Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/vfeKSqmq5LUcZl4LB-EIYGiRkYw.roa
File: vfeKSqmq5LUcZl4LB-EIYGiRkYw.roa (raw, json)
Hash identifier: GoUAFs4BAgVbY3rRcRCUBg3w55R401BDamLqYJ0JGHc=
Subject key identifier: BD:F7:8A:4A:A9:AA:E4:B5:1C:66:5E:0B:07:E1:08:60:68:91:91:8C
Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial: 01A1105AC3346DBC4181E9591BECC38BD4BA
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/vfeKSqmq5LUcZl4LB-EIYGiRkYw.roa
Signing time: Tue 06 Oct 2026 08:35:46 +0000
ROA not before: Tue 06 Oct 2026 08:35:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207333
IP address blocks: 93.188.206.0/24 maxlen: 24
176.120.21.0/24 maxlen: 24
193.47.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:5a:c3:34:6d:bc:41:81:e9:59:1b:ec:c3:8b:d4:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
Validity
Not Before: Oct 6 08:35:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bdf78a4aa9aae4b51c665e0b07e108606891918c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:33:c4:9a:9d:78:55:da:5a:40:1c:87:11:28:
95:3e:48:18:64:2b:ff:5e:a8:5b:f2:1c:36:18:b6:
1b:23:22:e1:aa:7a:ba:81:9f:61:95:da:a5:ea:35:
2f:d7:ab:c8:ab:52:e8:9d:1d:29:0b:28:30:39:02:
67:08:db:8d:74:06:c4:2d:cf:03:6a:39:dd:d6:44:
3f:37:1d:f1:4b:88:74:0c:a8:90:a5:fc:38:b3:70:
45:8c:e6:04:2b:f4:ec:72:84:b4:c8:d3:57:56:e7:
f6:29:f5:31:85:00:2c:d1:59:76:45:df:cd:57:00:
15:01:03:86:29:39:2d:12:05:cf:63:3d:90:59:93:
61:71:52:ad:6d:63:04:d4:6c:ab:86:c9:1c:05:36:
8f:25:49:32:8e:9a:dc:95:6d:16:ee:9c:1a:17:27:
b3:13:e2:32:d2:b2:b9:f1:32:aa:5e:2a:38:b8:8c:
95:0a:85:80:3c:a7:eb:a6:b1:c1:77:e6:51:9f:90:
50:23:c1:1b:b8:23:b5:d9:01:13:8d:62:24:03:22:
6f:74:79:8f:1f:79:9d:87:d1:87:dc:68:6f:6e:b8:
b3:13:6f:10:f2:bd:ba:36:8a:79:14:57:d4:76:78:
48:24:31:b4:f6:bf:f0:03:e2:91:bf:05:7f:53:0f:
f5:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F7:8A:4A:A9:AA:E4:B5:1C:66:5E:0B:07:E1:08:60:68:91:91:8C
X509v3 Authority Key Identifier:
keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/vfeKSqmq5LUcZl4LB-EIYGiRkYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.188.206.0/24
176.120.21.0/24
193.47.43.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:18:3d:da:d8:3c:2a:8e:47:89:e0:25:f4:d9:36:b3:cc:d3:
14:59:68:94:c5:26:f2:3f:dd:d0:13:d1:23:e9:25:b2:b8:a7:
ef:0b:b0:47:21:53:2e:86:d1:f2:c3:26:12:ea:c6:9b:4a:21:
43:db:66:fb:d0:33:23:44:8e:14:ae:bf:a0:07:e2:58:0d:68:
3a:39:4f:71:b4:64:d0:6b:0c:5a:11:4c:f9:e9:14:e0:97:db:
e8:f6:05:5a:7a:9f:75:70:ed:1b:c5:2f:09:18:c7:36:14:a2:
29:76:ae:67:b5:85:33:03:18:19:09:6f:d6:67:0f:db:db:92:
fd:89:97:cc:82:09:16:b5:46:7c:ec:53:87:fd:6b:1f:7f:1a:
28:53:2d:b3:79:0a:a6:25:63:b0:fc:9a:18:8c:3b:44:fc:ab:
fc:50:15:37:b4:bb:97:3c:93:e5:b6:7d:13:eb:eb:87:d5:9e:
29:72:41:6b:2b:0e:37:8d:62:77:dc:9a:17:89:ed:c5:36:a1:
4f:72:2f:17:d3:af:2c:a9:85:23:93:e5:b3:1e:31:6a:20:4c:
d9:e5:4d:68:c6:81:87:1c:6a:4c:87:2b:7b:6c:a4:5c:34:97:
e9:b1:5c:2e:93:2d:a6:1e:59:de:77:14:0a:1a:6b:e6:69:d0:
5e:26:97:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 17:08:55 2026 by rpki-client