Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/Vr5zxFuBIBRSfS9wiO8FICR9XUQ.roa
File: Vr5zxFuBIBRSfS9wiO8FICR9XUQ.roa (raw, json)
Hash identifier: 0wXTI0Bfn7LkdR/jRJHkznk4N+hLMDCuYaJXjZcbxCA=
Subject key identifier: 56:BE:73:C4:5B:81:20:14:52:7D:2F:70:88:EF:05:20:24:7D:5D:44
Certificate issuer: /CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Certificate serial: 019E2609CBEE78A4609544CEC640F52BC88F
Authority key identifier: 1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/Vr5zxFuBIBRSfS9wiO8FICR9XUQ.roa
Signing time: Thu 14 May 2026 10:30:36 +0000
ROA not before: Thu 14 May 2026 10:30:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34696
IP address blocks: 185.238.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:26:09:cb:ee:78:a4:60:95:44:ce:c6:40:f5:2b:c8:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d0c7e7bb27c533a997d277cadd417ec7bd284f0
Validity
Not Before: May 14 10:30:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56be73c45b812014527d2f7088ef0520247d5d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:10:e2:c9:da:35:1f:32:b5:6f:c7:1b:71:ec:
80:a8:f8:e6:f6:9c:0a:34:d8:1a:72:3c:06:29:55:
6c:9b:28:d5:71:a7:be:05:5a:f1:a8:5b:a6:fe:b7:
14:ab:51:4c:e2:db:7b:ab:fb:c0:3b:2a:59:39:a0:
cb:11:c9:4c:e9:2a:c1:20:9e:2e:4a:59:b2:4f:0c:
d8:4a:fd:9c:21:b4:6c:da:9d:ba:6a:fc:52:90:8c:
de:b1:fa:ec:16:77:3e:5c:a4:cd:35:a0:e2:c8:6a:
fb:d7:be:44:52:09:f1:08:41:70:1f:a7:1a:28:91:
e2:5e:48:2b:fa:ed:7b:9c:96:22:f1:c7:89:76:c5:
da:3f:e5:bb:ae:7d:36:b7:43:4a:bd:45:05:cb:a3:
02:e2:c7:65:34:b7:e3:d4:e6:2e:f2:16:15:54:f0:
0d:49:5e:a7:a4:2c:13:d7:af:f4:d7:4e:ad:39:c6:
1a:61:12:e4:89:7d:90:7f:a1:1c:9a:d6:ac:e1:6a:
ab:d6:df:39:70:84:38:fa:05:95:3a:8b:8f:29:ca:
bf:38:b0:3f:0b:c5:8c:2b:c5:ee:1f:a3:53:4d:11:
17:76:40:2e:9b:3c:7d:c2:4c:22:2d:80:e6:c8:5b:
cf:2a:0b:b3:07:56:85:5a:dd:14:16:8d:87:aa:75:
c7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BE:73:C4:5B:81:20:14:52:7D:2F:70:88:EF:05:20:24:7D:5D:44
X509v3 Authority Key Identifier:
keyid:1D:0C:7E:7B:B2:7C:53:3A:99:7D:27:7C:AD:D4:17:EC:7B:D2:84:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HQx-e7J8UzqZfSd8rdQX7HvShPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/Vr5zxFuBIBRSfS9wiO8FICR9XUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ddd349-ac50-43e5-a88a-b28f07b2f45b/1/HQx-e7J8UzqZfSd8rdQX7HvShPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.87.0/24
Signature Algorithm: sha256WithRSAEncryption
de:2f:ad:2d:3e:ad:b7:78:69:2f:f7:7e:6c:53:59:f1:58:04:
c3:c5:6c:f4:27:fe:0b:94:83:d4:62:f2:8e:45:eb:5a:43:de:
0e:76:dd:99:30:a2:a4:f6:a5:8d:ea:98:5f:b4:f4:ba:9f:ca:
27:df:3e:ce:c6:6d:10:f8:9a:21:21:89:a1:0d:1a:9a:96:e1:
23:71:fc:96:29:cb:06:6d:b5:8e:a8:fd:05:35:4e:a3:b6:78:
54:9c:54:a5:fc:65:ae:f7:33:df:9e:13:dd:b3:9c:e3:66:32:
db:c3:ef:83:4e:83:db:66:ad:9f:4b:d7:67:e3:fa:af:0f:34:
6e:7e:8c:07:77:36:ad:7c:0c:2d:01:ce:9a:85:f3:60:4b:5f:
b7:95:a1:85:6e:c9:be:67:0f:e3:92:df:2c:24:3c:14:7d:05:
61:7e:e7:75:1d:af:3f:31:32:fb:93:9b:55:c8:e9:48:0b:5a:
8d:16:7e:7b:05:ae:f3:bc:65:6c:01:04:e2:92:4b:a6:ff:84:
fd:82:52:eb:0b:c3:b8:37:dd:00:df:38:40:12:6a:c1:7b:b9:
56:4e:e2:c9:ec:f8:d0:1b:5f:25:64:ed:c8:1a:ba:b0:84:18:
89:09:6e:c9:23:f4:4b:f4:a0:07:55:a4:cb:7a:7d:06:e0:fe:
9e:dd:b2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:14:53 2026 by rpki-client