Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/VDxXv_w0W6U3fKxfLxftlx6HpMM.roa
File: VDxXv_w0W6U3fKxfLxftlx6HpMM.roa (raw, json)
Hash identifier: WUymDNSngxC5WSDx7MR3UAkCZaIl6Eq2DUk2ccwnU30=
Subject key identifier: 54:3C:57:BF:FC:34:5B:A5:37:7C:AC:5F:2F:17:ED:97:1E:87:A4:C3
Certificate issuer: /CN=e61c07c951488f04cb3b0fd338af84d77e46bf52
Certificate serial: 019F374037A901FEE20A56F97D498DC557D9
Authority key identifier: E6:1C:07:C9:51:48:8F:04:CB:3B:0F:D3:38:AF:84:D7:7E:46:BF:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/VDxXv_w0W6U3fKxfLxftlx6HpMM.roa
Signing time: Mon 06 Jul 2026 11:46:23 +0000
ROA not before: Mon 06 Jul 2026 11:46:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 119.12.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 08:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:40:37:a9:01:fe:e2:0a:56:f9:7d:49:8d:c5:57:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e61c07c951488f04cb3b0fd338af84d77e46bf52
Validity
Not Before: Jul 6 11:46:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=543c57bffc345ba5377cac5f2f17ed971e87a4c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6b:1c:b6:ee:79:f5:f2:d3:9c:12:37:f6:b5:
cc:83:b2:5a:66:58:4c:e4:72:09:20:f6:5f:78:b1:
38:b7:bd:5c:44:98:9e:fb:0e:20:2b:71:e9:6b:be:
f5:9e:0b:fa:21:3c:73:b5:58:0e:33:37:0c:56:68:
91:64:bf:e3:49:77:64:ed:27:1e:c2:aa:19:cf:c9:
e3:af:43:d9:6a:2a:bb:79:a8:9b:ab:0c:7d:f5:a5:
38:3f:ca:e4:49:6f:46:4f:aa:27:6c:e5:9b:e7:c5:
d8:3c:4e:95:cd:ed:34:07:7b:81:db:23:e8:6b:b9:
59:7d:d1:ce:41:c5:f0:e6:c0:e7:d2:92:c1:6c:05:
4e:c3:c3:85:26:d9:02:dc:ff:97:f7:9c:03:df:bb:
83:09:52:fa:01:a7:d0:dd:a1:e5:b1:bd:14:c3:1e:
19:ae:1c:df:12:c5:f1:88:33:7e:52:f9:0f:f6:d5:
f1:6c:a3:f3:7f:d9:08:e2:38:32:0e:e9:03:0d:d8:
e2:a3:74:42:77:63:bf:bf:92:97:76:ca:99:c3:1d:
ca:a4:16:25:62:7e:22:37:26:11:ce:8e:12:cf:67:
09:30:3b:81:c2:ee:84:03:fb:07:3c:ca:eb:9b:2d:
5d:e5:7f:37:57:8f:d4:8d:4d:78:95:91:18:02:0a:
d9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:3C:57:BF:FC:34:5B:A5:37:7C:AC:5F:2F:17:ED:97:1E:87:A4:C3
X509v3 Authority Key Identifier:
keyid:E6:1C:07:C9:51:48:8F:04:CB:3B:0F:D3:38:AF:84:D7:7E:46:BF:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hwHyVFIjwTLOw_TOK-E135Gv1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/VDxXv_w0W6U3fKxfLxftlx6HpMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/2dba5c-9a90-4052-a1eb-6a8477cb6c2a/1/5hwHyVFIjwTLOw_TOK-E135Gv1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.12.18.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:56:d3:39:6a:1e:30:fb:90:2f:15:43:9e:4e:65:2a:d3:75:
1d:26:b6:75:2a:5b:cd:5c:d9:9a:09:88:cf:2f:dd:75:99:e3:
9a:4c:06:7f:de:20:45:c1:b5:b7:bb:d9:6e:f3:dd:4f:1b:03:
bb:ca:95:01:af:88:a7:4b:45:f1:77:89:92:33:57:3c:eb:75:
81:3f:e4:2e:b3:05:68:1e:c1:43:21:5b:c5:55:63:da:3d:f9:
af:0c:5b:77:f4:58:9c:d8:30:18:e0:ba:7d:7f:a4:fb:0c:4f:
ee:3f:6b:ee:9f:b6:cd:bd:72:3a:6c:ce:d4:04:04:07:e9:06:
74:f2:29:f9:88:a9:81:55:8a:55:2c:6a:91:7b:38:7b:31:c2:
1b:3d:ed:ba:f6:58:39:17:ac:01:8d:9a:b1:1c:f1:ec:1b:01:
2b:61:9b:e2:44:44:46:36:9e:05:3d:75:cc:f1:4d:17:0f:3c:
8b:2d:ee:9c:6d:04:f2:9b:1d:7d:54:b5:e7:c6:3f:68:3f:d2:
cb:00:f6:7a:c6:c9:af:73:d0:49:2a:ed:db:90:f1:11:cb:86:
0e:a1:82:7c:29:15:81:5b:cf:50:bc:f4:b4:bf:6f:64:7f:42:
5f:ab:90:25:10:c5:a6:01:68:b5:af:dd:95:7d:7e:c4:93:5d:
a8:4a:bc:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:33:37 2026 by rpki-client