Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/vbAc76u5uqctba8TwCljEK_6j1U.roa
File: vbAc76u5uqctba8TwCljEK_6j1U.roa (raw, json)
Hash identifier: 9cSq64sq8CZLRt/PLe4aL2t6hLQNCyt8+Dgqc6ngxOk=
Subject key identifier: BD:B0:1C:EF:AB:B9:BA:A7:2D:6D:AF:13:C0:29:63:10:AF:FA:8F:55
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F5EA9A5B7334418328660A95EA4E22BE2
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/vbAc76u5uqctba8TwCljEK_6j1U.roa
Signing time: Tue 14 Jul 2026 03:26:44 +0000
ROA not before: Tue 14 Jul 2026 03:26:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 80.68.209.0/24 maxlen: 24
195.72.172.0/24 maxlen: 24
212.134.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 16:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5e:a9:a5:b7:33:44:18:32:86:60:a9:5e:a4:e2:2b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 14 03:26:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bdb01cefabb9baa72d6daf13c0296310affa8f55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fe:56:41:4f:f9:ac:35:60:97:29:01:a9:9f:
52:e4:45:77:13:27:d9:3e:27:a5:e5:3d:b8:42:72:
1f:3f:ba:63:bb:73:d9:b1:a3:fe:2e:11:eb:68:f9:
46:d3:54:93:19:ab:26:bf:7c:75:06:93:a1:93:95:
d5:4d:48:77:bb:de:f3:c1:74:9d:02:e4:a7:7d:26:
05:ee:b5:18:b4:e1:61:ba:3d:b9:3c:16:47:0d:db:
16:2c:0b:19:a1:ed:4c:fb:c1:68:3b:61:f4:b8:7f:
87:86:2c:3a:e3:97:f2:d3:f3:c3:b4:23:77:11:d9:
1c:3f:25:ed:49:4e:a9:5d:f7:e1:ee:c8:84:67:6a:
aa:03:4b:9a:53:bd:4c:f9:63:f0:93:06:25:f8:37:
de:de:4d:85:cb:a3:02:80:67:87:2e:d6:91:a0:91:
ac:03:c4:1c:b6:66:27:27:10:3d:d8:d9:4d:96:38:
81:c6:48:90:a0:05:95:fe:1e:79:22:92:f8:85:10:
ff:3d:01:c7:de:21:8e:1d:76:87:f8:f1:2c:4a:16:
65:de:9a:5f:e9:bd:14:6c:40:aa:7b:24:47:4a:90:
45:3f:35:9b:eb:1f:1f:cc:99:62:bb:5e:6d:22:7a:
a5:40:15:61:15:62:ad:52:8e:ca:ef:6a:91:67:9a:
db:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B0:1C:EF:AB:B9:BA:A7:2D:6D:AF:13:C0:29:63:10:AF:FA:8F:55
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/vbAc76u5uqctba8TwCljEK_6j1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.68.209.0/24
195.72.172.0/24
212.134.148.0/22
Signature Algorithm: sha256WithRSAEncryption
d7:1d:c7:38:c3:77:21:d9:6c:fa:6c:07:7d:df:19:93:cc:f3:
fe:22:39:8e:80:18:22:37:7e:63:fd:09:5f:6a:3c:39:e1:68:
7f:d0:72:88:93:cc:0b:b5:b4:9a:1a:b4:0b:d7:50:85:c3:51:
7d:d9:de:da:d6:73:b1:43:96:b6:02:f6:72:ac:f4:a4:ff:3c:
56:11:62:a4:25:eb:47:2d:7c:cc:4e:03:ec:5e:bb:35:4d:16:
d6:f9:b0:2d:69:8b:d4:cf:09:5d:89:8d:28:01:06:0e:ca:63:
07:93:79:26:51:85:91:0e:06:48:41:2a:12:eb:cb:c5:92:6e:
33:10:7b:d3:df:bf:3c:9f:16:36:1a:06:58:bf:b7:5d:47:26:
58:08:8d:da:29:30:f6:d6:cc:18:fd:7f:8b:c0:4e:ea:98:c6:
82:5b:8e:d2:33:66:f6:12:b8:04:dd:4b:65:3b:7e:18:cd:8b:
36:d6:4c:ff:1b:c4:83:28:2b:86:04:bf:9c:d4:3b:e5:32:43:
be:2d:d0:b8:18:bb:1f:0e:91:3a:07:95:a0:49:e8:9e:89:d1:
ad:31:5e:a3:b0:65:62:fa:ad:4a:d9:23:c0:26:dd:7a:31:eb:
43:53:fb:8c:c5:f9:a9:8c:2b:96:7c:ea:89:33:08:4a:89:8a:
a6:66:b5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:11 2026 by rpki-client