Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/vdPtpOrNN7h59ChK5a3Lpf00UKQ.roa
File: vdPtpOrNN7h59ChK5a3Lpf00UKQ.roa (raw, json)
Hash identifier: jgsTd2Vc2MNyAqIOxoKWL3hrHIsls5QDB4X8F9ZmBUM=
Subject key identifier: BD:D3:ED:A4:EA:CD:37:B8:79:F4:28:4A:E5:AD:CB:A5:FD:34:50:A4
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019CE7157873D02F5C61C8B800C41CA99984
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/vdPtpOrNN7h59ChK5a3Lpf00UKQ.roa
Signing time: Fri 13 Mar 2026 12:04:29 +0000
ROA not before: Fri 13 Mar 2026 12:04:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201131
IP address blocks: 5.180.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Mar 2026 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:15:78:73:d0:2f:5c:61:c8:b8:00:c4:1c:a9:99:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Mar 13 12:04:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bdd3eda4eacd37b879f4284ae5adcba5fd3450a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:74:08:59:34:e9:13:17:3b:dd:6a:b8:b7:0f:
34:63:a8:d7:8c:ba:47:d0:03:ad:56:c3:e3:29:46:
ea:16:b9:77:a3:c0:2f:bb:79:92:0e:85:7a:5f:6d:
12:07:7c:5f:ed:89:39:09:b1:d3:0f:23:1c:ad:09:
a2:20:ea:dc:2a:38:5d:01:0f:4e:01:9f:41:f4:71:
42:12:5d:ef:a7:03:72:e5:86:c7:42:ab:14:d0:31:
9f:14:bc:fe:43:32:16:23:2d:99:65:f1:a4:8e:d5:
d8:9e:4d:92:48:45:32:d9:c9:17:84:ee:06:4f:f9:
75:ed:7f:6f:0f:18:4c:26:5b:81:6d:38:df:1c:a3:
b3:51:20:87:f9:a1:a3:bd:07:d8:af:1e:85:f7:61:
3a:20:1c:23:f0:9b:5b:cf:59:8d:b5:8d:f0:98:7f:
d5:c4:1e:af:90:e7:2e:9c:27:bc:4c:79:ca:51:fe:
8b:b3:c6:22:92:51:86:88:c9:a7:95:2d:b8:79:c1:
79:c2:ff:f9:15:d0:23:0d:27:67:2f:29:35:e6:79:
9a:6d:6b:11:b1:bc:fd:6c:37:ed:d2:7d:0e:d1:d6:
12:41:50:03:51:52:36:d4:a3:0e:21:07:e1:36:d3:
b3:7d:7b:5f:17:e5:52:28:8d:f4:a4:7e:81:e2:6e:
61:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D3:ED:A4:EA:CD:37:B8:79:F4:28:4A:E5:AD:CB:A5:FD:34:50:A4
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/vdPtpOrNN7h59ChK5a3Lpf00UKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.33.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:3a:7c:15:38:58:3e:5c:b8:f2:da:8c:46:b0:ed:95:71:e1:
87:89:cf:f3:35:c0:66:62:33:08:ab:4f:69:cf:24:e5:dd:0f:
c5:4e:8c:8a:cc:04:dc:87:cc:2a:26:3b:75:0d:f4:4f:ae:60:
ae:18:47:05:e6:62:70:b7:1b:ac:b7:ad:16:b4:25:b9:bc:3b:
57:3c:eb:0d:3b:38:2d:7c:10:86:1d:b5:23:0d:fc:9f:92:c0:
ba:32:fa:f7:44:1c:c4:ea:15:b9:72:97:49:c1:8f:4e:d4:94:
3c:e0:3a:c6:5e:d5:fb:3e:4f:14:c7:0e:a8:a6:19:5d:57:76:
d5:73:12:cb:79:3c:17:60:14:74:f6:da:c5:f3:00:a2:a3:6b:
c1:c0:70:ac:05:68:59:aa:8c:d5:de:2f:ff:08:f8:a6:7b:7f:
8f:c5:c7:8b:73:8c:bb:9e:14:73:c3:b6:bd:3c:86:79:44:d1:
d9:f8:f0:61:c2:0e:8c:89:07:13:c8:f4:a4:5b:ff:76:d0:4d:
37:bc:26:52:65:ab:1c:b1:bc:90:e6:79:23:c5:76:24:57:0d:
58:88:99:af:15:4e:74:f7:0f:6a:89:c0:c6:67:28:72:1b:08:
d3:70:a0:e3:5b:e5:16:18:d8:39:37:e3:b5:4a:d1:f8:71:93:
50:7a:68:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 08:30:44 2026 by rpki-client