Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/VDFXt-dXviihS84RgwHcRcxaVZM.roa
File: VDFXt-dXviihS84RgwHcRcxaVZM.roa (raw, json)
Hash identifier: tbMXrVysPbiN87go1BkqgUUoSDVWVfDWBolacXRuiRQ=
Subject key identifier: 54:31:57:B7:E7:57:BE:28:A1:4B:CE:11:83:01:DC:45:CC:5A:55:93
Certificate issuer: /CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Certificate serial: 019F2368EB85692F99559CCFFE6D75209BC5
Authority key identifier: F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/VDFXt-dXviihS84RgwHcRcxaVZM.roa
Signing time: Thu 02 Jul 2026 15:18:26 +0000
ROA not before: Thu 02 Jul 2026 15:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41272
IP address blocks: 46.165.64.0/18 maxlen: 18
80.185.0.0/16 maxlen: 16
188.7.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:eb:85:69:2f:99:55:9c:cf:fe:6d:75:20:9b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19d396e5ad5b728ce96cfbcef75f58f50e61007
Validity
Not Before: Jul 2 15:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=543157b7e757be28a14bce118301dc45cc5a5593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:24:80:b5:64:60:2a:5a:3a:e7:b6:87:9b:22:
25:8e:61:4d:47:27:25:cb:fa:8f:45:76:0b:2b:8b:
e9:66:0d:b4:05:17:24:94:cf:e9:24:3b:63:a1:3f:
5b:bf:cb:32:80:64:8f:39:b6:6f:7b:dd:f9:b0:40:
dc:cf:d3:9d:67:82:f7:e5:b6:09:8c:9b:ce:d2:05:
19:ef:b0:7f:37:37:b4:96:83:7d:29:28:03:40:ab:
21:0f:44:87:f8:7c:eb:f0:d7:b5:e3:cf:0a:d4:5f:
9d:05:5a:88:e9:57:03:23:1a:e8:f3:1a:7b:9f:68:
13:64:63:52:bf:0d:01:e7:b4:5e:f8:3a:46:92:56:
f9:0e:28:16:0f:45:d2:4e:88:5e:f6:da:9f:f2:cb:
f0:fb:2c:b6:77:64:5a:bb:20:98:92:e7:d6:79:02:
e7:3d:9a:10:ff:00:e6:e0:4e:ce:96:8a:dc:92:b6:
dd:24:e5:d0:f2:7f:d4:c4:f0:c3:a0:79:5b:d6:30:
5a:88:48:bf:1c:98:4b:4c:f2:57:90:81:7b:5e:f4:
4a:48:df:70:f6:e1:4d:a2:98:90:90:b4:f1:e7:49:
ca:19:e6:f6:be:2e:9b:d2:ec:ff:68:df:c6:99:7d:
67:29:f7:5b:1b:cf:a5:e5:71:a5:9e:f5:26:da:6e:
da:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:31:57:B7:E7:57:BE:28:A1:4B:CE:11:83:01:DC:45:CC:5A:55:93
X509v3 Authority Key Identifier:
keyid:F1:9D:39:6E:5A:D5:B7:28:CE:96:CF:BC:EF:75:F5:8F:50:E6:10:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Z05blrVtyjOls-873X1j1DmEAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/VDFXt-dXviihS84RgwHcRcxaVZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/8Z05blrVtyjOls-873X1j1DmEAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.165.64.0/18
80.185.0.0/16
188.7.0.0/16
Signature Algorithm: sha256WithRSAEncryption
57:79:fe:ef:9f:3e:60:5c:f2:2d:18:e1:1e:59:1f:a5:da:53:
90:ca:f9:7e:5f:22:9c:06:d1:f6:2f:4c:8e:d5:6f:e5:e9:1e:
8c:10:b1:0b:e4:c4:88:ed:ca:24:49:39:43:e8:73:f6:f4:cf:
ae:e3:ba:89:6b:3f:82:41:6a:9a:7a:5e:15:81:28:9d:f3:e8:
2e:0c:5b:c9:a2:66:9c:02:ba:ab:b6:0d:2f:77:b2:e8:8a:1d:
dd:f9:85:18:58:60:e3:e2:54:25:99:36:61:b8:d0:0f:42:dc:
7d:52:39:cc:b5:fc:96:fd:08:60:8d:a5:c5:b1:8e:28:31:bd:
dd:85:dd:d3:b1:e5:80:da:d8:be:e4:75:5c:a2:b9:75:4a:50:
42:97:f8:a3:7c:3e:84:c3:16:e7:42:7e:98:7d:24:0b:71:2c:
5a:17:2c:68:e8:9c:37:b7:fc:55:1a:60:9f:60:2d:38:f1:83:
6e:fb:2b:ed:e4:0d:ce:08:19:b9:26:92:c3:d1:a1:39:75:9c:
53:48:bc:33:90:9c:91:e1:61:95:fc:7e:b8:c8:a0:86:d1:7b:
0d:ae:ba:59:b7:18:99:7a:6e:c3:c5:75:84:d6:e4:a3:77:b9:
f1:dd:87:9d:e7:c0:31:71:54:e2:16:0d:39:7b:23:f6:80:b2:
14:06:a1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:56:58 2026 by rpki-client