Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/VNXUTkLhTELCHL_xYmLDqoTk_E8.roa
File: VNXUTkLhTELCHL_xYmLDqoTk_E8.roa (raw, json)
Hash identifier: Y3N0C2Cl9/mbPajcJg1hote0RwDtUuKBwQjft6/aYuI=
Subject key identifier: 54:D5:D4:4E:42:E1:4C:42:C2:1C:BF:F1:62:62:C3:AA:84:E4:FC:4F
Certificate issuer: /CN=13e4dd8f804f6637568194e3c79395d8ea60bd49
Certificate serial: 019F2368F82899D997CB8A0AEF8E8B7D8E38
Authority key identifier: 13:E4:DD:8F:80:4F:66:37:56:81:94:E3:C7:93:95:D8:EA:60:BD:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/VNXUTkLhTELCHL_xYmLDqoTk_E8.roa
Signing time: Thu 02 Jul 2026 15:18:29 +0000
ROA not before: Thu 02 Jul 2026 15:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2200
IP address blocks: 129.104.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f8:28:99:d9:97:cb:8a:0a:ef:8e:8b:7d:8e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13e4dd8f804f6637568194e3c79395d8ea60bd49
Validity
Not Before: Jul 2 15:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54d5d44e42e14c42c21cbff16262c3aa84e4fc4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f1:27:0c:1f:f7:77:d3:7b:e5:3c:be:3d:f2:
08:32:92:43:c8:f0:ff:d2:80:ca:5b:c7:59:2c:e8:
6c:58:7a:ad:8b:f2:d7:51:5e:14:b8:3d:bb:da:85:
b7:9b:5c:fc:9c:77:b1:0f:62:8b:7e:7d:c5:08:a7:
b1:a0:2c:0d:0a:c8:e7:10:3b:1a:c1:39:c2:6a:3b:
7e:a7:54:79:fb:e3:0d:f3:98:b5:53:22:cd:cf:e2:
e7:40:7d:16:a6:87:2e:f2:63:d3:09:11:86:94:62:
fd:79:c6:87:2b:d8:8a:bc:a0:90:d3:6d:7b:4a:60:
ce:a6:da:ab:4c:7d:00:a1:3f:5d:44:50:ff:81:af:
cf:e1:e6:1a:ae:d3:11:02:03:25:01:e9:62:ae:ce:
f6:7d:fe:8b:4e:0a:3b:dd:3f:be:58:b5:20:77:d2:
2b:cc:00:0c:33:c0:ee:e9:f3:dc:ce:1b:42:72:1b:
ad:48:6e:39:97:6d:45:39:03:9c:7f:13:fe:91:96:
16:49:7f:e5:9c:4c:1d:dd:7d:f5:49:cf:ec:d4:07:
6b:26:1a:ca:a8:b7:22:72:c6:26:5d:bc:03:b2:88:
5b:72:bb:e3:4f:7c:12:06:b6:39:97:5b:8b:db:24:
36:d6:8c:39:6e:b9:04:a5:2e:8c:74:88:88:c5:1d:
2b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D5:D4:4E:42:E1:4C:42:C2:1C:BF:F1:62:62:C3:AA:84:E4:FC:4F
X509v3 Authority Key Identifier:
keyid:13:E4:DD:8F:80:4F:66:37:56:81:94:E3:C7:93:95:D8:EA:60:BD:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/VNXUTkLhTELCHL_xYmLDqoTk_E8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/E-Tdj4BPZjdWgZTjx5OV2OpgvUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.104.0.0/16
Signature Algorithm: sha256WithRSAEncryption
52:d7:9c:0c:63:a9:01:50:c5:aa:ab:22:b1:73:f8:41:3b:de:
