Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VGfbO2AoEkVgiEe7eol8Fa0FJHI.roa
File: VGfbO2AoEkVgiEe7eol8Fa0FJHI.roa (raw, json)
Hash identifier: Gg/sfmzaxHzq46KeR5IMMhXbjJpGims7dj0ED45jROU=
Subject key identifier: 54:67:DB:3B:60:28:12:45:60:88:47:BB:7A:89:7C:15:AD:05:24:72
Certificate issuer: /CN=55d5dc9e220112a27c152bc32389038974ae4572
Certificate serial: 019CB400FECB8A7C0DE94D5C5247615F20E2
Authority key identifier: 55:D5:DC:9E:22:01:12:A2:7C:15:2B:C3:23:89:03:89:74:AE:45:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VdXcniIBEqJ8FSvDI4kDiXSuRXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VGfbO2AoEkVgiEe7eol8Fa0FJHI.roa
Signing time: Tue 03 Mar 2026 14:01:29 +0000
ROA not before: Tue 03 Mar 2026 14:01:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25394
IP address blocks: 94.100.128.0/24 maxlen: 24
94.100.132.0/23 maxlen: 23
2a01:6780:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VdXcniIBEqJ8FSvDI4kDiXSuRXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 17:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b4:00:fe:cb:8a:7c:0d:e9:4d:5c:52:47:61:5f:20:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55d5dc9e220112a27c152bc32389038974ae4572
Validity
Not Before: Mar 3 14:01:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5467db3b60281245608847bb7a897c15ad052472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:91:bd:5d:fd:09:67:b2:1a:8c:59:d1:e4:69:
37:7f:86:6c:69:03:80:9f:31:96:e6:64:35:72:07:
95:26:b8:7a:c8:b1:d8:18:5e:43:8c:b0:4c:04:ac:
33:57:c3:45:8f:4b:9e:f7:37:e6:4a:32:84:32:00:
7b:36:54:76:27:61:9a:bd:c3:81:d2:40:00:13:11:
bc:a9:b5:b0:93:3f:3c:70:19:17:fd:37:fe:cf:6f:
8a:69:b6:65:52:15:44:4a:40:6c:34:fd:2c:c8:9c:
ea:5a:73:f7:b0:0e:dd:2b:88:09:dd:5f:d9:4c:e3:
ff:ad:71:0e:36:74:b5:d1:c3:02:8a:76:4f:9b:b4:
eb:b4:1c:c8:75:53:45:7f:07:b3:4a:56:35:f5:b9:
82:19:e5:02:60:1f:59:db:ab:19:96:8f:fb:a1:dc:
9b:08:bc:18:4a:e7:53:62:b3:20:46:98:75:7f:71:
19:07:fd:8d:71:20:ef:ea:96:cd:b6:f5:46:3a:ea:
6e:7e:8f:d9:7c:37:22:f7:b6:3a:7c:3f:4c:c2:9c:
02:3c:22:89:52:69:00:2f:b5:b4:6b:a9:91:21:f0:
02:a0:21:b6:33:e4:27:da:81:7e:00:a1:ae:43:c2:
71:24:98:94:55:2f:51:f9:ac:6d:4a:7b:18:6d:c7:
e9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:67:DB:3B:60:28:12:45:60:88:47:BB:7A:89:7C:15:AD:05:24:72
X509v3 Authority Key Identifier:
keyid:55:D5:DC:9E:22:01:12:A2:7C:15:2B:C3:23:89:03:89:74:AE:45:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdXcniIBEqJ8FSvDI4kDiXSuRXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VGfbO2AoEkVgiEe7eol8Fa0FJHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.100.128.0/24
94.100.132.0/23
IPv6:
2a01:6780:5::/48
Signature Algorithm: sha256WithRSAEncryption
50:1b:88:6b:a3:d4:cf:ad:db:92:84:7b:c9:7f:f5:7d:6e:20:
e3:d6:b9:2c:f0:56:90:b7:01:85:54:ca:ac:d3:a6:a0:8a:4e:
b1:09:47:7c:63:52:9d:3d:2c:da:df:d3:1d:20:1e:59:08:1c:
15:5f:aa:36:ed:ed:8c:82:37:b5:a7:10:f2:bf:69:cd:1b:bc:
3c:76:f6:29:b0:d4:b2:35:23:2e:53:2d:a9:c7:55:16:95:c1:
38:83:b1:79:00:48:bd:f0:d2:78:c7:4a:e1:54:82:42:56:3c:
7a:0b:dd:63:02:d0:9c:8b:d9:29:6f:30:af:33:a8:5c:84:a6:
77:1e:37:92:5f:c1:bc:6a:dc:54:c8:e7:2b:45:5a:2f:fa:e4:
f0:25:cd:af:fd:a4:0d:cb:a3:19:00:9b:30:15:c4:61:47:fb:
65:2c:16:2e:d9:ef:e7:3f:97:9f:eb:97:81:ee:10:2d:ac:c7:
84:9d:27:ef:2b:82:55:7b:59:85:d6:f9:ba:a8:9e:b6:55:ad:
33:4e:a7:7d:92:4e:3d:43:6e:1b:2a:68:e3:54:9e:59:e3:d9:
20:43:40:6f:4e:17:9a:53:d9:b9:01:3b:df:13:b3:da:a2:a2:
ec:51:8f:a1:87:ac:dc:d8:9c:80:cf:56:a2:89:6c:ed:32:45:
c9:e0:d3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 04:06:28 2026 by rpki-client