Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/VXztzk4Ee02YToFvK1hXq4z0ngg.roa
File: VXztzk4Ee02YToFvK1hXq4z0ngg.roa (raw, json)
Hash identifier: TG73c3Jp5R3Lk7QQ+JsM9RhJbp3eNPxZOiVn6niYjI4=
Subject key identifier: 55:7C:ED:CE:4E:04:7B:4D:98:4E:81:6F:2B:58:57:AB:8C:F4:9E:08
Certificate issuer: /CN=77c80054e1330ca71b4900d615c2cf2c3ce6cf04
Certificate serial: 019F23690C65BC0B6BF06C560124AB3C1B03
Authority key identifier: 77:C8:00:54:E1:33:0C:A7:1B:49:00:D6:15:C2:CF:2C:3C:E6:CF:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/VXztzk4Ee02YToFvK1hXq4z0ngg.roa
Signing time: Thu 02 Jul 2026 15:18:34 +0000
ROA not before: Thu 02 Jul 2026 15:18:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207567
IP address blocks: 194.238.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0c:65:bc:0b:6b:f0:6c:56:01:24:ab:3c:1b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c80054e1330ca71b4900d615c2cf2c3ce6cf04
Validity
Not Before: Jul 2 15:18:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=557cedce4e047b4d984e816f2b5857ab8cf49e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e4:05:5d:75:8c:ab:4c:c1:7b:54:a8:32:e8:
12:4a:8d:c4:29:37:d1:34:b8:78:28:3c:1c:49:43:
0d:5b:2a:36:e5:e3:6b:98:89:8e:24:7a:07:d6:27:
81:ba:12:bd:62:f6:75:88:39:a7:01:c8:cc:21:ab:
64:2d:e7:47:44:19:f6:aa:47:2b:fa:0c:5d:77:0e:
3e:11:5d:7d:5c:7e:82:cb:aa:07:fd:7b:44:c1:29:
87:a5:79:45:6f:b6:4c:31:84:80:80:80:0c:b6:81:
f2:78:c1:db:01:65:07:30:f0:e6:35:b2:cb:7d:fe:
b1:14:46:69:9b:60:21:6d:5a:b8:f6:fc:de:57:ae:
37:52:69:9b:03:2a:2c:93:3a:1d:80:d9:bd:9a:6f:
c2:9d:8f:3f:3c:61:cf:7f:07:b6:0d:48:8a:36:db:
81:f9:a7:bd:df:f7:42:b0:c8:3c:ff:ef:78:ff:84:
25:42:27:69:36:0c:89:8a:2d:22:aa:a4:dd:50:c6:
15:4f:19:0c:a4:3c:4c:ba:45:36:b7:ea:fc:54:dd:
53:09:f9:48:f9:70:d4:a4:ec:c4:d1:5b:a4:17:cb:
9f:17:88:22:e1:77:da:9a:8b:6a:8e:45:86:50:f6:
ec:53:85:ac:8d:be:0c:71:60:13:57:62:ac:db:8e:
cd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7C:ED:CE:4E:04:7B:4D:98:4E:81:6F:2B:58:57:AB:8C:F4:9E:08
X509v3 Authority Key Identifier:
keyid:77:C8:00:54:E1:33:0C:A7:1B:49:00:D6:15:C2:CF:2C:3C:E6:CF:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/VXztzk4Ee02YToFvK1hXq4z0ngg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c4d05f-10d5-4f8f-9a37-e5229ad5214e/1/d8gAVOEzDKcbSQDWFcLPLDzmzwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.238.57.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:bf:11:0e:70:35:26:df:98:68:a5:72:d2:51:c7:3f:6a:68:
96:5e:b4:25:9a:e4:13:17:3b:5a:ea:35:a0:4a:f8:66:f8:25:
58:1c:68:02:5b:83:f2:1a:48:f8:66:82:eb:e7:11:a0:55:e7:
38:f4:5b:75:fc:6c:5f:9c:a7:b8:e7:d9:ea:29:ed:e0:3e:7b:
48:dc:4c:c0:3f:92:cd:fc:2a:da:da:b9:9c:fc:58:b4:14:a4:
ca:b3:62:34:81:73:4a:ff:11:a7:2c:8b:c8:d8:38:5f:a1:0e:
b8:bb:a5:ad:0c:dd:89:6f:d7:46:7e:77:37:35:33:bb:55:84:
f4:27:45:ef:b6:74:59:59:c0:82:22:f6:20:2d:5e:70:ea:5e:
a7:09:dd:f9:1d:e2:f0:4f:ae:f1:23:29:0e:93:5f:97:b3:d5:
dc:78:97:2f:0c:cb:f9:2d:3b:b2:5d:53:85:ae:cb:55:25:4a:
03:7d:e1:e4:07:d9:0b:dc:0a:84:bc:91:f7:fe:7f:59:71:1b:
ec:a7:13:d3:77:29:3c:1b:3d:3d:4d:b6:08:18:6d:aa:1a:01:
ba:7f:c4:98:24:f2:c9:e7:e2:5d:81:2d:22:d4:67:24:79:5e:
bd:a7:e9:f2:b2:b2:d9:bd:84:3e:e3:29:ee:18:51:f5:4f:bc:
ea:17:de:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:55:32 2026 by rpki-client