Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/V_tPVXkmNH-9PJavVnocYPrTQTA.roa
File: V_tPVXkmNH-9PJavVnocYPrTQTA.roa (raw, json)
Hash identifier: AGRfFdJJ1C/dURKRvBBJILwUMj7XLrg7AaRP8T3ZsSM=
Subject key identifier: 57:FB:4F:55:79:26:34:7F:BD:3C:96:AF:56:7A:1C:60:FA:D3:41:30
Certificate issuer: /CN=9993fe77f63bee90888fcde1a125adfe6535d816
Certificate serial: 019FFAC5FF7059FAB6EE4A68137CC6C58C86
Authority key identifier: 99:93:FE:77:F6:3B:EE:90:88:8F:CD:E1:A1:25:AD:FE:65:35:D8:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/V_tPVXkmNH-9PJavVnocYPrTQTA.roa
Signing time: Thu 13 Aug 2026 10:58:27 +0000
ROA not before: Thu 13 Aug 2026 10:58:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212420
IP address blocks: 31.3.220.0/24 maxlen: 24
188.212.36.0/24 maxlen: 24
193.162.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fa:c5:ff:70:59:fa:b6:ee:4a:68:13:7c:c6:c5:8c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9993fe77f63bee90888fcde1a125adfe6535d816
Validity
Not Before: Aug 13 10:58:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57fb4f557926347fbd3c96af567a1c60fad34130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:1f:bc:90:4b:e4:53:d1:4f:64:a9:4d:a6:a9:
67:d4:7a:2a:8b:5b:98:ee:06:8e:53:ed:77:60:05:
73:b9:06:81:e1:38:78:03:1e:05:5a:df:a9:be:e8:
0c:37:ab:fa:1c:44:7b:53:64:26:7e:69:8c:b6:83:
46:45:c9:3b:af:88:53:1b:21:df:94:60:15:b0:53:
06:32:d3:32:cd:cb:91:3d:16:5c:75:65:77:27:a7:
c4:7a:58:cd:92:ed:d1:69:76:06:e6:49:47:65:c4:
b8:75:e2:52:22:b5:94:00:6c:3c:88:59:9a:06:e2:
17:cd:1c:ee:9b:25:26:00:58:7f:f6:4f:8b:d2:a3:
90:76:44:86:54:3c:02:84:dc:e8:dd:00:a7:d8:fd:
c3:28:2b:c6:99:a7:a9:08:d9:60:4a:37:86:9c:16:
0a:86:80:64:8e:80:68:a0:85:2f:97:24:6e:f2:8d:
2c:b9:f6:c7:ad:27:03:95:ad:a1:df:b7:0e:c1:df:
1d:41:ef:90:36:ad:c5:cb:5f:21:98:72:29:f1:d6:
42:b4:5b:9e:c7:83:1b:27:b4:82:81:42:aa:9e:d5:
75:b6:3e:1e:54:af:f4:0d:a8:62:81:ec:5d:8a:8d:
71:b3:07:35:24:48:7c:0a:b4:5c:75:0a:a8:34:08:
7f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:FB:4F:55:79:26:34:7F:BD:3C:96:AF:56:7A:1C:60:FA:D3:41:30
X509v3 Authority Key Identifier:
keyid:99:93:FE:77:F6:3B:EE:90:88:8F:CD:E1:A1:25:AD:FE:65:35:D8:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/V_tPVXkmNH-9PJavVnocYPrTQTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.220.0/24
188.212.36.0/24
193.162.14.0/24
Signature Algorithm: sha256WithRSAEncryption
83:43:69:1d:2f:fb:cd:01:22:6b:ae:fd:88:9e:6c:92:b7:09:
cf:08:90:4b:6f:55:86:b3:b0:5b:da:3f:32:9e:1e:25:94:7f:
45:17:d6:52:fe:a2:2b:93:17:7b:9d:ba:4f:00:70:12:fd:ef:
dd:87:f3:e1:ed:c9:d2:4f:3f:6e:22:06:45:fb:32:52:22:78:
35:2f:98:33:bc:25:14:3f:2c:dc:6b:cb:b0:51:2a:b3:16:25:
da:51:c1:ed:3b:b8:76:0e:4c:63:ee:85:78:06:78:d0:0a:c2:
ce:ae:cb:f3:ed:62:f8:25:bc:d1:78:f0:5d:9c:87:de:48:34:
d8:5f:00:55:47:0b:01:7c:17:63:f3:09:de:cd:3e:7c:c0:54:
70:f2:09:d9:1b:d1:2e:d5:f5:bf:f2:fd:57:6c:27:e1:9e:bf:
4a:ae:93:f6:37:30:43:b6:96:12:cd:24:26:a8:33:cb:72:9f:
ea:6e:57:87:26:43:db:47:55:3a:f2:09:42:06:9b:8a:88:18:
7d:2a:1a:bc:0e:51:35:9b:5e:10:49:e2:17:65:a3:2c:92:96:
3c:1c:49:ed:dd:11:8a:b7:97:a1:8d:86:35:84:4c:92:5a:60:
42:fc:a7:90:9a:0b:61:74:ca:1f:40:0f:90:37:bb:08:2b:e2:
63:15:ae:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:37:00 2026 by rpki-client