Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/VM1Qr1icydMxray_lLeWJdY3AEg.roa
File: VM1Qr1icydMxray_lLeWJdY3AEg.roa (raw, json)
Hash identifier: 3+zd5wxBgWiclxvN2Zu8sKD9nGfBaB7yLsw9iFPaJ3o=
Subject key identifier: 54:CD:50:AF:58:9C:C9:D3:31:AD:AC:BF:94:B7:96:25:D6:37:00:48
Certificate issuer: /CN=60a540ce450456345ec8e098ef4f53634d74bf1f
Certificate serial: 019EC752C88605873D22B6CF3DB123F0A235
Authority key identifier: 60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/VM1Qr1icydMxray_lLeWJdY3AEg.roa
Signing time: Sun 14 Jun 2026 18:09:11 +0000
ROA not before: Sun 14 Jun 2026 18:09:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399114
IP address blocks: 94.154.8.0/24 maxlen: 24
135.84.215.0/24 maxlen: 24
135.136.128.0/19 maxlen: 32
135.136.143.0/24 maxlen: 32
135.136.144.0/24 maxlen: 32
153.52.160.0/19 maxlen: 32
178.211.157.0/24 maxlen: 24
185.234.115.0/24 maxlen: 24
207.189.0.0/19 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 20:41:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c7:52:c8:86:05:87:3d:22:b6:cf:3d:b1:23:f0:a2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60a540ce450456345ec8e098ef4f53634d74bf1f
Validity
Not Before: Jun 14 18:09:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54cd50af589cc9d331adacbf94b79625d6370048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d2:e2:1d:73:87:f0:6c:cf:ff:da:b9:9c:f9:
81:cf:0f:77:2d:58:c8:5b:10:8b:9e:a4:d8:25:d8:
0d:a2:66:eb:bd:e9:d4:a9:ef:2d:a7:4c:10:34:b2:
e2:16:0d:dd:d6:a4:6d:6b:eb:46:70:0a:29:b1:1e:
24:05:1d:60:b1:a7:e3:3e:b1:23:45:a6:ee:23:04:
6d:3b:c7:1a:2b:11:80:0f:38:0d:1b:dd:24:4b:cd:
61:64:2a:5a:d3:b3:5f:20:87:60:07:a5:1e:d8:0e:
66:f8:bf:0e:90:d7:f3:b2:57:be:a9:a8:d8:10:0f:
b1:b9:77:da:ae:dd:ee:95:ee:47:17:68:74:c1:fe:
ee:7f:d8:cc:d1:dd:f3:1f:e7:3f:71:4c:34:89:56:
fb:38:d4:e0:45:d6:81:8f:71:12:ca:51:f8:01:d4:
f7:2d:ff:c4:27:2e:b0:e0:a7:db:8d:91:49:ad:ee:
fe:b7:d5:6a:f2:15:53:2b:54:fc:45:7a:ba:81:f0:
07:01:8b:2f:13:ae:82:0d:04:2e:86:6f:fd:55:ee:
9f:5a:25:24:e9:c4:11:43:bc:36:27:ce:a8:0a:f4:
6b:78:57:57:5d:84:d8:55:ec:60:1c:9b:bf:a4:b1:
3a:c4:8b:58:87:17:96:06:8c:74:1c:4a:c1:4c:2b:
d6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:CD:50:AF:58:9C:C9:D3:31:AD:AC:BF:94:B7:96:25:D6:37:00:48
X509v3 Authority Key Identifier:
keyid:60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/VM1Qr1icydMxray_lLeWJdY3AEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.8.0/24
135.84.215.0/24
135.136.128.0/19
153.52.160.0/19
178.211.157.0/24
185.234.115.0/24
207.189.0.0/19
Signature Algorithm: sha256WithRSAEncryption
82:4f:c4:13:f1:e2:ef:0b:0b:38:6d:87:a3:d2:b2:80:f2:49:
84:e6:bf:92:04:25:60:a7:4a:1b:30:71:1a:2c:c5:9f:83:a4:
aa:1c:07:c6:81:2f:90:16:e1:2d:d6:d3:7c:5e:31:84:30:7c:
df:d2:5e:2d:c1:bd:a3:de:0b:6f:52:c1:f5:c8:11:d3:d3:3d:
72:d5:75:89:ed:c0:17:5d:32:48:72:53:81:9e:c6:9d:31:d4:
7a:ec:59:0a:17:1d:f8:9a:0e:4f:44:11:99:5c:29:d0:0f:c2:
93:b6:b9:fe:62:55:cf:de:19:cb:1d:f4:8f:d0:59:d3:d2:13:
cf:5a:2e:e2:61:ac:a4:27:fe:6c:7f:78:26:21:6e:25:79:38:
6d:57:0b:8e:ea:1a:fe:5d:f7:79:5b:58:b7:30:fe:c2:93:9b:
cd:ff:cc:ee:1d:2f:e5:1e:82:2a:27:a4:2a:a2:18:d4:86:4a:
89:83:37:d0:c2:1c:f6:27:6e:5e:94:77:cd:8f:29:e1:8c:b6:
ee:bb:f0:e1:2f:c6:c8:72:1f:c1:48:17:ab:e9:8c:c0:6e:e8:
ac:10:6a:13:30:e6:14:8c:59:01:4e:82:20:19:d3:61:94:8c:
81:80:86:ab:c4:6e:1b:01:c5:c1:ea:19:25:f0:0d:3b:2c:fa:
a1:63:d9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 02:42:47 2026 by rpki-client