Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/vseOMyGx-RUHHzgHLny15h9iurc.roa
File: vseOMyGx-RUHHzgHLny15h9iurc.roa (raw, json)
Hash identifier: +M5NuQUX2aVuh0JYV597fLv4VoFbpvu4EB+9TRl/kwo=
Subject key identifier: BE:C7:8E:33:21:B1:F9:15:07:1F:38:07:2E:7C:B5:E6:1F:62:BA:B7
Certificate issuer: /CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
Certificate serial: 019CB758D0DAFFE5B193A99E4319EF804FFF
Authority key identifier: 54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/vseOMyGx-RUHHzgHLny15h9iurc.roa
Signing time: Wed 04 Mar 2026 05:36:16 +0000
ROA not before: Wed 04 Mar 2026 05:36:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201988
IP address blocks: 95.85.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b7:58:d0:da:ff:e5:b1:93:a9:9e:43:19:ef:80:4f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b0bec8f58db0ce5b91f34505277e40bfd3ae11
Validity
Not Before: Mar 4 05:36:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bec78e3321b1f915071f38072e7cb5e61f62bab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3d:b9:65:86:52:ea:ee:30:a1:e6:90:bf:f7:
60:31:3d:b4:18:63:c3:f2:46:fb:9f:1d:98:93:ab:
17:79:be:69:a4:3b:5d:d4:a5:52:a3:22:05:5e:ea:
df:bd:65:ab:91:87:bc:49:90:92:0f:6d:99:f8:45:
2e:14:ca:f3:3c:b5:92:c3:46:95:0f:4c:41:19:11:
bd:8a:c6:a4:a7:8a:04:dd:c5:94:8f:a9:a0:21:6a:
8b:82:dd:81:21:82:d6:81:72:83:9b:46:99:8a:3e:
5c:e1:33:45:31:cd:bb:2b:b6:08:da:6c:68:14:6b:
3c:45:9d:68:6a:08:f9:1e:a5:26:c8:53:eb:f8:90:
b6:76:d5:07:b8:5d:5d:d2:60:a3:39:2c:c7:d5:a5:
54:c7:6a:a5:bd:07:f3:11:ae:2c:c8:bc:29:a4:85:
18:3b:b6:a9:39:35:df:6e:a5:b6:98:bd:43:69:11:
f1:92:1d:72:d9:89:f7:0a:ef:39:6a:92:8e:be:bb:
17:56:bb:64:46:8f:09:55:d2:66:17:ce:25:79:24:
90:b0:0a:b2:55:70:7a:9b:3e:f5:dc:c5:af:c0:19:
a0:52:5c:31:47:21:3c:3a:0c:aa:43:5e:ca:dd:21:
7b:b9:64:df:85:87:2b:b9:62:7b:59:eb:bc:35:64:
28:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:C7:8E:33:21:B1:F9:15:07:1F:38:07:2E:7C:B5:E6:1F:62:BA:B7
X509v3 Authority Key Identifier:
keyid:54:B0:BE:C8:F5:8D:B0:CE:5B:91:F3:45:05:27:7E:40:BF:D3:AE:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLC-yPWNsM5bkfNFBSd-QL_TrhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/vseOMyGx-RUHHzgHLny15h9iurc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ad34e-b1e5-4d8c-948e-0f4dbb890bd0/1/VLC-yPWNsM5bkfNFBSd-QL_TrhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.85.251.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:e0:c6:0c:f0:9d:2a:a6:e8:2c:b3:60:78:9d:85:60:b1:90:
b3:ca:07:6e:c4:72:ce:8d:00:f0:d5:c7:91:17:e8:ac:90:24:
a9:7b:bd:3e:1c:7c:3f:ac:b0:1f:cd:ee:29:64:46:ca:8c:02:
22:fb:f4:3e:18:ac:0a:78:97:8f:d1:25:b9:f5:4e:41:f8:43:
c1:f4:99:92:f5:2f:02:d4:87:0d:0b:82:c1:39:c3:e8:10:8d:
18:e2:1d:7c:68:36:a4:60:51:c4:5c:f2:21:f8:67:98:f0:79:
52:14:16:87:ee:2b:d9:10:cd:e1:e9:a4:ac:d2:c8:f0:ed:43:
ac:91:83:2d:1b:7e:db:32:94:b8:34:07:38:8a:37:ae:8a:19:
5f:bf:0f:4e:01:52:ac:12:0b:89:d3:00:cd:81:b4:18:27:d3:
2a:42:c9:65:9a:d9:6d:12:75:ba:e2:30:84:2f:df:e0:d6:09:
04:89:cb:a6:5d:4a:0b:dc:d8:e6:33:d8:57:3d:4e:39:fe:2b:
81:f6:91:78:ef:13:4b:d6:b9:68:42:02:fa:ec:b2:c7:3f:9e:
f4:06:18:ca:08:26:8f:cf:e1:8e:7c:8a:d8:9f:bd:4b:96:14:
f3:7a:cc:c4:f5:3d:68:f9:df:7d:6d:c1:8e:a7:01:48:32:d2:
e7:0d:f6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 17:16:07 2026 by rpki-client