Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/VCYmnPezu0bKdclTt2jfJvLMqdk.roa
File: VCYmnPezu0bKdclTt2jfJvLMqdk.roa (raw, json)
Hash identifier: ItOjkToGtcTJhx/XLdt8cXEbEJ6Awk8u62ennNOOAbs=
Subject key identifier: 54:26:26:9C:F7:B3:BB:46:CA:75:C9:53:B7:68:DF:26:F2:CC:A9:D9
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01A1317DA9C2F438F3CB809A5059BB840778
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/VCYmnPezu0bKdclTt2jfJvLMqdk.roa
Signing time: Mon 12 Oct 2026 19:01:21 +0000
ROA not before: Mon 12 Oct 2026 19:01:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34470
IP address blocks: 45.135.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 02:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:7d:a9:c2:f4:38:f3:cb:80:9a:50:59:bb:84:07:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Oct 12 19:01:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5426269cf7b3bb46ca75c953b768df26f2cca9d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:39:7f:b6:25:c6:fb:07:46:cb:a1:8e:41:d6:
98:a1:38:70:fd:82:df:42:54:52:43:2d:39:1c:10:
da:43:57:cd:0a:16:d7:86:fe:e5:4e:16:fe:46:71:
af:32:89:6f:7f:fc:52:30:19:0f:b6:4b:96:6e:e8:
70:11:eb:5f:ad:d9:21:c6:af:21:e3:be:84:fd:ab:
e2:5d:dc:e6:a8:57:c0:68:fa:c1:fc:5b:e0:65:dc:
1f:56:42:46:23:4e:05:eb:e3:e9:1a:47:d0:1e:bc:
40:bf:65:ae:02:86:40:b4:83:45:25:41:8f:a4:75:
19:59:75:f7:ca:6b:88:23:de:40:29:00:eb:e1:36:
4c:47:ee:a8:dc:e3:6a:dc:ee:fe:fb:da:ce:7e:e2:
b1:57:44:f7:83:66:a8:6a:ab:82:e9:5e:f0:3e:bf:
51:b1:2e:1f:88:b3:0f:1c:5e:b1:54:f1:17:34:e5:
4b:fe:bd:79:a3:5e:16:f5:c7:ef:77:d2:4d:a6:84:
f5:d9:20:6b:89:c5:20:f7:62:c0:63:a0:83:a6:b0:
a6:d5:1b:30:b3:a2:c8:fe:ff:a8:22:8e:83:8a:77:
a2:89:1d:40:46:54:4c:3e:33:ec:7b:7c:a8:27:51:
ff:32:88:77:4c:4f:2d:dd:99:28:a5:04:6a:50:5c:
8e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:26:26:9C:F7:B3:BB:46:CA:75:C9:53:B7:68:DF:26:F2:CC:A9:D9
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/VCYmnPezu0bKdclTt2jfJvLMqdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.232.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:3f:76:59:69:f6:e1:38:a1:b2:dc:a2:ed:bc:da:d9:e6:ed:
b2:0f:e8:0b:b6:e2:c7:30:fe:f9:7b:10:8b:09:86:ee:8d:b9:
ce:13:23:ab:46:d8:7f:fb:57:8f:29:74:d9:3d:10:9e:fe:d6:
17:43:cf:8c:75:f5:76:e9:06:13:6e:c7:e8:58:51:3b:c4:97:
71:39:83:17:6c:af:08:24:95:a6:e7:2a:0a:5d:45:f6:98:22:
6b:a9:93:2f:04:8c:80:ba:20:8d:27:68:c1:dc:f3:f2:0d:59:
83:20:38:f1:a4:b7:5e:35:80:ae:99:25:49:35:ad:86:8c:6b:
88:8f:49:85:0a:d2:3a:58:6c:13:49:12:29:65:e5:19:81:fe:
a6:f4:a1:21:8a:0c:02:e8:1b:02:0a:0f:1c:95:fc:dd:21:36:
21:95:1e:2d:8f:b7:96:06:d7:3c:c7:3d:88:d0:75:2e:0c:cd:
3e:1a:27:06:23:be:89:5b:9d:1e:bc:13:f6:7e:21:27:bd:b1:
38:97:b2:67:0a:59:01:c8:ca:fa:15:e0:3a:7d:74:45:c6:66:
f2:6b:63:29:49:29:3a:93:29:e1:14:a8:9c:d0:4d:c2:2f:67:
bc:84:d1:48:d5:4d:18:5e:91:32:d7:c9:42:af:b6:92:49:b2:
69:4c:f9:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 07:12:12 2026 by rpki-client