Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/VYc5y_OwZ_GuHx-HSiU85lw6URU.roa
File: VYc5y_OwZ_GuHx-HSiU85lw6URU.roa (raw, json)
Hash identifier: mS4dp1fKC/biGxRNQjKiggkgxajnT+mfaVZxHUrvezc=
Subject key identifier: 55:87:39:CB:F3:B0:67:F1:AE:1F:1F:87:4A:25:3C:E6:5C:3A:51:15
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019EECA6CC923DC15403A241454DCD178D87
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/VYc5y_OwZ_GuHx-HSiU85lw6URU.roa
Signing time: Mon 22 Jun 2026 00:06:54 +0000
ROA not before: Mon 22 Jun 2026 00:06:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199524
IP address blocks: 82.109.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ec:a6:cc:92:3d:c1:54:03:a2:41:45:4d:cd:17:8d:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 22 00:06:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=558739cbf3b067f1ae1f1f874a253ce65c3a5115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3a:2e:e0:ba:eb:84:c7:c1:a4:7a:9c:94:53:
47:07:09:c0:cf:1e:fe:ef:d4:02:dd:f3:c7:77:23:
4a:af:fc:76:d2:d5:25:8f:fa:aa:b1:b0:52:92:2e:
70:9c:3d:3a:2e:1d:c0:da:3c:22:e4:3c:21:73:f6:
d9:f4:9d:18:31:06:37:33:d6:75:f4:35:f5:14:af:
83:e9:48:a1:c7:50:b7:da:15:08:36:17:49:72:16:
02:49:19:74:e3:f9:fb:92:af:f3:44:0e:65:02:21:
ec:36:b4:c5:f5:6b:c6:a3:38:89:27:97:59:da:78:
ac:41:8b:7d:a3:98:83:15:b5:fa:22:fb:73:92:94:
21:55:06:b8:7c:a8:12:81:b7:1a:0a:5e:0e:11:9c:
4d:b6:f0:8c:12:a4:26:3c:10:53:60:60:e3:a6:6d:
fa:34:62:04:e4:a6:1e:57:74:b3:a2:b3:f1:3b:dc:
11:a6:0a:d2:47:7a:98:e1:12:e9:f5:11:30:7b:1e:
69:59:28:7c:f0:98:5f:b6:b7:aa:d9:e4:b4:99:9d:
5c:d7:8d:24:42:e5:1c:40:4b:d1:7f:41:34:9a:d7:
4d:3b:4e:12:f8:b1:36:b0:bd:7d:f3:c6:0d:67:d7:
99:5c:57:e4:94:39:44:69:4a:e0:1e:8e:a9:ae:27:
1d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:87:39:CB:F3:B0:67:F1:AE:1F:1F:87:4A:25:3C:E6:5C:3A:51:15
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/VYc5y_OwZ_GuHx-HSiU85lw6URU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.185.0/24
Signature Algorithm: sha256WithRSAEncryption
44:5c:9b:b5:48:5f:27:75:18:8f:a6:75:5e:53:e6:2c:96:f4:
9e:bd:59:e2:40:3c:29:61:5f:d3:f2:24:98:78:24:81:96:9a:
42:2f:d5:95:7c:32:a0:a1:d4:85:18:5e:8a:8d:dc:27:c1:14:
09:f1:5d:7f:ef:d1:b6:7d:b5:09:88:35:fe:30:aa:80:68:e7:
76:d4:ab:77:b8:af:19:dc:27:e1:fb:31:aa:e4:dd:15:0d:f0:
90:c7:d5:8c:2d:9f:a3:5e:f9:d6:c9:f8:73:eb:93:63:31:d4:
8a:da:87:41:5b:4a:b0:d2:a1:84:38:07:c5:95:08:f1:0e:71:
31:b2:5b:46:61:9d:38:0e:58:3e:61:66:8a:bf:bf:e1:14:19:
5e:2d:8a:35:83:e1:35:7d:79:92:21:fc:bf:3c:ad:97:6d:c5:
74:90:1b:c1:14:00:cd:da:b8:11:95:a9:04:96:8e:ae:cc:2d:
c9:48:38:1f:77:15:bc:a3:83:04:30:80:eb:07:f6:a4:71:a0:
fa:c4:b6:e4:6d:45:41:35:f4:aa:e8:c9:58:03:30:59:3e:b1:
22:fa:a3:ac:d0:c5:24:55:93:82:c1:bd:f0:11:d2:87:4f:c8:
13:97:ec:34:64:bb:0a:c2:cd:58:50:6d:6d:ed:bc:a8:9e:a2:
08:b9:78:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:59:00 2026 by rpki-client