Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/VuDaNQQyX4M3Zzv_NUfm_z1bP40.roa
File: VuDaNQQyX4M3Zzv_NUfm_z1bP40.roa (raw, json)
Hash identifier: QeHd8wUNciY03pcdxyX6N8nbC5Ds12SEf3AH2aDu73g=
Subject key identifier: 56:E0:DA:35:04:32:5F:83:37:67:3B:FF:35:47:E6:FF:3D:5B:3F:8D
Certificate issuer: /CN=a953f1b8e2965fd0387810a2f62cf714816d1497
Certificate serial: 01A010218752D8461875DDF5C7668CDE191F
Authority key identifier: A9:53:F1:B8:E2:96:5F:D0:38:78:10:A2:F6:2C:F7:14:81:6D:14:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/VuDaNQQyX4M3Zzv_NUfm_z1bP40.roa
Signing time: Mon 17 Aug 2026 14:30:27 +0000
ROA not before: Mon 17 Aug 2026 14:30:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29534
IP address blocks: 77.88.237.0/24 maxlen: 24
77.88.238.0/24 maxlen: 24
77.88.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 14:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:10:21:87:52:d8:46:18:75:dd:f5:c7:66:8c:de:19:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a953f1b8e2965fd0387810a2f62cf714816d1497
Validity
Not Before: Aug 17 14:30:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56e0da3504325f8337673bff3547e6ff3d5b3f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:af:0e:0b:ce:65:af:ae:61:0a:53:17:33:3d:
3d:5d:cd:9e:98:69:0c:4c:55:ee:6b:b4:de:84:90:
ce:55:26:6b:36:ff:58:9c:66:27:b2:68:c6:5b:cd:
6c:86:75:3c:6d:cd:23:62:71:0f:c7:41:3c:db:76:
46:a6:84:3b:c8:20:36:6c:c7:2f:8b:01:75:93:57:
3b:ca:7a:2a:63:ea:84:d1:8b:35:08:e1:be:fc:20:
0f:c2:a4:7d:e7:7f:95:55:91:cc:bf:fe:07:7f:62:
24:ca:70:b9:9e:ba:92:83:b2:80:ac:bc:1f:aa:08:
3c:33:14:ae:da:81:c0:8c:f3:7a:b0:33:03:b1:78:
e3:60:c8:35:8e:e9:08:cf:9b:4d:f0:80:c3:b7:db:
df:8e:12:84:dc:e3:62:da:e5:54:99:4e:d6:09:f6:
42:e2:cc:69:2c:28:4a:9e:60:25:21:d8:66:3d:6e:
38:75:65:df:eb:cc:13:48:a7:2d:1b:de:0b:dd:44:
9d:9e:1c:98:8c:99:02:50:92:f8:01:b1:a9:ea:85:
cc:ca:05:4e:73:76:84:0e:3f:d5:53:d1:43:51:6a:
80:b8:2f:68:84:4b:c9:cd:1a:43:53:00:c8:a8:dc:
6d:b1:b2:85:16:fe:2f:f6:cc:73:9b:c2:22:5a:a4:
9e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:E0:DA:35:04:32:5F:83:37:67:3B:FF:35:47:E6:FF:3D:5B:3F:8D
X509v3 Authority Key Identifier:
keyid:A9:53:F1:B8:E2:96:5F:D0:38:78:10:A2:F6:2C:F7:14:81:6D:14:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qVPxuOKWX9A4eBCi9iz3FIFtFJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/VuDaNQQyX4M3Zzv_NUfm_z1bP40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4e3493-ce03-4d94-bdfd-ae8633c17b87/1/qVPxuOKWX9A4eBCi9iz3FIFtFJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.88.237.0-77.88.239.255
Signature Algorithm: sha256WithRSAEncryption
2e:e4:52:7c:43:84:65:7b:81:12:7b:a3:93:fa:30:67:ea:49:
15:c3:df:f1:13:ce:d6:89:e3:86:8c:03:0f:49:06:c0:28:25:
99:15:f0:58:fb:09:73:3a:6f:cc:34:ad:28:86:91:9d:c2:5a:
ce:c9:cb:fd:b7:db:7d:80:e1:99:50:70:76:81:9e:4e:a7:41:
3b:d1:2b:c3:39:b6:55:d9:32:78:44:22:c0:95:6c:6e:12:0d:
5f:7b:17:8b:07:73:61:11:db:5d:f0:d2:b6:68:77:6e:03:49:
55:2c:c4:e6:f3:c2:b9:4b:d1:3d:37:45:e6:ff:b2:df:50:41:
26:dd:01:46:35:83:81:5b:76:1a:d5:e0:39:7f:ab:0d:2f:ca:
de:69:69:a7:7c:67:c8:4b:9c:d1:1a:25:b5:58:ec:53:a4:e6:
9a:bd:10:db:f7:f7:15:93:b6:21:3d:da:74:5d:1c:61:c8:1e:
a1:e3:a9:f4:09:29:b3:3b:30:6f:6d:af:9e:76:52:2a:0a:01:
09:c0:09:b7:fb:11:5d:b0:a9:1c:24:4f:d8:66:a7:30:aa:ff:
29:8c:1a:01:63:97:f6:8e:25:25:36:5a:87:e5:0c:75:aa:b4:
31:fb:9b:39:7a:b6:5b:e2:57:a0:28:99:93:41:5c:fe:dc:ae:
9c:eb:ab:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 23:32:42 2026 by rpki-client