Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/VA23_-klU3uAYeDHs5bO-wPykxQ.roa
File: VA23_-klU3uAYeDHs5bO-wPykxQ.roa (raw, json)
Hash identifier: xN5rEz4amsagEDEg6TOchBFhxYj/C7FTh0bfuV2hXEw=
Subject key identifier: 54:0D:B7:FF:E9:25:53:7B:80:61:E0:C7:B3:96:CE:FB:03:F2:93:14
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019E3FBF885D23DEC608D9C07F2355FEA762
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/VA23_-klU3uAYeDHs5bO-wPykxQ.roa
Signing time: Tue 19 May 2026 10:19:37 +0000
ROA not before: Tue 19 May 2026 10:19:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 27010
IP address blocks: 81.168.10.0/24 maxlen: 24
82.153.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 May 2026 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3f:bf:88:5d:23:de:c6:08:d9:c0:7f:23:55:fe:a7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 19 10:19:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=540db7ffe925537b8061e0c7b396cefb03f29314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1c:68:19:03:d9:ad:7e:e0:6f:78:9f:5a:7e:
09:f4:b7:57:ae:39:40:a6:f4:a8:df:9f:79:24:4c:
66:79:24:b5:87:03:00:09:f5:fd:39:4f:06:a1:d9:
1d:5e:fe:9a:a9:e5:e8:3e:cd:27:da:77:af:f5:01:
15:01:57:a3:ad:13:86:2d:ac:8d:55:05:2c:32:a4:
f8:88:bd:69:1f:25:4d:39:88:f2:c8:af:27:18:6b:
ea:1c:18:b9:07:7b:7e:61:93:ef:9f:83:df:3a:1c:
9a:a4:0a:67:b8:e7:8b:61:08:a4:f9:c0:42:f0:5e:
a8:a4:88:18:7a:4e:d2:4e:80:19:a0:98:ca:1d:29:
34:32:41:04:be:e7:2d:f1:0f:8a:01:50:38:fd:34:
ef:6b:dd:4a:21:1e:ba:15:3c:56:c6:57:93:48:54:
0d:5b:70:f0:35:52:fd:1b:f3:18:a7:2f:9a:ca:b5:
d7:29:66:6a:ee:8a:b1:56:39:cf:c4:60:5b:1b:2f:
e5:e8:64:c7:5c:59:29:7f:82:5d:6e:6a:dd:2a:8a:
45:6f:63:4e:cd:81:30:8e:58:48:9e:5c:50:47:61:
de:98:da:55:ba:91:61:af:eb:eb:12:10:53:a3:3e:
99:5b:06:4c:d3:0c:ca:65:34:62:dc:8a:e4:04:d1:
9c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:0D:B7:FF:E9:25:53:7B:80:61:E0:C7:B3:96:CE:FB:03:F2:93:14
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/VA23_-klU3uAYeDHs5bO-wPykxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.10.0/24
82.153.157.0/24
Signature Algorithm: sha256WithRSAEncryption
37:c9:ee:85:f2:e1:51:76:ff:0e:b8:56:fb:4a:6c:5d:ad:71:
38:81:d6:6c:68:8d:7e:d6:ee:59:53:6b:4f:36:28:40:bf:6f:
9a:85:53:f0:1b:18:28:e4:37:af:74:b4:d5:00:c0:5d:67:95:
a4:87:98:50:89:f1:41:3a:6c:67:27:03:96:68:9d:0f:01:73:
25:02:52:14:4c:d2:d0:bd:55:6a:91:76:9d:3b:6d:11:c5:2a:
be:a7:36:14:08:82:d2:ac:b3:bf:ec:25:99:1e:00:3c:2c:eb:
3f:9b:13:ca:30:d5:c9:7c:46:6e:2b:c5:f1:89:e1:85:6b:45:
72:e0:84:9b:f9:d4:8b:8e:78:ae:cc:dd:b9:7e:32:e1:7a:01:
50:89:ed:70:9a:a7:5e:e5:a0:fd:9f:71:e7:ff:30:fe:6f:54:
a5:22:66:af:d4:00:e4:d8:55:7a:83:73:c4:0a:f2:0e:12:4c:
df:35:73:76:72:e6:9e:f0:31:bf:84:a3:a1:c8:f6:74:01:7f:
ff:5f:c0:5c:f3:61:29:3f:62:e5:03:73:ff:cb:72:2c:c1:6d:
02:09:c2:30:32:b7:f0:0d:c6:0d:00:fd:2c:5a:5d:0d:1e:8d:
c4:77:da:47:25:69:6f:51:28:c2:b5:d7:8c:02:05:a3:35:be:
e4:69:12:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 11:40:24 2026 by rpki-client