Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/VAWgclX_eWi7ePsdsq9sQv1Sahg.roa
File: VAWgclX_eWi7ePsdsq9sQv1Sahg.roa (raw, json)
Hash identifier: c52baJA0P+R7Jm9gmt/JX+phUyyY3a6PPeYJ7erTuSM=
Subject key identifier: 54:05:A0:72:55:FF:79:68:BB:78:FB:1D:B2:AF:6C:42:FD:52:6A:18
Certificate issuer: /CN=b286e9f08848e480b1f3e9a9c06a832d48ce37ad
Certificate serial: 019FE102E5FF11C648C35A619187AA508211
Authority key identifier: B2:86:E9:F0:88:48:E4:80:B1:F3:E9:A9:C0:6A:83:2D:48:CE:37:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/VAWgclX_eWi7ePsdsq9sQv1Sahg.roa
Signing time: Sat 08 Aug 2026 10:54:51 +0000
ROA not before: Sat 08 Aug 2026 10:54:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401776
IP address blocks: 187.5.0.0/23 maxlen: 24
200.180.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.mft
rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e1:02:e5:ff:11:c6:48:c3:5a:61:91:87:aa:50:82:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b286e9f08848e480b1f3e9a9c06a832d48ce37ad
Validity
Not Before: Aug 8 10:54:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5405a07255ff7968bb78fb1db2af6c42fd526a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2e:68:55:87:f8:99:ce:76:77:ac:4e:34:6b:
73:0b:7e:34:57:4a:3c:5a:ba:a3:1f:b7:5a:1d:48:
e0:09:be:8b:f6:db:3a:0e:84:2c:81:ac:5f:f6:2b:
0b:b6:df:5f:6a:28:ea:36:85:3c:14:97:0a:cc:fb:
fa:b7:26:ba:aa:4d:e5:12:29:6a:28:5f:c7:e9:30:
59:ab:60:b6:23:46:44:f2:b5:8e:ce:fd:d9:e4:92:
40:a6:6a:4e:b2:7a:1f:3e:a4:1a:53:e7:01:e1:7e:
e8:47:95:b5:f7:dc:ee:53:eb:97:31:c0:53:b6:81:
33:14:83:2c:b2:ae:d6:e7:3c:73:e3:a9:e6:d3:2d:
8e:7e:c1:4f:27:65:21:9a:a5:c5:2f:92:a1:50:20:
05:dd:b6:2d:06:08:a4:b2:00:d1:b2:a1:f3:85:c2:
ac:ac:cf:f5:91:71:0a:5d:2e:2f:2c:42:0a:a3:fa:
b4:81:0a:04:84:3e:13:f4:85:db:59:1d:e8:bc:52:
a4:52:02:af:22:34:b9:21:bf:70:3d:7e:5b:ab:3e:
01:07:8d:67:c7:75:6a:d7:ee:f7:6b:32:02:bd:dc:
f6:19:69:ea:ae:00:01:1b:ad:f8:ca:f8:0f:cc:70:
08:5a:69:bc:4e:9f:ea:c4:1f:bf:d5:98:61:61:0e:
59:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:05:A0:72:55:FF:79:68:BB:78:FB:1D:B2:AF:6C:42:FD:52:6A:18
X509v3 Authority Key Identifier:
keyid:B2:86:E9:F0:88:48:E4:80:B1:F3:E9:A9:C0:6A:83:2D:48:CE:37:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/VAWgclX_eWi7ePsdsq9sQv1Sahg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.5.0.0/23
200.180.160.0/21
Signature Algorithm: sha256WithRSAEncryption
c2:14:27:77:4a:fd:aa:0e:22:ff:5c:0e:b8:d7:c3:88:87:14:
36:41:10:ff:0a:bf:b4:1a:d7:9a:c9:c2:bf:b6:b9:7c:b0:f2:
73:8f:ca:7c:ce:a7:a3:8d:f9:a5:f9:53:65:cc:58:0a:0b:d5:
e4:a2:d0:6f:e2:8b:9d:7f:be:c2:2d:14:b7:7d:11:fc:df:af:
82:99:02:78:a7:65:42:4a:77:e2:7d:13:9e:fd:b4:99:93:78:
c4:f5:c2:54:f1:bc:49:15:47:d0:76:95:89:6a:f7:b6:30:23:
c7:ce:82:90:87:6c:58:d0:77:76:9b:41:57:09:7e:3f:08:3c:
14:4e:0e:6e:b8:ec:c4:a0:d5:83:95:5c:fb:45:7a:27:95:e5:
76:3d:8a:6c:e6:ab:19:7c:cb:ab:7f:90:43:fc:46:93:72:7d:
3f:55:58:12:ae:a1:77:cb:85:ed:de:a5:fd:bb:b5:60:fb:b8:
eb:8c:6b:5c:bc:40:85:08:d8:99:15:2b:74:75:23:67:4a:e1:
95:fe:61:96:82:00:48:fe:0d:c1:bc:eb:5f:61:9a:ce:a5:b9:
3e:03:a0:50:83:f1:ad:2c:b2:5d:ea:d6:fa:92:88:74:d6:45:
2a:c2:75:82:77:d5:ad:aa:7d:b4:51:fb:fa:7a:44:1d:d1:43:
ab:68:d0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 07:26:16 2026 by rpki-client