Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/2617d6-866a-4f90-ac47-5d7122e89ece/1/vgCCNImryhTqz0TegMLmz10ZQhE.roa
File: vgCCNImryhTqz0TegMLmz10ZQhE.roa (raw, json)
Hash identifier: FTRS/rwWFmd0qjPL0DmrUpFzHYlvmE3dBKqHvOtrB5Q=
Subject key identifier: BE:00:82:34:89:AB:CA:14:EA:CF:44:DE:80:C2:E6:CF:5D:19:42:11
Certificate issuer: /CN=e7ea78465961e541b104daa6f8b363fca4beb375
Certificate serial: 019FFBA0CE55AC2AD1C6F2F7922158D7BAA4
Authority key identifier: E7:EA:78:46:59:61:E5:41:B1:04:DA:A6:F8:B3:63:FC:A4:BE:B3:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5-p4Rllh5UGxBNqm-LNj_KS-s3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/2617d6-866a-4f90-ac47-5d7122e89ece/1/vgCCNImryhTqz0TegMLmz10ZQhE.roa
Signing time: Thu 13 Aug 2026 14:57:27 +0000
ROA not before: Thu 13 Aug 2026 14:57:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202228
IP address blocks: 185.207.148.0/22 maxlen: 22
193.46.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/2617d6-866a-4f90-ac47-5d7122e89ece/1/5-p4Rllh5UGxBNqm-LNj_KS-s3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/2617d6-866a-4f90-ac47-5d7122e89ece/1/5-p4Rllh5UGxBNqm-LNj_KS-s3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5-p4Rllh5UGxBNqm-LNj_KS-s3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:a0:ce:55:ac:2a:d1:c6:f2:f7:92:21:58:d7:ba:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7ea78465961e541b104daa6f8b363fca4beb375
Validity
Not Before: Aug 13 14:57:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be00823489abca14eacf44de80c2e6cf5d194211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:47:7e:b2:9a:6d:2e:fb:9c:6d:60:5b:4c:a1:
cd:6d:91:f8:ff:6a:a8:bd:61:bb:ce:bb:a6:8c:e8:
8e:e8:00:fd:6e:a1:f5:9b:5b:5d:41:d3:0f:36:c9:
81:4d:7c:78:a7:ca:5f:59:c2:15:23:1e:fd:80:59:
ff:9d:af:47:96:c6:82:a7:81:99:89:55:0e:2c:ca:
dc:a1:6d:bb:d6:36:ae:d0:e3:16:7d:9e:54:76:f4:
d4:be:8e:b1:83:6a:ce:63:7d:34:d3:d9:e9:7d:5d:
36:62:be:21:02:a0:6e:a6:39:db:56:37:75:03:f7:
31:60:d9:a9:e0:2b:61:6b:d2:5d:9f:f6:8d:e3:c5:
f2:85:be:a9:23:ec:d2:5d:59:7f:0c:dd:9e:24:5e:
0d:bc:fa:94:cf:32:c4:15:03:9d:c4:a1:71:23:72:
f5:6d:fc:28:56:fa:f1:6b:1f:90:84:09:78:f3:a9:
2f:37:e9:f5:f8:e2:f8:9f:3d:9b:05:09:04:f6:2f:
ba:96:6f:42:cd:59:7d:62:64:a8:62:c5:03:3c:90:
1d:47:be:c1:9d:14:53:58:38:04:14:89:22:61:ee:
4c:99:61:50:92:2d:43:6d:cd:48:01:c9:fa:05:ad:
8b:44:80:e7:7c:07:b3:2b:d2:56:34:66:41:fc:2b:
c2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:00:82:34:89:AB:CA:14:EA:CF:44:DE:80:C2:E6:CF:5D:19:42:11
X509v3 Authority Key Identifier:
keyid:E7:EA:78:46:59:61:E5:41:B1:04:DA:A6:F8:B3:63:FC:A4:BE:B3:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5-p4Rllh5UGxBNqm-LNj_KS-s3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2617d6-866a-4f90-ac47-5d7122e89ece/1/vgCCNImryhTqz0TegMLmz10ZQhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2617d6-866a-4f90-ac47-5d7122e89ece/1/5-p4Rllh5UGxBNqm-LNj_KS-s3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.148.0/22
193.46.220.0/24
Signature Algorithm: sha256WithRSAEncryption
07:ad:51:03:4e:97:89:36:14:03:43:6c:a6:05:35:51:54:bc:
ed:d5:61:18:c9:d3:f4:6a:75:60:df:c4:84:7c:3c:77:4e:81:
31:be:07:42:8c:1c:56:56:b0:65:b8:2e:a9:c8:21:63:ee:ae:
99:2b:89:a5:ce:b3:dd:e3:ae:be:42:bd:17:31:0b:43:67:a1:
ec:58:d3:c5:c7:e8:0f:df:f4:7d:a4:62:fd:3f:83:bf:29:e7:
0d:3a:e7:f8:9b:44:53:90:06:bd:e0:1a:4e:8d:23:8c:58:53:
4e:7e:9c:27:c1:82:cd:f6:8e:0a:1a:7e:ec:58:e1:34:88:aa:
0f:f9:96:a7:3f:ad:d7:01:c8:ca:8c:60:b3:e2:61:71:14:00:
8f:ba:90:e0:d4:38:48:bf:d8:61:57:8b:1e:89:b5:6c:f2:da:
41:34:82:5b:41:5f:97:48:eb:cc:79:0a:88:e6:5c:49:00:09:
60:3c:f7:51:a4:f6:6c:af:7c:c8:d1:f1:c2:7a:82:81:81:c8:
f4:af:9f:b5:00:1a:23:c1:5d:7c:5e:3d:0c:51:e1:43:82:e4:
26:08:df:63:23:4a:f7:3d:c5:2a:4a:99:7d:25:38:93:94:09:
43:15:00:05:b5:97:65:94:ba:bb:9f:8d:c5:b7:d8:33:81:8f:
2a:1d:00:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:14:02 2026 by rpki-client