Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/vPxdfCRr7Mec8_8j7TMsJJiAeMU.roa
File: vPxdfCRr7Mec8_8j7TMsJJiAeMU.roa (raw, json)
Hash identifier: plhGyyYWuXxFt5Kt0sAfESxedvatjKxLfotDc86oZ3k=
Subject key identifier: BC:FC:5D:7C:24:6B:EC:C7:9C:F3:FF:23:ED:33:2C:24:98:80:78:C5
Certificate issuer: /CN=0639c4846b88c2d70e31ce4c0fccb4cf4dea5436
Certificate serial: 019EB21814F8D2667EBF6A409FAAE0939B43
Authority key identifier: 06:39:C4:84:6B:88:C2:D7:0E:31:CE:4C:0F:CC:B4:CF:4D:EA:54:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjnEhGuIwtcOMc5MD8y0z03qVDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/vPxdfCRr7Mec8_8j7TMsJJiAeMU.roa
Signing time: Wed 10 Jun 2026 15:13:03 +0000
ROA not before: Wed 10 Jun 2026 15:13:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20988
IP address blocks: 185.154.100.0/22 maxlen: 22
185.154.100.0/24 maxlen: 24
185.154.101.0/24 maxlen: 24
217.148.0.0/20 maxlen: 20
217.148.0.0/23 maxlen: 23
217.148.0.0/24 maxlen: 24
217.148.1.0/24 maxlen: 24
217.148.2.0/24 maxlen: 24
217.148.3.0/24 maxlen: 24
217.148.4.0/24 maxlen: 24
217.148.5.0/24 maxlen: 24
217.148.6.0/24 maxlen: 24
217.148.7.0/24 maxlen: 24
217.148.8.0/24 maxlen: 24
217.148.9.0/24 maxlen: 24
217.148.10.0/24 maxlen: 24
217.148.11.0/24 maxlen: 24
217.148.12.0/24 maxlen: 24
217.148.13.0/24 maxlen: 24
217.148.14.0/24 maxlen: 24
217.148.15.0/24 maxlen: 24
2a06:1a40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjnEhGuIwtcOMc5MD8y0z03qVDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b2:18:14:f8:d2:66:7e:bf:6a:40:9f:aa:e0:93:9b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0639c4846b88c2d70e31ce4c0fccb4cf4dea5436
Validity
Not Before: Jun 10 15:13:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bcfc5d7c246becc79cf3ff23ed332c24988078c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e6:31:1e:5a:62:16:33:23:e9:75:ab:1f:ba:
c7:a2:2c:14:1f:2c:e8:3c:70:00:6f:08:27:d8:d3:
d4:57:fb:bf:3c:b9:6a:e2:f3:d7:f6:c4:d8:cf:a0:
48:fc:70:74:57:6c:ac:7b:8c:67:ea:5a:49:23:ff:
fb:c0:e8:2c:8b:18:b3:d0:d9:6d:9d:43:8d:77:17:
68:20:86:44:f0:21:54:9b:12:a2:97:b6:5a:53:a3:
2b:73:26:13:e9:b2:4d:7c:2a:4b:d3:1a:51:6f:28:
d2:9e:c0:72:b7:6a:a5:92:a5:e1:3b:fc:d2:7a:7c:
97:b0:98:57:6c:18:04:c8:36:3c:8a:0b:66:64:70:
69:ab:c7:40:8f:d8:0d:77:43:07:09:45:4f:31:66:
c9:6d:dd:1c:6a:4b:5e:91:4b:6d:f4:c3:5d:4e:96:
ed:07:7b:ef:f1:07:88:ed:88:93:65:79:e2:58:06:
74:40:5d:a7:ed:1b:8a:84:18:3d:65:b9:0f:be:56:
08:93:26:76:ba:9b:b9:b0:a2:e0:3d:25:27:b6:3e:
3e:64:9b:bb:c0:05:fc:33:dd:a2:b4:be:cd:ac:fd:
99:1c:b8:01:b2:1c:2b:72:1a:1f:c6:0c:c9:5d:43:
c7:8e:ba:2e:29:f6:9e:11:88:e9:f7:39:61:c7:5b:
8a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FC:5D:7C:24:6B:EC:C7:9C:F3:FF:23:ED:33:2C:24:98:80:78:C5
X509v3 Authority Key Identifier:
keyid:06:39:C4:84:6B:88:C2:D7:0E:31:CE:4C:0F:CC:B4:CF:4D:EA:54:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjnEhGuIwtcOMc5MD8y0z03qVDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/vPxdfCRr7Mec8_8j7TMsJJiAeMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/cf0254-2b88-4b3f-8d30-1949d6b80491/1/BjnEhGuIwtcOMc5MD8y0z03qVDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.100.0/22
217.148.0.0/20
IPv6:
2a06:1a40::/29
Signature Algorithm: sha256WithRSAEncryption
96:64:be:de:07:70:29:f5:13:82:c4:19:f0:15:de:4b:1b:b3:
3a:a9:2f:45:2f:38:35:97:57:ad:a2:b4:9e:0f:1b:12:ac:4f:
ac:2d:da:cc:49:55:98:6f:57:e3:92:29:c8:f4:b3:06:55:71:
d2:43:d7:8b:26:3c:e9:94:02:e5:d4:71:cf:4e:64:92:6b:ac:
12:cc:86:41:4f:98:f0:b6:d9:2e:d8:8b:cc:56:fe:d8:cd:fc:
8b:5a:5b:95:25:a2:1c:1f:14:e0:ed:01:51:42:94:46:bb:5b:
83:f0:0b:e3:b7:f7:1a:68:52:dd:4e:31:44:ca:ec:10:cc:ad:
68:a5:aa:9f:41:bc:69:e6:f7:b2:77:e2:de:b5:e1:d4:12:b5:
e4:9a:28:0b:ba:c0:ba:4c:da:4b:c2:81:47:c3:33:79:4a:ee:
18:34:15:b4:81:b0:6a:7e:e0:a9:9a:e2:2e:52:d5:a9:92:11:
29:d2:ee:f8:4f:e3:b6:35:97:f5:73:fa:9a:d3:41:19:2d:aa:
e4:67:fa:9d:11:75:ae:c4:dc:50:35:8e:53:2c:79:82:55:12:
1f:be:e4:6a:a3:44:1d:29:e1:76:35:b4:86:6b:dc:cd:31:3c:
22:70:65:91:12:81:08:5f:7b:2b:e4:ca:c1:36:bf:ab:0a:9b:
28:96:24:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:32:55 2026 by rpki-client