Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/vgqFGGcBxgdsggudoU6JF5otxMI.roa
File: vgqFGGcBxgdsggudoU6JF5otxMI.roa (raw, json)
Hash identifier: X+RPisqqAr1o4SZj1Dxi/0dmy7i8W/oAI8Edlk1mR6s=
Subject key identifier: BE:0A:85:18:67:01:C6:07:6C:82:0B:9D:A1:4E:89:17:9A:2D:C4:C2
Certificate issuer: /CN=18d801de9fe8a6680758817823ae36ba065c610d
Certificate serial: 01A0E994BE203AEF24B7967E738E32FD4CCF
Authority key identifier: 18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/vgqFGGcBxgdsggudoU6JF5otxMI.roa
Signing time: Mon 28 Sep 2026 19:53:54 +0000
ROA not before: Mon 28 Sep 2026 19:53:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21473
IP address blocks: 77.72.216.0/21 maxlen: 24
77.72.221.0/24 maxlen: 24
213.183.64.0/19 maxlen: 24
213.206.160.0/19 maxlen: 24
2a02:24d8::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:94:be:20:3a:ef:24:b7:96:7e:73:8e:32:fd:4c:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18d801de9fe8a6680758817823ae36ba065c610d
Validity
Not Before: Sep 28 19:53:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be0a85186701c6076c820b9da14e89179a2dc4c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:15:c9:d9:e5:09:a9:f5:ee:9b:58:19:6a:01:
19:34:7f:42:f2:c8:60:93:80:6b:67:7c:98:91:5e:
f1:f3:ab:7e:e3:78:80:b1:74:75:af:03:b7:90:1c:
ef:b4:34:52:3c:fb:c5:d2:52:5a:58:2f:03:6d:98:
28:e6:64:c1:c4:96:86:df:64:12:7d:f7:31:9a:26:
52:a8:24:39:ed:5f:fb:14:97:3f:63:f8:5a:f3:50:
f3:48:9c:04:8a:02:69:e5:15:86:79:a5:bc:18:b8:
46:eb:56:cd:3a:2f:a8:b8:69:78:7a:f7:d4:6d:76:
cc:2d:ac:5f:17:a8:0d:12:e3:d8:5d:8b:2b:ca:7d:
7e:e3:1d:ee:6d:16:41:a3:12:cc:11:3c:2c:16:b1:
40:9d:f7:ee:9a:0d:0c:8f:2e:d5:15:ae:ad:3f:c7:
f6:64:f8:56:9c:66:37:55:85:24:93:7d:a2:5a:a9:
af:98:8a:34:65:b0:94:4e:08:47:24:d6:4d:da:3c:
c9:a0:85:10:88:57:d7:0f:30:df:1b:f1:9d:e6:40:
ca:21:29:02:67:7b:48:14:d9:f0:c4:47:e6:ca:16:
e6:a5:64:c7:fe:30:e0:55:a9:94:e7:2e:40:a1:4a:
05:67:76:5b:16:19:b7:2f:92:df:a5:78:91:dd:c9:
c5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:0A:85:18:67:01:C6:07:6C:82:0B:9D:A1:4E:89:17:9A:2D:C4:C2
X509v3 Authority Key Identifier:
keyid:18:D8:01:DE:9F:E8:A6:68:07:58:81:78:23:AE:36:BA:06:5C:61:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GNgB3p_opmgHWIF4I642ugZcYQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/vgqFGGcBxgdsggudoU6JF5otxMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/95c3c8-6ab1-4951-8f59-65503a9306a0/1/GNgB3p_opmgHWIF4I642ugZcYQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.72.216.0/21
213.183.64.0/19
213.206.160.0/19
IPv6:
2a02:24d8::/32
Signature Algorithm: sha256WithRSAEncryption
0a:6e:f2:47:7f:19:e7:91:85:c4:e3:f2:95:b7:f8:75:43:52:
40:aa:a9:9f:f5:e3:ec:49:aa:87:c3:7e:0d:a1:db:3d:54:2c:
99:71:cd:01:06:c3:02:0b:19:53:8c:1c:a4:0f:9c:f9:81:1c:
92:8d:36:b9:e5:ac:d6:97:9e:c2:c5:c1:73:93:1d:2a:b0:e8:
57:85:15:6d:98:1b:3a:f7:e0:7c:17:31:ec:da:f9:ec:3a:0c:
f0:0d:a2:16:e2:67:ab:19:b3:3c:90:76:1c:16:aa:5f:25:ce:
f5:5c:dd:73:cc:02:62:cc:8d:66:fc:af:c6:67:f6:34:f8:6c:
4d:a9:8a:a8:9b:8a:69:af:e5:4a:e0:eb:8c:8e:35:f3:d8:4e:
90:a5:31:6f:a7:a0:66:15:83:a1:30:6d:04:77:79:f1:d3:8d:
1e:ad:92:9a:09:a7:93:97:62:6e:3d:64:2b:da:5e:76:d1:a4:
23:1a:4f:97:32:a0:a0:09:a2:3e:4c:49:13:ff:e7:ad:d7:67:
33:9d:cc:ae:44:cf:86:63:46:02:b5:d9:a4:e6:ad:89:0e:ad:
b3:86:8c:3e:d4:f8:b9:fd:93:30:8c:74:18:33:b3:41:3b:c0:
fb:18:b9:87:29:e6:ba:df:07:6d:a6:84:78:be:3c:d8:7a:29:
74:c7:b8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 20:25:16 2026 by rpki-client