Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/VNfg-QglXGIujd90KUvMXS6gBSY.roa
File: VNfg-QglXGIujd90KUvMXS6gBSY.roa (raw, json)
Hash identifier: i1z1xtfhhF9sKthwdcoGahPZ+gLqvmKabhZTgAjg+1Q=
Subject key identifier: 54:D7:E0:F9:08:25:5C:62:2E:8D:DF:74:29:4B:CC:5D:2E:A0:05:26
Certificate issuer: /CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Certificate serial: 019EDEFB8E0CB1701DCDCC84CB2EA2EDFEB0
Authority key identifier: 4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/VNfg-QglXGIujd90KUvMXS6gBSY.roa
Signing time: Fri 19 Jun 2026 08:24:48 +0000
ROA not before: Fri 19 Jun 2026 08:24:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219471
IP address blocks: 178.214.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 09:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:de:fb:8e:0c:b1:70:1d:cd:cc:84:cb:2e:a2:ed:fe:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb
Validity
Not Before: Jun 19 08:24:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54d7e0f908255c622e8ddf74294bcc5d2ea00526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ae:ec:3a:06:81:c6:17:32:1f:c4:73:b1:55:
ea:fc:c2:92:6c:df:d9:68:ac:cf:f9:be:27:f6:d2:
bf:18:05:47:e9:73:3f:5c:d9:1c:02:be:68:aa:dd:
13:91:0e:a0:9f:01:1b:a4:7d:d2:94:3c:f5:28:d6:
60:45:72:3d:af:86:fe:54:27:ee:9c:48:a2:71:82:
af:60:5f:42:b0:b3:7e:2b:0b:cb:21:7c:14:41:0e:
64:cf:7d:e6:4f:29:63:03:8a:d2:43:93:cc:4b:9b:
df:72:62:83:3e:71:82:2e:8b:18:49:c4:3d:78:8d:
46:46:f7:ac:74:d5:9b:8b:8c:bf:0e:15:cc:96:4d:
2b:6c:66:1c:63:f0:c5:5d:96:90:9b:d6:2f:22:4d:
5a:7c:a7:e8:5c:70:e2:2b:cb:bb:f5:d7:ac:09:6a:
c5:60:b8:67:20:4d:d2:56:51:a3:4b:f2:c8:15:4f:
99:88:be:78:a9:ab:5a:6b:3d:68:aa:54:53:39:b8:
f2:78:83:90:c2:7f:b2:a4:bb:d8:fe:4d:85:d0:18:
9a:3a:6b:e7:df:54:0a:a2:d1:bd:97:59:f6:45:c3:
29:69:5e:08:6d:36:dc:14:9b:b8:52:47:07:b9:23:
6f:49:54:69:46:9f:b7:9b:ea:7d:b7:48:1a:4d:2f:
ea:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D7:E0:F9:08:25:5C:62:2E:8D:DF:74:29:4B:CC:5D:2E:A0:05:26
X509v3 Authority Key Identifier:
keyid:4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/VNfg-QglXGIujd90KUvMXS6gBSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.98.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:3d:c8:be:ab:ea:8a:cd:bf:21:d3:15:d7:e9:de:6d:6c:2a:
e1:79:8c:16:22:f7:6b:05:7d:f1:15:7a:e8:b7:7c:c7:b2:4e:
63:0c:7c:4a:3d:0b:c6:6c:9b:09:f4:09:2e:cd:5f:d9:21:1a:
87:c9:37:5d:03:2e:56:cf:5e:fe:95:51:5f:2d:15:73:49:ee:
b1:90:f7:f9:c6:04:ef:db:66:8c:67:99:88:30:90:60:f7:55:
1a:1d:fb:e2:5a:d1:5c:be:f9:b2:2f:33:81:a0:72:8b:83:3d:
33:60:12:e8:16:bb:d8:e4:3f:06:82:61:0d:27:7a:0d:90:17:
02:fd:fd:c0:be:51:3b:18:1c:74:26:7e:af:ca:79:df:e4:9f:
27:97:fe:6a:d2:30:14:ad:f3:9a:1a:85:57:0c:05:7b:2b:fb:
76:9a:c6:f7:30:e6:eb:09:2d:8e:9a:fa:0b:c3:42:49:e8:d7:
38:20:09:e8:62:f5:79:2d:b2:7a:46:f2:0e:7e:73:9c:3b:de:
6e:e2:3d:1d:c7:82:53:c1:fc:d9:ca:87:8c:5e:b9:2a:35:44:
10:c3:bb:79:f1:63:dd:a4:b4:2a:2c:e2:7a:f0:07:4b:a6:0c:
57:0c:4f:7a:c8:ae:bd:eb:09:02:ad:ff:8e:98:02:04:3c:14:
74:70:ad:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:41:45 2026 by rpki-client