Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/vAYR0OQjAPPy6YFOuaz1GQmuBsU.roa
File: vAYR0OQjAPPy6YFOuaz1GQmuBsU.roa (raw, json)
Hash identifier: tnumOzXrTWIqXHJS3YJvkr+j0B4NlBxT9slIt334RzM=
Subject key identifier: BC:06:11:D0:E4:23:00:F3:F2:E9:81:4E:B9:AC:F5:19:09:AE:06:C5
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F5A94208C5E4BAA4EE9069EC81CC5A843
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/vAYR0OQjAPPy6YFOuaz1GQmuBsU.roa
Signing time: Mon 13 Jul 2026 08:24:44 +0000
ROA not before: Mon 13 Jul 2026 08:24:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 46.34.0.0/24 maxlen: 24
82.110.124.0/22 maxlen: 22
87.82.217.0/24 maxlen: 24
212.134.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5a:94:20:8c:5e:4b:aa:4e:e9:06:9e:c8:1c:c5:a8:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 13 08:24:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc0611d0e42300f3f2e9814eb9acf51909ae06c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6c:11:58:99:bb:cb:d9:78:be:83:9c:9f:55:
1e:13:62:8b:34:55:7c:93:03:ab:84:5f:2f:dd:6f:
4e:3f:fb:bf:c9:c7:e5:61:5a:6f:78:c1:ba:46:2a:
fd:85:fe:3c:49:3d:24:c7:4a:c3:10:3c:6a:e0:fd:
22:fd:0e:ee:48:2d:42:00:f7:0b:00:70:99:f5:3a:
d8:98:50:30:28:bb:d7:71:7e:1c:8e:70:44:a3:a8:
58:59:25:7f:aa:fa:6e:5e:6a:1e:12:52:8c:29:a2:
e2:ee:fb:3e:c2:5a:39:63:e8:b7:bc:e1:83:55:6a:
f1:d6:c6:2c:c6:59:1e:a1:48:58:fd:6f:bc:0d:5b:
8c:40:67:66:d9:a0:35:86:db:a8:7e:84:5c:d7:51:
2f:7f:1c:66:98:a0:37:67:27:ef:23:3b:56:f2:16:
19:4b:f4:cd:57:5b:2f:b4:b6:14:66:3a:94:b0:ce:
38:d4:ba:f3:08:a1:c3:30:0d:29:45:50:1d:c9:57:
f2:db:f1:d4:e6:cf:1c:43:ae:10:bf:1a:fa:2e:a9:
eb:d5:c2:a7:ba:7c:26:69:cd:a8:55:62:82:23:6c:
46:cb:10:e8:e0:25:e0:c3:fc:63:d6:55:97:93:03:
4b:d1:98:49:41:42:62:2d:cf:74:13:7d:20:7e:5f:
fd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:06:11:D0:E4:23:00:F3:F2:E9:81:4E:B9:AC:F5:19:09:AE:06:C5
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/vAYR0OQjAPPy6YFOuaz1GQmuBsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.0.0/24
82.110.124.0/22
87.82.217.0/24
212.134.144.0/22
Signature Algorithm: sha256WithRSAEncryption
97:e9:24:3a:fd:13:7c:c6:92:10:10:0c:ed:ae:88:4c:f8:cc:
f4:bb:0b:87:56:b4:6a:ab:fc:00:c3:bf:8e:c4:ce:b5:be:fd:
25:71:9b:7a:e8:dd:3f:b6:e9:c5:f9:4d:f7:c2:35:49:22:b4:
c2:79:c4:26:d6:5d:04:c8:0a:6b:ca:94:14:4f:a6:19:87:58:
38:80:28:32:0d:f2:75:7d:f3:86:18:e4:e0:b9:72:35:f5:9e:
0f:e9:04:fc:3f:d3:b3:a0:2d:84:da:36:8b:04:3a:19:fc:c5:
b7:6a:9e:fb:90:c5:dd:8a:38:72:bb:e4:66:87:ec:40:cd:aa:
d2:9b:9b:d6:b3:25:d9:78:1d:16:91:f4:67:cc:7f:da:96:4b:
88:22:5e:97:71:be:e5:eb:3b:d5:e7:89:07:5b:9b:9d:cb:90:
33:67:97:06:12:b6:bc:5d:69:5d:a7:d1:57:47:de:fb:5e:70:
b2:3d:87:96:e1:16:4c:73:52:1e:06:21:50:ed:2a:53:f7:c6:
df:69:45:4c:97:0a:8b:0f:62:c5:7d:34:83:45:d7:9d:35:52:
9c:d2:b2:e9:ce:6a:a8:ba:f9:bf:a6:42:53:d9:24:45:0c:63:
fc:fd:ab:e9:c7:6b:9a:03:23:47:a7:ab:ad:72:6b:98:57:04:
bd:ba:b3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:00 2026 by rpki-client