Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/_-Agp0zoKGX0odv7EJ_1uyWKfz8.roa
File: _-Agp0zoKGX0odv7EJ_1uyWKfz8.roa (raw, json)
Hash identifier: c+kAetyXWAzCjfb66HwtvbClEYFcaVKgAumXuchUfMI=
Subject key identifier: FF:E0:20:A7:4C:E8:28:65:F4:A1:DB:FB:10:9F:F5:BB:25:8A:7F:3F
Certificate issuer: /CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
Certificate serial: 01A1A63649DC926D9B004DF0269103C2722C
Authority key identifier: 54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/_-Agp0zoKGX0odv7EJ_1uyWKfz8.roa
Signing time: Wed 04 Nov 2026 10:58:58 +0000
ROA not before: Wed 04 Nov 2026 10:58:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218261
IP address blocks: 95.85.192.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:36:49:dc:92:6d:9b:00:4d:f0:26:91:03:c2:72:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
Validity
Not Before: Nov 4 10:58:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ffe020a74ce82865f4a1dbfb109ff5bb258a7f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:04:68:02:93:ae:f6:53:9e:98:67:8f:ad:26:
e7:10:58:91:c1:47:38:ea:4e:fa:42:a1:86:52:4b:
93:6a:8a:c9:27:60:77:8d:e6:a1:83:40:69:dc:93:
71:06:e1:b5:a1:ae:f1:57:34:c3:4f:cb:80:d3:5a:
72:6f:b3:46:e7:45:de:54:08:d7:84:ff:36:a6:7a:
bc:cd:a3:01:b3:00:e2:c9:cf:72:e2:2d:70:25:f8:
0a:9b:c6:22:ca:38:21:ab:dc:c5:f0:77:69:d8:b3:
1e:bf:f7:07:1f:cc:99:20:24:81:ad:7d:3e:cf:96:
e3:41:a7:ec:13:cf:4d:13:f5:9d:ed:5e:2f:c5:30:
ba:29:ed:9a:1e:21:fb:2f:5a:e8:7a:6b:a3:c2:05:
6a:c1:13:9a:7b:0e:94:a0:44:3e:7d:3b:cb:2e:a9:
3e:1e:05:09:76:15:e4:b9:f2:05:d8:29:c9:d8:2b:
85:af:7c:ee:ae:42:d7:9e:7f:14:f4:69:f1:4a:8b:
a3:d0:5e:33:f1:c9:45:12:c7:04:9f:b5:a5:76:b5:
80:01:77:b2:c1:e0:f6:9f:63:76:9a:8b:9a:b5:b3:
30:80:cd:71:bb:8b:b4:fd:06:73:78:7c:68:f4:32:
a0:80:07:80:37:09:e9:49:bb:03:04:56:96:f3:4b:
42:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E0:20:A7:4C:E8:28:65:F4:A1:DB:FB:10:9F:F5:BB:25:8A:7F:3F
X509v3 Authority Key Identifier:
keyid:54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/_-Agp0zoKGX0odv7EJ_1uyWKfz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.85.192.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:8e:c4:02:ee:4b:8f:ef:af:14:ec:4b:82:b1:b7:5a:72:54:
ca:97:21:0b:a1:9b:d0:bb:8b:db:e7:22:63:db:65:45:c8:37:
ed:ed:87:92:34:f0:73:0f:c9:05:2a:af:f7:79:b8:6a:37:ab:
e0:88:85:bd:fd:90:e3:8a:3a:33:dc:cf:37:1a:66:eb:d0:2f:
0c:a5:8e:36:97:92:82:7e:12:be:49:26:ac:7f:1d:80:68:05:
3b:83:05:76:da:c5:87:db:04:88:54:4f:96:85:5b:39:d3:47:
fb:3e:d1:a9:f1:af:37:02:40:1c:18:ec:a9:49:f9:35:1a:b7:
5a:5a:c1:31:ca:a7:d9:be:36:fb:5a:d0:45:7d:56:be:24:7a:
a4:0d:98:c1:40:aa:ef:8f:fe:45:ff:2f:62:5a:65:f9:1c:d7:
8b:e2:1a:ea:b4:d1:16:19:d2:da:56:6a:8a:29:f9:17:a1:37:
51:8c:82:45:bf:cb:e2:c3:0d:db:df:6a:e2:5a:34:82:df:92:
1e:73:f2:1a:7d:70:ed:d0:bd:d8:6a:b9:bd:13:ab:4d:55:89:
41:6f:c7:29:6a:ed:2c:e8:6f:07:22:b5:fd:a7:e9:f8:7a:7e:
98:df:c8:99:19:e3:0a:d8:ae:3a:03:54:86:45:e6:04:27:ca:
0f:c7:c0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 01:42:48 2026 by rpki-client