Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/adb312-1fb4-41e9-b2e7-b3e302ec425b/1/Vkjih5C05UY92yFTp_v40NcGbkA.roa
File: Vkjih5C05UY92yFTp_v40NcGbkA.roa (raw, json)
Hash identifier: H1iYfr2VKIfWKsCR9clUwzCDhJAglri38xDMR8ojPmc=
Subject key identifier: 56:48:E2:87:90:B4:E5:46:3D:DB:21:53:A7:FB:F8:D0:D7:06:6E:40
Certificate issuer: /CN=9f1a0e261cf6f4a86dca97f12ce36c76662122ac
Certificate serial: 01A11067953190B86E22639C3FEAFCEB6474
Authority key identifier: 9F:1A:0E:26:1C:F6:F4:A8:6D:CA:97:F1:2C:E3:6C:76:66:21:22:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxoOJhz29KhtypfxLONsdmYhIqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/adb312-1fb4-41e9-b2e7-b3e302ec425b/1/Vkjih5C05UY92yFTp_v40NcGbkA.roa
Signing time: Tue 06 Oct 2026 08:49:46 +0000
ROA not before: Tue 06 Oct 2026 08:49:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35258
IP address blocks: 37.72.105.0/24 maxlen: 24
2001:34c1::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/adb312-1fb4-41e9-b2e7-b3e302ec425b/1/nxoOJhz29KhtypfxLONsdmYhIqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/adb312-1fb4-41e9-b2e7-b3e302ec425b/1/nxoOJhz29KhtypfxLONsdmYhIqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxoOJhz29KhtypfxLONsdmYhIqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 01:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:67:95:31:90:b8:6e:22:63:9c:3f:ea:fc:eb:64:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1a0e261cf6f4a86dca97f12ce36c76662122ac
Validity
Not Before: Oct 6 08:49:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5648e28790b4e5463ddb2153a7fbf8d0d7066e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f2:bc:f8:c3:6a:ce:d0:23:97:5f:98:66:1f:
f9:43:c5:2c:28:6a:f0:5a:dc:b7:99:30:a4:f3:74:
b2:16:96:ee:9f:e3:97:5e:eb:eb:be:06:79:7f:f1:
5b:bd:53:07:28:3f:ca:27:79:f4:48:f7:77:e4:ba:
8b:b0:18:f8:88:bc:15:f2:35:cb:c8:92:72:f8:ca:
fe:2b:34:f2:c5:e7:35:3a:80:49:f2:b5:6e:51:e7:
09:cf:77:5c:3d:4c:7d:bc:f4:e5:00:74:a4:17:1f:
14:1c:cd:7d:bb:12:5c:0c:07:40:a4:45:bc:51:aa:
7a:ee:9e:e2:1e:56:f2:77:be:e9:df:37:91:b6:c4:
7b:cb:04:5d:b3:fc:9b:a1:29:e9:00:3b:9a:fe:18:
d8:1e:f8:f2:d4:3d:d2:6c:9a:75:13:bb:d4:f7:f9:
a7:59:6a:42:55:bd:72:1f:5d:11:22:80:9c:f3:23:
d0:a1:81:b1:ff:31:75:3f:38:cb:17:15:14:50:a6:
fb:18:ed:67:dc:9a:9f:ec:fa:ad:ad:4b:8d:50:ca:
5b:3d:1e:6e:bc:8a:ee:19:eb:c6:92:45:e1:bc:94:
ba:06:12:f4:91:38:cd:61:38:54:57:5d:3c:c5:73:
8b:70:6a:d8:45:fb:d0:e9:4a:35:01:d6:11:0a:9b:
61:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:48:E2:87:90:B4:E5:46:3D:DB:21:53:A7:FB:F8:D0:D7:06:6E:40
X509v3 Authority Key Identifier:
keyid:9F:1A:0E:26:1C:F6:F4:A8:6D:CA:97:F1:2C:E3:6C:76:66:21:22:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxoOJhz29KhtypfxLONsdmYhIqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/adb312-1fb4-41e9-b2e7-b3e302ec425b/1/Vkjih5C05UY92yFTp_v40NcGbkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/adb312-1fb4-41e9-b2e7-b3e302ec425b/1/nxoOJhz29KhtypfxLONsdmYhIqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.72.105.0/24
IPv6:
2001:34c1::/33
Signature Algorithm: sha256WithRSAEncryption
0c:09:2a:d1:57:2c:33:18:e6:70:b3:9b:f5:4e:4b:2c:13:00:
49:b2:16:2e:aa:84:fa:bf:4c:7e:81:f1:9c:01:a0:a0:f9:f1:
66:3a:3d:79:b7:14:74:59:a6:e9:5f:bb:56:5f:d6:5d:32:8c:
33:d5:67:7d:7d:57:14:ce:21:e2:de:22:fc:7f:01:7b:b4:bd:
10:25:23:61:7a:c7:fe:65:db:bc:0b:cc:f6:c3:f0:31:7c:6e:
53:25:c5:51:4b:0d:f9:f3:eb:ec:ca:b5:4a:8b:2c:b6:d6:68:
62:1f:1f:7d:9b:fc:8e:9c:2d:cf:43:4c:d4:75:38:c1:71:33:
dd:ee:e9:76:6f:6d:71:91:6c:60:18:98:8e:2b:e2:6d:4a:43:
63:5d:11:1c:f3:8d:63:36:02:1f:ec:f4:24:9d:c3:8d:45:49:
a3:e4:52:90:b6:dd:ea:d4:40:b5:6c:ea:9a:b7:19:e1:c9:cd:
91:94:b3:4f:03:46:7d:e9:c0:42:b7:88:19:8e:65:26:0c:7f:
f1:a6:16:dc:ca:cf:84:f9:90:54:fb:98:3d:01:17:9a:23:0e:
ca:25:e5:59:8a:3d:ac:68:99:d9:c4:f6:19:ee:9f:7b:a4:a0:
bf:e4:f2:10:c2:80:3d:06:9d:2e:56:c5:13:f4:d2:5f:3b:83:
af:7b:1d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 11:12:22 2026 by rpki-client