Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/Vs-VbGsXqggDO3OQJAz7ljIJCBM.roa
File: Vs-VbGsXqggDO3OQJAz7ljIJCBM.roa (raw, json)
Hash identifier: 0/YnvO1iRna/5MI8gBnTd4qBir5DLarEENTjj5s3VEU=
Subject key identifier: 56:CF:95:6C:6B:17:AA:08:03:3B:73:90:24:0C:FB:96:32:09:08:13
Certificate issuer: /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Certificate serial: 019F6065AE10BAAE097F5C10F7DE8CC2371D
Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/Vs-VbGsXqggDO3OQJAz7ljIJCBM.roa
Signing time: Tue 14 Jul 2026 11:31:43 +0000
ROA not before: Tue 14 Jul 2026 11:31:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216138
IP address blocks: 85.149.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:60:65:ae:10:ba:ae:09:7f:5c:10:f7:de:8c:c2:37:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de
Validity
Not Before: Jul 14 11:31:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56cf956c6b17aa08033b7390240cfb9632090813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:70:ed:c3:bb:76:64:13:11:b0:da:e3:93:42:
6d:65:a5:2d:10:d8:c6:98:6c:b1:f5:9f:6b:f3:a3:
18:ce:3e:15:e3:a1:b5:fc:6a:ec:3a:af:61:a1:74:
06:3c:27:42:f7:19:a4:30:a4:19:c4:6f:df:a7:d2:
a4:4a:d3:17:cc:b7:47:9f:76:ed:36:a1:3b:69:2e:
4b:29:ea:67:7a:bd:97:b5:4a:a7:00:4c:74:51:e7:
c3:0d:d0:42:f3:90:31:30:b6:ec:a0:a5:48:e0:d8:
eb:42:14:1c:51:c7:84:8b:49:d3:5e:f1:1d:d2:96:
c2:a0:32:da:57:98:5f:b7:86:e8:f4:bb:66:98:b8:
34:21:2c:d3:14:a8:e2:c1:ea:63:c0:97:86:d1:3a:
d0:9f:55:e8:37:7b:66:90:5b:be:28:23:54:14:a5:
e7:c5:de:17:b1:15:8e:8c:b8:90:26:ff:ae:97:e0:
bd:a0:4e:5f:94:50:5d:14:05:fb:c3:2a:1c:49:90:
56:b2:96:07:6f:a3:18:07:bd:6c:81:fa:54:99:87:
53:90:4f:48:e1:f7:f3:10:33:a6:80:63:0d:c7:f8:
00:72:86:bc:11:69:a4:42:9e:53:c5:04:7f:12:2c:
fd:f9:19:59:84:bd:85:5e:f7:0c:d3:bc:e2:89:27:
29:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:CF:95:6C:6B:17:AA:08:03:3B:73:90:24:0C:FB:96:32:09:08:13
X509v3 Authority Key Identifier:
keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/Vs-VbGsXqggDO3OQJAz7ljIJCBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.149.198.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:a3:b4:30:da:8d:57:ef:04:e2:1a:d9:3a:8a:d3:3e:ce:1e:
b7:e0:c1:04:89:44:c5:7a:5c:a9:c9:84:da:74:4a:66:04:95:
d9:67:98:00:23:52:a9:66:88:56:1f:13:14:9b:76:fb:32:8b:
c8:ce:1e:7e:1b:15:c8:da:5f:19:1f:3c:66:60:54:6b:f4:d2:
02:d4:a6:3a:6f:ab:d5:ee:10:40:df:3f:ae:23:2c:19:7c:f3:
27:00:cb:e1:58:97:0f:4b:24:c4:b7:b1:0e:1e:d3:aa:55:7a:
4a:24:88:3e:7f:cb:88:a2:28:a3:4f:c1:c0:76:4d:b8:1a:29:
c9:fa:ef:44:f5:ef:0d:19:d5:70:26:9c:cf:fc:30:da:e5:eb:
26:63:e0:1f:29:e6:9f:e3:66:85:f9:d3:91:eb:55:58:e4:9c:
99:a6:6c:32:16:54:87:a7:2e:ec:21:92:65:61:95:86:6d:f6:
2b:a5:70:ea:3c:db:7b:14:c7:68:3b:97:eb:29:a5:42:e9:66:
a5:db:b8:29:47:c8:2b:e6:0d:51:a8:c4:d5:9c:23:ff:55:42:
da:8e:10:f1:61:5e:b0:03:61:95:79:80:66:a1:55:3f:99:43:
3f:9b:80:e4:0e:8c:31:66:01:da:d4:a2:75:9c:e9:d0:61:a1:
77:48:d1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:55:31 2026 by rpki-client