Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/vVPv2qBdV_7RmVJ9F7Qy2ratI4Y.roa
File: vVPv2qBdV_7RmVJ9F7Qy2ratI4Y.roa (raw, json)
Hash identifier: ILxM7GveDpmQ/QMZI45amLlU6THJ+BszSmjSwFRRmWE=
Subject key identifier: BD:53:EF:DA:A0:5D:57:FE:D1:99:52:7D:17:B4:32:DA:B6:AD:23:86
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 01A137AF80D6465A363999FBC47874FDA9E7
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/vVPv2qBdV_7RmVJ9F7Qy2ratI4Y.roa
Signing time: Tue 13 Oct 2026 23:53:31 +0000
ROA not before: Tue 13 Oct 2026 23:53:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198831
IP address blocks: 179.66.181.0/24 maxlen: 24
179.66.189.0/24 maxlen: 24
179.255.180.0/24 maxlen: 24
179.255.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:37:af:80:d6:46:5a:36:39:99:fb:c4:78:74:fd:a9:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Oct 13 23:53:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd53efdaa05d57fed199527d17b432dab6ad2386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:96:d6:91:27:3e:9f:f6:58:c0:bb:1a:fe:84:
4c:c0:db:11:40:97:d5:3b:8a:e6:59:31:dd:28:6a:
0b:67:f3:af:0a:a8:c0:de:26:11:b8:d6:0f:93:b5:
1c:08:ed:15:5f:ec:d2:a6:96:96:7d:22:cb:ac:3c:
de:c5:30:95:4b:83:1b:4a:ad:85:67:01:13:25:cd:
3f:b9:20:84:c1:30:6f:4d:83:d3:38:5c:d1:ee:33:
02:60:0c:a4:77:48:15:92:f6:ea:aa:82:7e:c2:36:
b9:cd:18:d5:62:65:bc:eb:a4:17:5b:29:b6:07:20:
d8:dc:ce:97:96:c1:b5:92:42:48:b8:bf:1e:92:42:
26:d0:d3:c9:cd:a2:1d:80:cb:87:a3:a0:16:60:71:
21:48:13:32:45:d3:35:3f:1f:fb:c6:b5:ee:66:98:
33:2f:af:4d:87:26:5a:99:9a:0f:28:84:22:3c:da:
9c:f3:f0:cc:bc:7e:e8:cc:6b:f6:b2:ca:ed:c6:2f:
dc:8c:20:1d:f4:7c:9a:8d:a7:38:3b:0a:0e:44:42:
38:87:b6:58:33:ec:3a:98:a1:6f:08:d4:0b:24:e4:
8e:0f:9d:5e:63:a9:77:4f:db:54:0b:67:15:6d:a0:
9f:fa:91:3e:56:ad:90:04:aa:78:41:e2:0f:72:16:
0d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:53:EF:DA:A0:5D:57:FE:D1:99:52:7D:17:B4:32:DA:B6:AD:23:86
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/vVPv2qBdV_7RmVJ9F7Qy2ratI4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.66.181.0/24
179.66.189.0/24
179.255.180.0/24
179.255.182.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:4b:f4:2a:2b:f1:e1:74:a7:e4:32:24:4c:e5:47:e9:ef:d0:
71:e0:56:61:dc:41:ff:db:cf:e9:83:0e:23:7c:44:71:55:13:
54:c4:d8:b8:97:14:9b:84:43:37:51:f2:89:73:28:15:13:4c:
be:4e:95:9d:5a:a9:05:88:ed:a6:78:8d:02:a0:23:a3:03:0d:
cf:ad:c6:f1:a1:35:18:96:fa:d7:25:5d:7d:c1:0f:2d:2d:95:
4a:3b:fb:38:e1:af:bb:85:37:3b:a2:ed:67:8f:97:c9:2c:cc:
8f:db:e0:86:73:0a:2e:ec:6b:92:d3:23:6d:12:d6:b6:56:49:
9f:af:ec:14:4c:79:38:36:3c:15:6a:9d:66:e1:61:d9:71:47:
6b:0c:95:2a:46:94:e8:2f:f9:14:e6:f0:06:2d:f4:ec:d6:0f:
fb:e5:47:85:62:fa:67:a4:21:64:b1:62:35:c7:7f:10:ea:98:
30:ff:04:bb:0c:10:88:91:20:90:ed:3f:ba:21:3f:b8:3e:f3:
a2:c0:57:15:4f:2f:15:02:78:f6:e4:4e:83:59:c2:15:6d:e7:
35:b6:fe:91:37:68:f7:8b:bf:06:19:54:97:f8:62:ba:97:52:
1d:44:71:a9:d6:9a:b2:f9:25:e5:a6:b2:20:89:30:d1:57:4c:
f9:45:98:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 07:12:42 2026 by rpki-client