Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/VIfmPPLjN-OmcF4uzplrecEKh5w.roa
File: VIfmPPLjN-OmcF4uzplrecEKh5w.roa (raw, json)
Hash identifier: jegk/2MpfQjcd43iJx0vjo0gb6FWvGLinUtSIyhj/4Y=
Subject key identifier: 54:87:E6:3C:F2:E3:37:E3:A6:70:5E:2E:CE:99:6B:79:C1:0A:87:9C
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019E6B2BD645C0A73DC898721DF4BF325C74
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/VIfmPPLjN-OmcF4uzplrecEKh5w.roa
Signing time: Wed 27 May 2026 20:41:35 +0000
ROA not before: Wed 27 May 2026 20:41:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213476
IP address blocks: 193.168.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jun 2026 10:52:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6b:2b:d6:45:c0:a7:3d:c8:98:72:1d:f4:bf:32:5c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: May 27 20:41:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5487e63cf2e337e3a6705e2ece996b79c10a879c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b9:27:bf:e8:90:a0:17:f3:b6:a7:6f:39:6a:
c8:28:7c:d0:19:e9:a6:7c:4e:65:22:b8:b0:e1:a9:
5a:a5:9c:77:ec:52:38:94:a5:56:69:63:51:d9:3e:
3f:d9:55:e9:3a:e1:98:4e:b4:ff:ff:e3:86:96:b5:
56:3e:99:30:c0:ad:a5:14:ac:a2:7c:77:d4:16:ba:
a5:f2:07:15:b4:e8:71:8d:ae:5f:69:ef:1a:01:ff:
4c:af:0c:ce:eb:ad:30:80:25:04:52:4d:9a:05:10:
13:16:ce:db:05:33:b5:26:74:61:f4:63:d5:aa:74:
8b:87:98:71:00:f9:f5:66:5d:59:4b:dd:6c:04:eb:
c7:38:fb:1e:99:51:89:73:fe:7c:c7:59:b7:37:ce:
e1:58:49:6c:8c:0e:21:fe:12:9f:dd:f8:8f:6f:79:
22:27:1e:3a:ce:d1:5d:7d:13:5b:98:74:f4:a5:fa:
35:98:7d:2a:1e:6c:52:5a:f0:a3:d3:58:aa:a5:4e:
6a:7d:c7:0a:cf:73:18:43:70:ba:3d:4e:95:55:d9:
11:a3:43:d2:fa:82:c3:17:51:0c:a6:a6:12:6f:c3:
11:a5:19:f4:38:89:b3:96:e2:53:49:dc:4d:8e:de:
7d:1b:df:46:77:ad:3e:dc:b8:4d:5b:ce:39:76:1b:
bc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:87:E6:3C:F2:E3:37:E3:A6:70:5E:2E:CE:99:6B:79:C1:0A:87:9C
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/VIfmPPLjN-OmcF4uzplrecEKh5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.208.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:b9:e4:46:ba:41:b8:38:02:2f:a6:43:ee:e3:44:80:a7:c7:
93:22:f5:7d:80:e5:3e:f3:51:90:55:08:a1:eb:d9:57:f2:5b:
37:ad:6f:3f:34:3b:30:ac:85:1c:05:50:1b:6b:98:41:1d:59:
f8:cf:7d:d2:76:41:9b:0f:44:8e:0b:fc:63:df:cc:5c:36:b1:
07:fa:38:ed:e2:2f:ba:67:63:f9:4b:57:4c:9c:e0:23:a9:a7:
38:f0:94:8a:84:e6:ad:04:fe:49:e5:57:90:c5:a0:a5:cf:d4:
c6:62:6e:bf:35:41:9c:36:2f:85:be:73:06:26:bf:37:c5:28:
a6:8e:17:9a:af:ed:fe:69:c5:69:e7:28:01:6e:b7:13:b2:c8:
73:f2:80:91:ed:de:3b:17:b3:e6:3d:c5:73:73:bb:6c:46:0c:
d5:5f:17:dd:5d:26:1d:a3:52:c0:b2:19:6e:cc:68:e5:41:2f:
22:3c:f4:de:bf:2a:e7:b8:e3:b6:61:84:a2:ba:fb:3a:ca:3f:
d7:b2:63:78:5e:b2:b1:0b:44:f6:02:35:e5:f8:bf:3f:46:6c:
a9:51:9e:6c:4f:0e:64:bb:97:85:2c:c6:6f:d2:0b:df:9b:23:
81:52:96:6e:ea:26:05:f0:c9:a4:6f:70:df:26:00:fc:ee:75:
d0:dc:42:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 20:34:29 2026 by rpki-client