Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/Vm1c1WtjyqpCDDaFqRgWBPRuzTE.roa
File: Vm1c1WtjyqpCDDaFqRgWBPRuzTE.roa (raw, json)
Hash identifier: PhCalGp+MfsuVT1o+EaqpG+ubg4eyRCw+3C+dRQltm0=
Subject key identifier: 56:6D:5C:D5:6B:63:CA:AA:42:0C:36:85:A9:18:16:04:F4:6E:CD:31
Certificate issuer: /CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Certificate serial: 019E21FAAEC2246190D48A14C5F9FF0E9FD8
Authority key identifier: AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/Vm1c1WtjyqpCDDaFqRgWBPRuzTE.roa
Signing time: Wed 13 May 2026 15:35:36 +0000
ROA not before: Wed 13 May 2026 15:35:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215837
IP address blocks: 104.167.18.0/24 maxlen: 24
2a13:5682:400::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft
rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Jun 2026 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:fa:ae:c2:24:61:90:d4:8a:14:c5:f9:ff:0e:9f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7
Validity
Not Before: May 13 15:35:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=566d5cd56b63caaa420c3685a9181604f46ecd31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:65:68:a9:d2:8c:d8:14:5c:19:e1:2a:9a:16:
e1:3f:52:8d:95:fb:25:f3:62:bb:53:7f:85:d4:39:
97:06:9d:4a:70:6e:e7:98:ba:94:5b:f2:11:e6:d8:
f8:29:10:64:da:c5:6e:ca:c7:2e:38:37:06:d4:ac:
53:a6:c6:94:19:12:38:83:c5:fb:f9:f2:dd:4d:df:
02:d9:48:63:09:e2:80:17:51:31:4a:9f:c2:9e:3e:
da:aa:1a:7b:07:40:0a:9d:91:db:4f:c1:e2:c5:5a:
9e:e0:1e:0b:ee:81:09:fa:36:41:5f:4a:3a:f6:06:
cc:2a:34:cb:a0:66:c7:ca:05:23:17:3b:40:5e:a6:
ef:38:8e:53:1c:9b:86:a8:72:04:45:a6:24:70:d1:
96:22:ca:22:c6:f9:1d:c1:9f:09:ea:40:48:1a:4c:
b7:95:d6:13:0a:c0:48:17:a4:8e:17:fe:03:5a:5d:
4f:6a:d1:05:73:9e:7a:c9:9e:35:4c:16:3b:5a:e1:
25:1c:70:ec:3c:26:c3:cc:b2:f7:08:93:bc:0e:cf:
6c:67:23:c2:99:74:3d:14:be:0f:b1:71:72:a9:92:
45:8e:a5:f7:d7:a5:5b:2b:fd:69:6c:80:e2:6c:da:
8a:e1:11:22:db:5e:d4:5f:c5:53:3c:a0:18:ec:66:
7d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:6D:5C:D5:6B:63:CA:AA:42:0C:36:85:A9:18:16:04:F4:6E:CD:31
X509v3 Authority Key Identifier:
keyid:AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/Vm1c1WtjyqpCDDaFqRgWBPRuzTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.167.18.0/24
IPv6:
2a13:5682:400::/44
Signature Algorithm: sha256WithRSAEncryption
46:64:27:4a:2d:d3:e1:15:67:ad:29:89:cb:2e:32:58:69:24:
13:03:f4:25:f1:c7:59:f0:10:e1:e0:6b:c0:ae:89:9a:37:51:
ec:ed:92:b9:8b:f1:17:04:9d:ee:87:06:2c:42:45:ad:9b:0f:
d9:96:b4:ee:89:eb:8e:40:ad:7b:85:b1:89:de:26:54:ce:0c:
bf:da:29:ff:5b:9a:e1:e1:78:00:11:0f:27:56:1f:02:a6:8d:
31:9a:3d:63:09:07:a9:62:a7:02:94:63:72:8e:f7:1f:67:de:
22:3a:21:43:09:fc:f8:a9:aa:a8:84:15:1c:9b:0a:15:29:69:
7e:86:4a:8b:14:c5:4c:91:5b:9a:e6:21:52:5f:96:72:12:38:
58:8e:18:4b:9e:7a:c5:2d:5f:a0:9a:de:99:0f:41:b0:1e:03:
39:0c:da:91:02:66:0c:7d:2c:8d:20:41:f0:bd:f6:36:6b:78:
a8:9d:01:6c:43:2e:34:64:9f:35:7d:86:e1:05:f7:46:6f:d6:
7d:50:57:eb:86:98:30:cb:6c:22:78:a7:de:cd:50:32:5c:1d:
0c:1d:48:b4:c9:2a:73:f1:37:00:a0:b6:d0:12:e8:2e:1d:0b:
c4:95:53:a3:75:4f:c1:ac:c9:69:cc:36:0b:58:4c:60:3f:0f:
a4:8d:8e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 06:02:53 2026 by rpki-client