Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/VpshC_j3jGza34F7vQEj-Gl8WZk.roa
File: VpshC_j3jGza34F7vQEj-Gl8WZk.roa (raw, json)
Hash identifier: OskiJqOGGZtp69Cos8UC30EvzQWFQlTQl1Ptaw5ruXQ=
Subject key identifier: 56:9B:21:0B:F8:F7:8C:6C:DA:DF:81:7B:BD:01:23:F8:69:7C:59:99
Certificate issuer: /CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Certificate serial: 01A15F49F022DD0BCB80717048B80FF4FCE7
Authority key identifier: FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/VpshC_j3jGza34F7vQEj-Gl8WZk.roa
Signing time: Wed 21 Oct 2026 16:27:23 +0000
ROA not before: Wed 21 Oct 2026 16:27:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 403114
IP address blocks: 91.240.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5f:49:f0:22:dd:0b:cb:80:71:70:48:b8:0f:f4:fc:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd0fd68c1b6b569b9f7c4813ac12ded6ae5e8ab
Validity
Not Before: Oct 21 16:27:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=569b210bf8f78c6cdadf817bbd0123f8697c5999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:31:94:5f:e0:99:6f:1c:f9:4a:7f:8a:b6:de:
37:2a:d1:88:40:c2:52:ce:6f:ce:df:af:7b:44:24:
72:fa:6d:bd:14:b2:6c:c6:e4:87:96:e2:ca:a1:d9:
a5:ca:56:75:b3:57:9e:52:ee:25:3c:21:92:a8:4b:
17:da:d6:a4:c8:bf:69:e2:c2:3f:ef:31:5d:ff:03:
13:ff:48:4f:3e:fd:d0:f6:fd:4c:8a:29:33:3f:ae:
9d:92:57:0a:d9:f2:e0:3a:1b:da:0c:1b:e0:d1:dc:
0e:2e:d6:7a:4c:3c:01:6e:50:15:dd:fa:2c:bb:f9:
08:95:a8:97:a8:ca:d2:c7:e4:10:d8:80:3d:52:d9:
21:33:a9:c7:d6:5a:2a:bb:2c:59:16:32:1b:8c:af:
48:14:ac:1f:db:6a:8f:e9:78:a5:4c:32:28:7f:5b:
e4:cb:f9:63:b1:7e:24:e3:b1:ac:9b:9d:f2:e0:56:
60:b0:57:d2:0b:da:bf:97:78:97:87:5d:ea:78:f8:
72:96:4e:57:81:96:31:cb:12:10:b8:4c:6f:a9:8f:
94:98:22:2e:a3:bc:05:50:42:e1:8f:e5:6f:1d:d9:
b4:d0:be:5f:fb:52:dc:41:8a:88:35:a6:47:e9:96:
a3:e1:c0:d0:4e:d4:9c:70:c5:98:db:69:01:7a:7e:
6c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:9B:21:0B:F8:F7:8C:6C:DA:DF:81:7B:BD:01:23:F8:69:7C:59:99
X509v3 Authority Key Identifier:
keyid:FD:D0:FD:68:C1:B6:B5:69:B9:F7:C4:81:3A:C1:2D:ED:6A:E5:E8:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dD9aMG2tWm598SBOsEt7Wrl6Ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/VpshC_j3jGza34F7vQEj-Gl8WZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/6234c0-a78c-439c-a6ee-5ccf6f4b7920/1/_dD9aMG2tWm598SBOsEt7Wrl6Ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.71.0/24
Signature Algorithm: sha256WithRSAEncryption
88:e9:de:57:f4:4f:f4:50:49:32:ba:a5:80:4d:f3:cd:a2:ff:
34:79:4a:92:97:5a:3a:7c:f8:ae:66:73:34:af:d3:6b:10:b4:
a6:19:a8:5b:16:61:b9:d9:4d:16:ff:10:11:35:66:64:3e:80:
46:86:cc:81:3d:77:9c:42:e1:7e:50:f0:e2:23:41:95:83:ca:
dd:a3:70:41:e6:2d:53:cc:fa:1c:40:a8:1e:21:2b:4a:3e:44:
58:03:15:59:65:44:39:34:2f:1b:25:28:f0:94:ff:e1:8d:2b:
e9:16:5b:55:37:e1:0a:e6:df:22:72:6c:c5:3d:c1:7e:b7:50:
4f:df:bf:d0:52:05:ce:93:35:6f:f1:a0:fa:bf:92:91:aa:a8:
79:1c:b7:e9:8a:b8:5d:a8:d5:fb:f8:16:13:39:f6:90:9f:f9:
00:c7:d4:00:b5:c3:7a:69:c7:6d:36:5b:6c:a7:76:db:d9:de:
49:a4:48:65:ee:b7:73:bc:b4:43:dc:cb:1c:12:32:d7:f7:89:
c6:b8:3a:34:04:a6:8c:5c:b5:7e:99:ea:9a:1f:bf:46:73:c5:
2b:0e:85:1e:8d:0b:a6:bd:5d:63:e1:cd:79:86:92:ad:b3:22:
b4:50:95:5f:fe:3c:ec:5e:c9:3c:57:8d:e4:50:80:6a:17:0d:
b1:13:a2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 10:05:55 2026 by rpki-client