Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/vh-sTil1xaOaliwE4PVGfJ-p9DU.roa
File: vh-sTil1xaOaliwE4PVGfJ-p9DU.roa (raw, json)
Hash identifier: fT/LPqpHwbEbAAsK5OIjcG/RXtBR3+zXeWjXDH+N6Yg=
Subject key identifier: BE:1F:AC:4E:29:75:C5:A3:9A:96:2C:04:E0:F5:46:7C:9F:A9:F4:35
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FFA9EA7E573BFBBE13847E5A968193249
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/vh-sTil1xaOaliwE4PVGfJ-p9DU.roa
Signing time: Thu 13 Aug 2026 10:15:29 +0000
ROA not before: Thu 13 Aug 2026 10:15:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395886
IP address blocks: 195.72.184.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:9e:a7:e5:73:bf:bb:e1:38:47:e5:a9:68:19:32:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 13 10:15:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be1fac4e2975c5a39a962c04e0f5467c9fa9f435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:31:8f:05:66:96:ec:bb:16:8e:b2:40:14:7d:
b8:6f:f3:a6:38:f2:5f:fd:a3:7c:80:d6:cc:95:25:
dc:df:ad:33:5c:b5:7b:ba:9f:48:70:00:19:39:50:
13:ee:6a:69:b5:88:16:94:37:1f:13:5c:48:31:ee:
5a:0d:f5:c1:7c:3b:c0:8d:e7:06:59:84:27:11:16:
2f:96:b1:d4:2a:30:9c:62:41:3f:3f:18:c2:ff:70:
9a:67:f0:a1:12:bd:10:a3:74:f5:96:a9:3a:f8:d5:
ac:01:13:84:f0:2c:23:23:37:f3:b8:d8:f5:33:ad:
ea:cd:93:a5:cc:8e:35:9e:18:03:b1:b0:83:4a:72:
78:6b:de:a4:48:40:41:d0:10:08:6a:22:42:d4:be:
4d:ea:4f:5a:c2:b9:2c:3a:e8:b1:37:25:1c:f7:eb:
04:d6:b6:3e:c4:57:9d:c1:98:eb:05:74:9c:22:64:
8b:30:f1:e9:3a:e0:fc:2d:71:6b:c5:08:06:bf:7c:
79:65:b1:24:5d:b6:30:25:7c:84:35:1f:c6:09:c0:
51:9a:3d:43:3a:72:3a:32:c7:20:88:6f:28:30:9a:
ea:21:b2:8d:0b:51:9d:69:76:6a:bb:03:a2:cc:f4:
a5:0a:74:76:fc:c1:ef:43:9e:0d:e0:1a:63:3d:da:
3d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:1F:AC:4E:29:75:C5:A3:9A:96:2C:04:E0:F5:46:7C:9F:A9:F4:35
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/vh-sTil1xaOaliwE4PVGfJ-p9DU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.72.184.0/21
Signature Algorithm: sha256WithRSAEncryption
0c:25:15:51:80:51:9c:4c:d7:8b:f4:95:08:f0:eb:bd:5b:41:
56:9b:c2:a5:2b:45:be:53:b5:e3:e6:71:59:31:13:88:75:d2:
d8:ee:d2:26:c5:ba:82:bc:76:f8:17:18:db:ef:d1:aa:9a:af:
dd:80:10:fc:f8:e2:89:c4:de:f9:2e:cc:8e:02:a2:3d:f2:a7:
52:b9:c4:38:28:19:48:ea:d1:05:2f:a6:d3:4b:f2:df:f8:2e:
db:74:ce:b8:f5:c1:f3:1e:d2:69:4c:04:2c:2e:80:5b:a5:16:
6a:49:c3:dc:64:82:89:cd:5c:2e:98:a5:01:68:06:c4:30:1d:
b5:c3:87:80:05:33:e5:e5:06:82:65:0a:66:ca:17:ff:2f:78:
ff:ad:bc:54:71:ad:38:f8:36:f2:7c:68:d4:ed:67:f2:3f:62:
4c:8b:87:1a:22:62:22:0a:3c:99:11:d5:72:ef:52:99:c7:63:
6b:9e:70:c7:9d:2c:18:4b:1c:53:96:e7:19:ce:02:b1:22:2d:
ab:04:75:65:49:38:0a:52:35:84:ad:13:de:3f:98:f7:49:ab:
6c:be:50:1e:8b:6d:62:10:59:be:f0:b7:27:ba:55:b8:48:fd:
e9:ee:61:2f:c7:a5:dc:5a:43:6b:4d:da:24:ac:38:40:04:88:
a8:19:3f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:27:54 2026 by rpki-client