Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/M-vjsg1_YAaX42Z1TGDPhsjrNVU.roa
File: M-vjsg1_YAaX42Z1TGDPhsjrNVU.roa (raw, json)
Hash identifier: PWgyKvcvD4IEU6KpV4MDeAWE7c8LVSmS28TqkrRnT9o=
Subject key identifier: 33:EB:E3:B2:0D:7F:60:06:97:E3:66:75:4C:60:CF:86:C8:EB:35:55
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019EB08737FF3BC8AE8A0DD955EBDCBAAFCE
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/M-vjsg1_YAaX42Z1TGDPhsjrNVU.roa
Signing time: Wed 10 Jun 2026 07:55:12 +0000
ROA not before: Wed 10 Jun 2026 07:55:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29518
IP address blocks: 193.235.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 08:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b0:87:37:ff:3b:c8:ae:8a:0d:d9:55:eb:dc:ba:af:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jun 10 07:55:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33ebe3b20d7f600697e366754c60cf86c8eb3555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:90:9e:97:68:e4:51:41:a1:b9:db:ca:70:3f:
3b:d1:0d:8f:e4:be:02:ef:89:3c:89:1e:57:da:a1:
2f:59:a9:bc:88:bd:20:1e:f1:11:69:12:a6:1a:4b:
be:36:5f:22:22:6f:6d:f5:b3:83:b1:56:4d:11:8e:
2c:a0:a5:9f:e6:cd:15:22:43:af:55:97:58:91:89:
09:f1:64:ca:ff:de:ee:38:e7:80:49:90:71:11:1a:
9a:c4:ae:53:98:f7:7d:7e:04:9f:8b:68:b3:9c:c9:
b7:2e:5e:eb:36:22:54:2b:6f:d7:70:38:d3:93:0e:
6f:71:47:30:f5:6a:a8:82:4e:ba:62:ea:c5:2d:91:
22:6b:ff:2e:33:77:92:0e:98:db:55:11:39:a2:3d:
fb:4c:69:f1:05:41:49:8a:52:78:c1:21:ca:68:f6:
aa:ce:7b:02:eb:b0:69:c6:72:f6:33:22:90:15:c7:
28:93:b1:72:a0:79:94:9b:a6:25:78:21:4e:bb:7f:
4b:62:76:6f:c8:92:54:73:5a:91:31:63:47:73:41:
21:fe:cc:0a:98:de:b7:f0:6e:ef:a4:ad:71:f3:39:
80:92:83:b8:40:4b:ed:4c:fd:07:60:97:ac:7d:15:
9a:85:ec:39:b2:04:94:f7:a0:d3:03:ae:73:b7:ea:
7a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EB:E3:B2:0D:7F:60:06:97:E3:66:75:4C:60:CF:86:C8:EB:35:55
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/M-vjsg1_YAaX42Z1TGDPhsjrNVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.235.85.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:db:8a:24:f9:66:31:93:9c:c8:4d:62:15:46:a8:55:ba:ef:
ba:8e:5e:e1:9f:f1:7f:04:e7:58:9c:04:4d:3c:a8:aa:c6:de:
30:9c:20:6b:cd:b4:32:6f:34:81:69:4a:be:a7:c5:32:9e:fd:
d8:84:af:8b:f1:b2:a5:ce:ef:11:b8:cc:b3:e0:8e:95:5d:f6:
33:e3:11:f9:95:8c:7a:89:bc:f0:b0:68:da:78:9d:39:6d:ac:
8c:be:dd:fe:69:14:c1:89:f1:04:0a:a1:35:0b:48:49:3a:ab:
80:aa:83:cd:95:5a:94:b2:74:f1:74:d5:27:af:46:14:7c:0b:
02:48:e1:74:45:9e:a4:75:e3:89:c9:cc:57:00:7d:6b:ec:88:
31:d0:2f:fb:e3:69:3a:ba:19:6f:94:1c:4e:e9:d0:27:14:c3:
91:52:3f:c3:83:14:bb:a0:94:bc:ac:04:52:c4:26:84:74:93:
64:37:75:42:64:f2:e1:81:48:94:e4:85:31:da:a5:e8:aa:76:
aa:9e:9c:dc:81:55:c8:32:39:ec:11:77:d1:9a:b5:06:c5:67:
d6:4a:b1:e1:95:60:e6:0f:87:00:57:f5:4c:1f:87:7c:1d:b5:
7e:4d:5e:38:2b:81:28:a8:ab:09:2f:f3:46:6b:3e:81:f8:c2:
d4:c2:54:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:17:51 2026 by rpki-client