Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/vqtiNCqmFTgZhluRAF9PxU_CVW0.roa
File: vqtiNCqmFTgZhluRAF9PxU_CVW0.roa (raw, json)
Hash identifier: SZBzR5bl2Fh4kMVH7fOKYHImik+Vj2jtIZ9kmUmZ24o=
Subject key identifier: BE:AB:62:34:2A:A6:15:38:19:86:5B:91:00:5F:4F:C5:4F:C2:55:6D
Certificate issuer: /CN=b450d3132de1bc2dd265d6e1afc6fb16b6ec1b08
Certificate serial: 019CFEC5EC00C22CEA9F74A76C3AD4382E07
Authority key identifier: B4:50:D3:13:2D:E1:BC:2D:D2:65:D6:E1:AF:C6:FB:16:B6:EC:1B:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFDTEy3hvC3SZdbhr8b7FrbsGwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/vqtiNCqmFTgZhluRAF9PxU_CVW0.roa
Signing time: Wed 18 Mar 2026 02:28:29 +0000
ROA not before: Wed 18 Mar 2026 02:28:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62172
IP address blocks: 185.37.216.0/22 maxlen: 24
185.55.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFDTEy3hvC3SZdbhr8b7FrbsGwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Mar 2026 14:33:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fe:c5:ec:00:c2:2c:ea:9f:74:a7:6c:3a:d4:38:2e:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b450d3132de1bc2dd265d6e1afc6fb16b6ec1b08
Validity
Not Before: Mar 18 02:28:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=beab62342aa6153819865b91005f4fc54fc2556d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:03:7c:32:b2:78:cf:95:6d:69:e5:a8:ce:34:
87:e5:fd:b6:06:fe:95:d5:b1:a0:82:70:d9:68:f5:
3e:f7:f3:81:e8:bf:45:00:ad:6f:98:41:a0:8c:64:
b3:64:22:e2:6c:54:27:54:d0:cf:c4:75:50:f9:94:
10:6d:ff:e4:1f:96:96:5b:ec:66:b5:80:fd:ad:5d:
ab:69:07:96:30:3b:70:3d:fe:ac:7a:50:37:61:98:
39:e3:7c:27:ba:61:5c:a9:f1:c4:66:f6:ef:05:32:
9c:1e:b7:ce:81:6e:c7:54:d0:e3:59:20:3b:a1:d3:
04:f2:8e:e1:ff:d5:87:02:08:b0:69:10:59:57:55:
22:5f:b4:20:df:f0:98:cc:84:f7:71:f5:93:06:16:
d9:67:90:bd:81:89:8e:b5:3e:11:92:9e:14:b1:58:
9d:32:ca:3e:3d:b5:af:62:84:ad:d6:a5:0a:00:a0:
a9:04:6f:07:0a:41:16:01:e6:04:9b:f7:1e:ce:27:
98:80:6d:ba:44:92:7e:13:5e:d4:15:c1:76:25:eb:
61:5c:4c:c9:71:76:bd:50:96:50:66:60:7c:e6:5f:
02:f0:a5:26:19:b1:2a:10:30:5d:7b:7a:24:6f:e4:
76:94:a8:ae:ea:3b:38:39:bf:d8:f6:82:30:4b:d7:
af:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AB:62:34:2A:A6:15:38:19:86:5B:91:00:5F:4F:C5:4F:C2:55:6D
X509v3 Authority Key Identifier:
keyid:B4:50:D3:13:2D:E1:BC:2D:D2:65:D6:E1:AF:C6:FB:16:B6:EC:1B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFDTEy3hvC3SZdbhr8b7FrbsGwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/vqtiNCqmFTgZhluRAF9PxU_CVW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cfef67-efdf-49ba-b96b-65fc33de4f39/1/tFDTEy3hvC3SZdbhr8b7FrbsGwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.216.0/22
185.55.83.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:f5:65:70:30:58:2a:18:6d:95:03:34:d8:02:82:21:13:4e:
34:89:8e:62:a0:c1:d1:01:ed:ce:28:52:2d:78:36:67:4b:34:
f7:e0:40:7b:d5:12:db:42:ed:ce:7b:22:fc:d2:a9:22:a5:30:
bc:b4:60:ed:e9:0d:16:6b:41:40:14:7a:25:f5:e7:d6:5f:cb:
66:2b:b3:74:27:b6:bc:5a:b7:52:d8:95:75:85:06:b5:65:32:
35:71:be:18:cf:6e:8f:9b:0b:3d:69:0c:ef:95:23:bf:ad:6f:
91:7d:ba:12:34:9c:f6:56:43:4c:d7:d5:b6:4f:8d:54:aa:bc:
f6:3d:33:3f:4f:6d:8f:c1:34:78:3c:54:30:75:48:19:28:c2:
c5:d3:d2:d8:36:ca:91:29:8d:4f:82:9e:46:20:bc:90:2d:c0:
bf:2c:c5:c1:8f:8b:ce:c0:48:61:d8:60:cd:00:91:68:15:13:
af:7c:26:a9:79:f6:2b:b8:8c:2d:e9:2f:5e:f0:11:31:5a:95:
ce:c1:1a:b4:55:8a:ca:05:36:44:1e:95:d4:78:f9:58:53:61:
76:3b:90:a6:db:b6:06:46:85:e9:ef:47:c0:0a:9b:15:87:4a:
42:a0:a0:cd:71:96:a1:5b:96:cb:38:b6:82:8c:d1:dc:35:6b:
1d:37:1c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 22:12:56 2026 by rpki-client