Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/VmanDZNFkgEbOQupfK0om4KXePI.roa
File: VmanDZNFkgEbOQupfK0om4KXePI.roa (raw, json)
Hash identifier: mjsJC9NQUJfwnjHZ+fWyZnDY0q9++cAuJDUVwIpX5Qo=
Subject key identifier: 56:66:A7:0D:93:45:92:01:1B:39:0B:A9:7C:AD:28:9B:82:97:78:F2
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 019C805DA622730295E0138FD69E100536CF
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/VmanDZNFkgEbOQupfK0om4KXePI.roa
Signing time: Sat 21 Feb 2026 13:22:26 +0000
ROA not before: Sat 21 Feb 2026 13:22:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7289
IP address blocks: 216.116.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 20:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:80:5d:a6:22:73:02:95:e0:13:8f:d6:9e:10:05:36:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Feb 21 13:22:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5666a70d934592011b390ba97cad289b829778f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cd:e5:f9:10:d6:d5:1c:fa:e8:fd:5f:95:77:
a8:f8:ae:5d:ea:ac:c0:fc:52:69:d8:b3:53:7a:cd:
16:db:00:bc:4c:e3:be:f8:68:67:c2:2b:99:5f:55:
ba:26:21:39:b7:3f:a2:3d:ea:80:1a:dc:af:e7:c9:
11:ee:f9:2c:8c:ef:91:b2:75:87:e2:88:34:41:26:
e1:ff:fe:84:6e:22:63:18:26:6a:f5:15:74:4e:1f:
93:c0:30:89:5c:62:09:d4:ec:1f:5b:27:5c:3f:f0:
3b:4d:7b:a8:8b:8b:28:bc:0d:a6:e3:5b:5f:3d:f5:
0e:3d:46:4e:52:76:ae:6d:da:ea:8c:94:81:e2:4a:
46:92:f6:b2:75:98:50:06:3c:c9:ee:fc:46:db:a3:
6e:aa:2d:32:dc:4b:30:4a:96:05:bd:2b:c5:86:20:
95:dc:80:1e:25:41:11:a1:58:7c:9a:d2:a2:c8:6a:
eb:72:cb:f1:55:3d:46:f1:e8:07:1a:48:56:70:b0:
88:5b:c1:c9:f6:30:ff:32:0f:05:c6:e6:f3:ee:7b:
65:cf:32:98:28:9e:66:74:2b:5c:f8:a0:da:f2:dd:
56:fe:cb:e8:e5:84:e6:d8:da:37:6f:7c:e2:89:36:
7a:44:43:dd:d7:90:31:bf:19:92:72:77:c3:1c:17:
98:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:66:A7:0D:93:45:92:01:1B:39:0B:A9:7C:AD:28:9B:82:97:78:F2
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/VmanDZNFkgEbOQupfK0om4KXePI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.116.189.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:6b:20:e2:df:29:68:d9:63:45:c2:35:24:ef:2e:1a:ed:14:
e4:8e:de:7c:b9:5e:70:5c:69:b3:f6:38:f3:06:df:60:e1:d8:
4b:9f:6b:ec:f3:0e:fb:12:04:74:b9:7e:93:60:9d:ff:45:27:
f3:e9:0a:84:20:13:d1:44:65:a5:ac:92:e7:6d:dc:9d:b1:8a:
e3:00:b3:69:64:f0:22:4b:d2:1c:97:9b:be:eb:23:44:31:ac:
2f:9c:be:63:c3:be:1d:2f:22:91:b7:97:b0:88:06:cf:c6:a4:
b0:f3:01:8b:61:0c:af:94:e2:fd:9e:82:2d:50:84:69:c1:c8:
e0:dc:d6:17:8e:59:c4:8d:8d:0c:80:20:d1:81:97:af:6e:99:
55:0c:59:d8:28:ce:39:ec:80:1b:98:d4:4c:75:ea:79:db:e1:
a4:17:3b:69:46:4e:1e:a3:b7:c9:ce:2d:fd:e4:07:50:5d:ba:
2f:d5:29:97:4b:11:14:8a:8a:1e:48:79:47:22:bc:25:09:cc:
98:3f:59:ab:4e:9f:e0:ac:e0:15:0c:00:92:27:f6:c0:8d:d1:
88:3e:b3:60:0d:7e:ac:a8:59:d3:44:97:82:54:4f:7f:c7:7d:
90:a4:95:36:e7:3a:f2:d7:f2:ca:74:df:61:2e:37:15:e4:cb:
77:3c:b9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 02:18:21 2026 by rpki-client