Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/VDCjjbSnGAlEYdJeGqd2JvFflV4.roa
File: VDCjjbSnGAlEYdJeGqd2JvFflV4.roa (raw, json)
Hash identifier: Gq6lggs3jzm9aKnZZz4YSDucUlaGVv6RQ2ir413KRYk=
Subject key identifier: 54:30:A3:8D:B4:A7:18:09:44:61:D2:5E:1A:A7:76:26:F1:5F:95:5E
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019FC6F642DF3B83244C535E29C965A95A6F
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/VDCjjbSnGAlEYdJeGqd2JvFflV4.roa
Signing time: Mon 03 Aug 2026 09:30:55 +0000
ROA not before: Mon 03 Aug 2026 09:30:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49981
IP address blocks: 87.232.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:f6:42:df:3b:83:24:4c:53:5e:29:c9:65:a9:5a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Aug 3 09:30:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5430a38db4a718094461d25e1aa77626f15f955e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3a:2a:80:c9:24:64:1c:a2:18:ba:95:6a:d1:
13:55:14:0c:cb:3d:96:8d:e8:a5:c9:fb:c3:86:85:
6a:8c:ff:a0:73:4b:1e:db:f8:30:3c:6f:d0:52:44:
3a:81:d1:30:f5:30:ec:3c:2d:20:7e:3c:38:4f:4c:
14:28:e8:1e:e7:e9:9f:36:c3:b0:76:cb:eb:f3:39:
25:0a:93:06:d3:e8:6a:13:a2:40:21:a5:28:73:22:
fb:10:a2:50:66:30:ea:35:83:af:1e:dc:71:69:36:
e4:e0:78:b5:1c:37:c3:78:a8:0a:a2:b7:08:50:70:
a5:b1:92:cb:e0:13:5d:10:bc:ef:e0:72:a1:9e:01:
23:04:04:9b:23:8f:60:d4:3f:c5:04:ca:6e:f8:c3:
d3:70:89:20:e3:86:f3:f9:a5:8f:d3:4b:40:d7:de:
48:d9:d3:8b:75:2a:ad:86:a8:ff:53:8d:61:57:5f:
96:30:21:cf:00:bf:2c:f9:bc:80:5e:e5:08:3b:20:
94:c4:33:56:37:3c:41:88:5c:10:82:70:5c:13:22:
65:49:2b:51:55:23:c0:cb:f7:d6:ca:10:57:b4:89:
ac:64:9d:0a:75:03:cb:af:ed:b7:0e:e3:d0:1c:f5:
bc:fb:f1:56:b6:c5:de:92:67:09:67:c5:79:d8:4d:
14:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:30:A3:8D:B4:A7:18:09:44:61:D2:5E:1A:A7:76:26:F1:5F:95:5E
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/VDCjjbSnGAlEYdJeGqd2JvFflV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.85.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:61:bd:26:74:32:f6:e8:d0:0c:f6:d1:2d:5b:68:68:12:38:
0a:be:f1:de:13:b9:4e:be:83:c5:de:0e:89:75:8b:55:2c:c3:
10:ba:59:fd:68:94:bf:67:7d:bd:22:18:ac:d8:88:ca:50:d1:
59:a3:9d:72:ae:00:de:a3:21:0b:eb:c0:98:1f:fc:f7:b2:29:
ad:55:d5:bf:60:80:bc:b8:cf:84:ca:60:84:51:1b:2c:00:c8:
fd:19:a3:1d:4c:8f:b9:99:1a:4c:65:64:45:c5:98:95:a0:0b:
c1:09:e5:c9:6f:c0:a9:81:92:8e:d4:48:39:1f:b7:fa:65:00:
50:41:9e:33:46:29:8c:e4:7e:8c:79:eb:19:f7:f3:67:a9:5e:
ee:90:9f:82:14:a6:e2:79:92:96:a3:98:5d:ee:ce:eb:e8:d8:
4a:19:b0:d0:cc:5e:fd:0a:1d:92:6f:6e:30:0a:a7:57:1a:1a:
a3:d9:d2:cd:90:53:f7:42:46:ef:11:b0:5f:8c:0e:38:2f:7d:
d3:60:c6:09:ed:35:2a:69:18:90:2c:5a:9a:b0:13:59:49:0b:
83:b4:97:13:83:9b:e7:3f:82:c2:2a:15:81:b5:93:22:6f:0c:
10:56:f7:22:44:a2:4f:91:f8:63:ff:1e:6b:13:39:c1:34:28:
a1:d6:8e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 21:11:51 2026 by rpki-client