9d:ae:5e:c0:ae:72:9b:67:71:13:f7:b8:6d:1d:39:43:c6:89:
34:be:26:ba:b9:3e:31:1f:05:5e:e2:53:f7:57:50:ab:89:a2:
92:ba:7a:82:5b:dd:82:17:4f:d9:e5:1e:8c:d9:ec:f5:8a:5e:
2c:b5:55:b9:69:13:4b:5a:dc:89:46:c9:03:5f:a2:7d:e8:f9:
96:b9:e4:f5:13:be:ab:67:7d:e3:55:de:db:bd:5d:eb:fa:b2:
88:95:1d:2f:44:3d:0d:15:02:12:6c:41:a0:01:8b:30:4d:d8:
66:34:aa:c0:f9:e2:33:31:d3:a1:70:88:fd:49:a4:fe:2e:9b:
26:6e:22:50:f6:2e:bc:8c:b0:c6:bc:9d:b6:f3:08:ce:fd:41:
ad:ea:ee:d2:ab:97:5e:47:8f:41:7e:6a:f5:7c:95:52:a2:87:
0d:7f:f3:ef:75:0a:17:01:0d:88:6c:53:2d:96:6b:b1:72:f4:
f0:2a:c9:13:4f:0f:77:32:1d:c4:ad:fa:08:5c:e3:9a:cf:e9:
56:4b:2f:da:f0:af:6f:30:1f:72:9a:d5:34:e3:e0:04:4c:83:
4d:5b:b1:1a:26:c9:19:69:b9:da:ac:33:b6:90:1f:b7:13:a4:
3b:55:67:7f
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZ8jaPgomdmXy4oK746LfY44MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZTRkZDhmODA0ZjY2Mzc1NjgxOTRlM2M3OTM5NWQ4ZWE2
MGJkNDkwHhcNMjYwNzAyMTUxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NGQ1ZDQ0ZTQyZTE0YzQyYzIxY2JmZjE2MjYyYzNhYTg0ZTRmYzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vEnDB/3d9N75Ty+PfIIMpJDyPD/
0oDKW8dZLOhsWHqti/LXUV4UuD272oW3m1z8nHexD2KLfn3FCKexoCwNCsjnEDsa
wTnCajt+p1R5++MN85i1UyLNz+LnQH0Wpocu8mPTCRGGlGL9ecaHK9iKvKCQ0217
SmDOptqrTH0AoT9dRFD/ga/P4eYartMRAgMlAelirs72ff6LTgo73T++WLUgd9Ir
zAAMM8Du6fPczhtCchutSG45l21FOQOcfxP+kZYWSX/lnEwd3X31Sc/s1AdrJhrK
qLcicsYmXbwDsohbcrvjT3wSBrY5l1uL2yQ21ow5brkEpS6MdIiIxR0rFwIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFFTV1E5C4UxCwhy/8WJiw6qE5PxPMB8GA1UdIwQY
MBaAFBPk3Y+AT2Y3VoGU48eTldjqYL1JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS1UZGo0QlBaamRXZ1pUang1T1YyT3BndlVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi82NGNlOGItZmY3YS00NzQ0LTk3MTIt
ZDk3MzBmNWI1ODY3LzEvVk5YVVRrTGhURUxDSExfeFltTERxb1RrX0U4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi82NGNlOGItZmY3YS00NzQ0LTk3MTItZDk3MzBmNWI1ODY3
LzEvRS1UZGo0QlBaamRXZ1pUang1T1YyT3BndlVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgWgwDQYJ
KoZIhvcNAQELBQADggEBAFLXnAxjqQFQxaqrIrFz+EE73p2uXsCucptncRP3uG0d
OUPGiTS+Jrq5PjEfBV7iU/dXUKuJopK6eoJb3YIXT9nlHozZ7PWKXiy1VblpE0ta
3IlGyQNfon3o+Za55PUTvqtnfeNV3tu9Xev6soiVHS9EPQ0VAhJsQaABizBN2GY0
qsD54jMx06FwiP1JpP4umyZuIlD2LryMsMa8nbbzCM79Qa3q7tKrl15Hj0F+avV8
lVKihw1/8+91ChcBDYhsUy2Wa7Fy9PAqyRNPD3cyHcSt+ghc45rP6VZLL9rwr28w
H3Ka1TTj4ARMg01bsRomyRlpudqsM7aQH7cTpDtVZ38=
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:56:43 2026 by rpki-client