Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/VXmMtF6e8naCDkkVy9urU89n-NY.roa
File: VXmMtF6e8naCDkkVy9urU89n-NY.roa (raw, json)
Hash identifier: juYKLa/s1uw+DclgQbCMDEJHW+XrxFiEGexqYa7I0tg=
Subject key identifier: 55:79:8C:B4:5E:9E:F2:76:82:0E:49:15:CB:DB:AB:53:CF:67:F8:D6
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A03DD9A362AAAC27B19C73C37F6C7D35F2
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/VXmMtF6e8naCDkkVy9urU89n-NY.roa
Signing time: Wed 26 Aug 2026 11:34:28 +0000
ROA not before: Wed 26 Aug 2026 11:34:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218858
IP address blocks: 45.128.24.0/24 maxlen: 24
45.153.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:d9:a3:62:aa:ac:27:b1:9c:73:c3:7f:6c:7d:35:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 26 11:34:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55798cb45e9ef276820e4915cbdbab53cf67f8d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:83:9e:40:96:4b:27:6f:4e:e9:8f:10:7f:a0:
6e:d7:1b:52:96:50:22:ed:13:c6:cd:a3:3c:24:26:
7d:87:5c:45:bb:f7:13:af:4c:11:8c:5d:b3:ea:70:
51:fd:6d:dc:c0:a4:43:d7:1e:b0:f1:4c:42:d9:c9:
c9:32:d2:c5:cb:0f:d5:56:c0:b0:5e:2f:af:21:e8:
cc:98:04:21:09:2a:02:1c:fd:73:ba:31:48:8c:b3:
4d:34:5d:4d:94:1f:86:bb:36:7f:e8:64:fc:89:09:
24:85:9b:d9:2f:52:66:43:99:61:41:59:b0:62:72:
dc:95:2c:86:3f:5c:d3:41:cd:3b:bf:c3:80:64:f4:
82:34:63:e5:5e:a3:a9:61:4f:a3:e1:fd:1c:67:b8:
f5:9d:95:52:94:5f:43:6e:91:1c:a3:53:4a:8b:d8:
01:77:bb:e2:e1:b2:99:a0:a2:b0:29:8f:02:0c:9b:
0b:38:e1:32:74:29:01:77:0f:46:e6:7c:21:fa:70:
17:91:b2:5f:47:e1:37:e4:9c:ef:9d:2f:20:08:f6:
3e:19:a1:17:6e:ab:83:10:d8:94:51:1c:a3:ee:75:
3a:fb:5b:74:6f:2c:3a:b1:c4:e4:47:f7:ac:f9:8e:
0f:50:6e:2f:1e:33:11:89:1d:86:c2:50:c6:41:68:
12:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:79:8C:B4:5E:9E:F2:76:82:0E:49:15:CB:DB:AB:53:CF:67:F8:D6
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/VXmMtF6e8naCDkkVy9urU89n-NY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.24.0/24
45.153.23.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:4a:05:79:d8:ee:1b:f0:87:38:52:d5:34:80:07:24:70:73:
43:74:99:d0:d5:88:4a:cd:37:bb:7c:45:e6:e0:37:e8:73:57:
ea:2d:4f:7d:31:22:33:8d:af:0e:68:da:e7:c0:38:24:ee:40:
f9:c0:eb:f9:57:18:3e:89:f7:93:33:22:22:ec:a0:9c:6b:54:
97:f3:4b:ec:fa:8b:f0:d2:66:68:30:75:35:eb:11:b7:d6:63:
39:10:9b:12:52:f4:72:50:14:1d:50:23:b0:77:e3:3a:b5:f7:
95:09:ea:66:36:a5:06:d4:42:56:ef:62:57:9d:5f:4b:c4:ef:
7b:48:1a:63:65:cc:8d:b5:c1:62:94:11:c4:2e:d0:ef:39:d0:
77:1f:a5:8f:e7:0c:68:00:08:f5:ab:75:41:48:cd:61:44:45:
cf:87:d1:45:b8:20:7a:db:db:45:f6:ca:37:97:fd:0d:fd:a3:
54:76:98:50:90:ea:eb:ac:13:1a:e1:62:23:c6:c9:2c:26:e1:
f5:b7:ff:35:50:8c:20:76:d7:1c:36:58:9e:f1:86:65:ff:83:
ea:55:42:57:f8:f1:e6:b9:d1:2b:71:37:72:ad:f9:7a:5e:a0:
ba:1c:0b:41:cb:a9:a4:22:47:d6:bd:29:85:f5:c1:0d:f0:6a:
f4:11:b5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:46:05 2026 by rpki-client