Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/VzuCMamxcLksT-c8ez03Zz3UtuU.roa
File: VzuCMamxcLksT-c8ez03Zz3UtuU.roa (raw, json)
Hash identifier: RfEdIxFmEpELeLDfYcseA+CWkgdvpHjnwGWtik3G0Bg=
Subject key identifier: 57:3B:82:31:A9:B1:70:B9:2C:4F:E7:3C:7B:3D:37:67:3D:D4:B6:E5
Certificate issuer: /CN=32bfb7d5e343dcce7306e2b25dd9b56fae3ebb74
Certificate serial: 019F236851301827900DE92D88177C13C39C
Authority key identifier: 32:BF:B7:D5:E3:43:DC:CE:73:06:E2:B2:5D:D9:B5:6F:AE:3E:BB:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mr-31eND3M5zBuKyXdm1b64-u3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/VzuCMamxcLksT-c8ez03Zz3UtuU.roa
Signing time: Thu 02 Jul 2026 15:17:46 +0000
ROA not before: Thu 02 Jul 2026 15:17:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50870
IP address blocks: 94.243.208.0/22 maxlen: 22
94.243.212.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mr-31eND3M5zBuKyXdm1b64-u3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:51:30:18:27:90:0d:e9:2d:88:17:7c:13:c3:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32bfb7d5e343dcce7306e2b25dd9b56fae3ebb74
Validity
Not Before: Jul 2 15:17:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=573b8231a9b170b92c4fe73c7b3d37673dd4b6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:51:e5:42:d2:1f:99:33:c1:ab:d1:5e:9e:62:
23:ac:a8:27:27:a2:fd:de:bc:11:2f:59:74:30:7c:
5a:72:a6:4f:92:cd:ab:ce:7b:b9:24:03:a0:4c:3c:
c4:60:a5:53:88:15:10:00:05:7e:63:b1:1d:7f:23:
79:34:d4:3e:f2:2c:b4:78:db:2d:63:04:06:a3:c7:
d7:be:7a:73:e4:8d:b6:87:41:e4:a2:42:2e:85:9d:
93:d1:81:37:be:3a:27:a0:2d:cd:b3:f1:b5:29:df:
5e:b1:d5:03:26:b6:bc:4e:bb:9c:f6:2a:e9:ce:b4:
d9:a7:5c:7d:9e:ce:bb:6f:70:9c:4f:a9:42:29:69:
ca:11:f7:85:e2:9d:79:0c:19:d8:b0:de:c7:91:41:
65:b8:a5:ef:a4:85:7e:3e:6c:db:4c:82:43:9e:6a:
16:04:d1:cf:e5:5a:99:73:db:94:2c:68:62:45:56:
7d:aa:b0:de:e9:69:b4:49:36:c2:93:d5:ea:44:bf:
cb:37:ce:29:de:47:fd:bb:6f:05:11:67:4d:32:cf:
ac:e0:d4:14:be:16:dc:15:f1:17:a0:e6:05:9f:e6:
40:aa:cb:92:05:e0:73:f5:7d:1a:66:ca:4d:e8:5a:
14:db:80:16:ef:15:1e:25:18:5a:d5:d4:93:53:5d:
c7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3B:82:31:A9:B1:70:B9:2C:4F:E7:3C:7B:3D:37:67:3D:D4:B6:E5
X509v3 Authority Key Identifier:
keyid:32:BF:B7:D5:E3:43:DC:CE:73:06:E2:B2:5D:D9:B5:6F:AE:3E:BB:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mr-31eND3M5zBuKyXdm1b64-u3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/VzuCMamxcLksT-c8ez03Zz3UtuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Mr-31eND3M5zBuKyXdm1b64-u3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.243.208.0/21
Signature Algorithm: sha256WithRSAEncryption
a3:ea:c1:ee:90:1b:28:d5:e9:8a:e0:e3:9b:ac:1c:89:39:5d:
c1:aa:30:3c:65:ff:62:b0:02:79:70:41:de:5b:9c:e8:d9:9e:
5d:7f:b2:98:fe:81:3d:93:ea:39:80:c8:d5:57:8f:0e:55:54:
03:8a:7d:7e:88:20:f9:5d:48:ae:5f:d7:20:86:fa:b7:56:a5:
b6:4e:cf:8c:ca:2b:4f:cf:52:d1:e6:f7:15:a7:30:c8:82:7d:
41:11:5f:f1:b6:e3:9f:89:16:0a:0e:81:96:66:bd:e2:4c:43:
da:b3:25:f1:e5:5c:6e:8d:1f:dc:b7:bc:60:47:ab:03:51:a7:
aa:de:6c:67:26:72:fa:9c:72:c2:d0:1d:f0:44:dd:16:06:9b:
0d:64:04:7c:5e:6d:7e:76:52:24:d8:98:bb:5c:ae:8e:77:82:
f0:68:a8:7f:00:2e:cc:00:f8:6f:5c:d6:76:3c:eb:7e:89:4e:
e4:0b:c1:37:d0:c7:0b:35:b9:47:d3:52:07:40:01:73:c9:2f:
27:08:60:4a:e4:0f:21:02:25:02:c7:3b:68:0a:9c:77:25:22:
9c:fa:e4:6d:04:60:14:06:68:16:a6:aa:71:02:33:09:90:c0:
64:7a:8a:fa:9e:6d:c9:4c:f0:28:1b:7d:a2:fa:57:ae:08:25:
d2:43:b7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:02:18 2026 by rpki-client