Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/vtUu18GaHfDLIUCwLS8BAC9ItkM.roa
File: vtUu18GaHfDLIUCwLS8BAC9ItkM.roa (raw, json)
Hash identifier: D3t2yjEtPnj6wvZccxenFD1acdMG9/FFOYFJn6JG2GA=
Subject key identifier: BE:D5:2E:D7:C1:9A:1D:F0:CB:21:40:B0:2D:2F:01:00:2F:48:B6:43
Certificate issuer: /CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Certificate serial: 01A11D9FAE788A4D5101856418062A786673
Authority key identifier: 5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/vtUu18GaHfDLIUCwLS8BAC9ItkM.roa
Signing time: Thu 08 Oct 2026 22:26:06 +0000
ROA not before: Thu 08 Oct 2026 22:26:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219075
IP address blocks: 206.245.213.0/24 maxlen: 24
206.245.214.0/24 maxlen: 24
206.245.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 19:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1d:9f:ae:78:8a:4d:51:01:85:64:18:06:2a:78:66:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Validity
Not Before: Oct 8 22:26:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bed52ed7c19a1df0cb2140b02d2f01002f48b643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:52:01:58:30:a9:1a:c5:69:95:4b:b9:86:53:
f2:6a:29:35:04:fb:3a:67:74:21:6f:82:ef:22:6e:
54:50:3e:93:c2:40:12:3f:b4:dc:61:df:98:92:a5:
51:b5:6e:30:2c:77:c1:52:2d:03:a2:24:48:8f:32:
be:39:f7:90:40:da:f8:de:89:84:bb:c4:55:ee:8f:
8a:c8:26:f4:f5:c8:70:fd:96:34:22:c0:3d:c4:35:
22:77:f4:a8:cf:c1:fa:71:33:4b:ff:36:85:7f:a1:
b1:54:16:da:a7:eb:e1:52:90:81:d5:18:b3:b1:0a:
10:34:fd:0c:3d:aa:d9:4a:f0:6d:4d:5d:6d:a2:d8:
5e:1e:34:98:5c:f6:0d:40:ec:95:b1:ce:16:14:58:
37:80:b1:31:a6:b6:b8:98:5a:c6:d7:a8:99:1e:97:
c9:61:e5:de:80:fe:98:bd:c7:76:7f:02:a6:9c:9f:
80:12:67:1d:cd:cb:88:c9:3f:14:1e:6a:aa:7e:a2:
cd:0d:8f:a4:12:f5:51:9a:38:cd:19:62:fa:04:41:
af:53:6f:5b:6a:ee:f9:37:af:d3:f5:82:6c:13:70:
97:cd:68:87:fa:b6:74:6e:45:68:fe:a8:19:3a:54:
69:8c:55:8d:0d:52:a3:a9:01:70:62:52:23:dc:39:
f7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D5:2E:D7:C1:9A:1D:F0:CB:21:40:B0:2D:2F:01:00:2F:48:B6:43
X509v3 Authority Key Identifier:
keyid:5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/vtUu18GaHfDLIUCwLS8BAC9ItkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.245.213.0-206.245.215.255
Signature Algorithm: sha256WithRSAEncryption
bc:06:3b:16:68:5c:62:0e:b1:ee:54:93:32:8e:84:9b:1f:3d:
c0:d9:b1:c3:69:a2:91:aa:fc:ab:18:5a:f6:b5:d2:b0:f8:6f:
5f:6e:d5:02:bb:9e:75:fd:0f:06:e3:77:fd:52:b7:48:d4:b0:
dc:19:f2:f9:72:40:86:45:00:9f:8b:78:15:36:15:d0:02:ab:
32:67:6f:9c:5c:b3:fa:ec:e8:85:c9:19:cc:cc:76:8e:50:94:
b8:61:a5:35:2d:38:de:c1:c3:e0:47:07:ec:98:6a:8e:3a:14:
ef:51:63:4c:af:9a:76:ea:7f:d8:7d:75:52:93:ae:ac:2c:26:
eb:70:8e:69:1b:69:8d:6f:60:e3:04:b8:5c:6a:fa:34:42:11:
02:b3:13:5f:d0:1f:2f:8e:8e:1a:14:52:68:fe:32:df:58:29:
66:f8:c2:60:78:1b:24:a8:ea:af:8a:60:f4:f8:ea:cd:c4:f6:
1d:40:26:85:24:ce:32:12:b8:4c:f8:b2:13:fd:e3:78:62:35:
34:ab:ab:ad:2d:01:4d:15:07:1b:a5:58:85:85:7b:6c:62:9e:
ee:28:bd:c5:35:5c:5f:12:43:72:13:51:23:f1:a9:d1:0c:bc:
8d:f1:45:b8:ae:d6:95:f1:2e:9e:98:bb:cc:0f:16:d5:b1:cf:
9f:54:47:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 06:44:19 2026 by rpki-client