:cb:a4:e8:
a6:15:12:28:57:e8:5c:48:5d:ba:9e:01:51:c1:f0:82:94:cc:
56:de:ad:dd:2b:e4:79:cb:8b:a2:91:b1:e3:b5:12:27:c2:81:
1b:aa:30:3c:14:23:d8:72:fc:54:0e:f7:f2:04:ca:bf:78:e0:
41:26:f8:74:c6:b9:c9:8f:b5:e9:3c:e5:b8:45:db:83:54:54:
52:63:19:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:32:39 2026 by rpki-client