Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/VgOMDG7UZtHB1CKshYGZFj4Cqic.roa
File: VgOMDG7UZtHB1CKshYGZFj4Cqic.roa (raw, json)
Hash identifier: xzzAiNera9mLgzvG+jPZ47RQagAdP1jBC2IGHubscMU=
Subject key identifier: 56:03:8C:0C:6E:D4:66:D1:C1:D4:22:AC:85:81:99:16:3E:02:AA:27
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 019F23685DEBB2E834635DA0259F70779F40
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/VgOMDG7UZtHB1CKshYGZFj4Cqic.roa
Signing time: Thu 02 Jul 2026 15:17:50 +0000
ROA not before: Thu 02 Jul 2026 15:17:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43991
IP address blocks: 189.74.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:5d:eb:b2:e8:34:63:5d:a0:25:9f:70:77:9f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Jul 2 15:17:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56038c0c6ed466d1c1d422ac858199163e02aa27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fc:52:f5:e1:f3:fc:f3:35:94:c8:7d:e1:3c:
99:c8:2b:b6:03:5d:e9:52:a6:4c:55:4c:f5:dc:de:
81:a4:84:3d:c7:6c:91:91:97:70:cd:c4:e1:92:1c:
4f:e5:c2:82:47:da:31:24:fa:96:b2:49:0c:71:39:
00:60:62:71:0a:ba:00:a3:4f:3a:83:61:fa:84:8c:
92:40:e8:41:97:25:71:ca:b8:52:9c:40:3d:83:f9:
92:ee:9f:44:d7:b8:a8:88:36:10:3f:22:f7:ea:9a:
1d:18:a8:2c:ab:ad:2c:48:40:ce:ea:ed:42:00:c3:
c3:43:3e:a3:cd:a0:88:22:1c:01:46:d5:1d:a7:8b:
4f:25:b9:c8:7d:23:53:25:6c:80:de:4b:e7:f3:a7:
29:9c:c9:59:17:25:d2:a6:fc:4d:73:ed:37:69:79:
9b:73:0f:62:c4:d9:8f:95:9e:80:d8:4a:95:ab:6d:
6f:d1:3b:d1:6c:2c:47:39:b3:f8:e5:12:d3:05:23:
22:cc:05:7e:42:ed:74:92:02:b1:94:c4:d7:4d:a7:
e6:70:8e:9b:34:f8:21:cb:22:80:ee:66:de:5f:00:
e0:7b:e9:fa:b0:10:11:d8:55:20:d1:63:ac:5b:28:
02:69:1f:da:71:44:2e:08:a5:54:2e:1a:95:bc:33:
58:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:03:8C:0C:6E:D4:66:D1:C1:D4:22:AC:85:81:99:16:3E:02:AA:27
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/VgOMDG7UZtHB1CKshYGZFj4Cqic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.74.104.0/24
Signature Algorithm: sha256WithRSAEncryption
75:ef:be:a1:9e:20:45:3b:55:69:bf:ab:06:e8:ae:40:02:51:
52:77:ce:fc:7f:7f:a1:1f:4d:8c:f8:cd:8d:d7:47:00:8b:c3:
72:16:9b:17:19:03:59:89:fb:3f:52:e4:2d:a7:c3:87:c6:13:
a4:62:bc:1b:80:44:eb:5e:ae:e4:f0:80:d4:3f:e2:72:37:5b:
08:ac:1d:fc:a0:0d:a8:7e:91:db:c1:ce:ef:6c:d9:39:cb:ae:
c7:ff:1a:b5:2e:6d:d9:59:0d:c5:b5:4d:7e:28:c3:94:bf:1a:
04:6c:16:1e:f7:c3:c5:fa:0d:b4:9e:e7:90:33:c4:40:5b:24:
6e:20:ae:4b:fc:c5:71:4c:e6:bf:5a:cd:b2:87:02:0e:c8:5b:
1b:40:23:bc:86:55:9f:cc:16:45:0a:13:df:62:bc:76:66:0a:
24:b0:ef:49:53:6e:e8:16:d3:e5:75:cd:1f:b2:cb:98:a5:d0:
4c:01:cf:7d:11:d3:b4:d5:55:84:24:62:4a:0c:fa:76:76:02:
2b:57:92:82:8d:b5:f6:dc:d1:a1:42:1b:ad:14:f5:e9:f9:8f:
d3:0c:0c:7b:f7:54:0f:d9:af:85:a7:76:34:d6:fd:d0:25:48:
62:7e:a0:6f:67:76:99:28:f6:49:ae:8a:22:bb:d3:a4:64:6e:
1e:21:85:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:27:42 2026 by rpki-client