Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/_vzP3Tbj5Ny_slV2IVz6JxgsFAA.roa
File: _vzP3Tbj5Ny_slV2IVz6JxgsFAA.roa (raw, json)
Hash identifier: /bO+hqiU829OHjEAMlPEhjZ36uhwfOBhUVjjqlm4cLM=
Subject key identifier: FE:FC:CF:DD:36:E3:E4:DC:BF:B2:55:76:21:5C:FA:27:18:2C:14:00
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 01A1963AF712712809F199B0BAB184657C62
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/_vzP3Tbj5Ny_slV2IVz6JxgsFAA.roa
Signing time: Sun 01 Nov 2026 08:30:09 +0000
ROA not before: Sun 01 Nov 2026 08:30:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209697
IP address blocks: 84.55.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:96:3a:f7:12:71:28:09:f1:99:b0:ba:b1:84:65:7c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Nov 1 08:30:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fefccfdd36e3e4dcbfb25576215cfa27182c1400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bd:86:4d:58:1a:33:74:5a:3d:a5:3d:89:79:
9f:bd:61:aa:aa:32:56:98:87:d8:e6:01:3d:e8:9a:
a6:65:24:6c:4d:c8:fe:5f:c4:80:c9:dc:82:89:8d:
84:3a:42:2c:cb:09:fd:62:f4:ee:59:8d:7d:33:6d:
61:87:ea:ad:d4:75:09:14:92:40:41:3c:51:38:fc:
4c:c8:20:65:af:b9:9a:a8:3b:53:a7:95:ed:03:02:
f0:d3:33:b6:12:34:ff:96:b2:5c:b6:de:ff:ab:86:
65:ad:b6:ef:46:4f:0f:ed:7e:f2:8c:5d:b3:b3:2a:
cd:ae:c0:b7:e5:b4:87:a3:a0:14:0e:9a:16:32:94:
f9:f2:c2:30:5a:47:50:0b:e4:dc:04:65:9c:ef:96:
3b:e9:7e:aa:7b:b5:70:d8:30:be:c7:91:26:6b:a2:
d6:62:49:5b:ed:91:2a:6d:bd:f4:58:e0:32:19:09:
58:0f:34:27:f8:53:f1:c0:32:75:a4:10:88:3f:9a:
0d:fe:47:53:14:3d:24:c8:a3:27:fd:e0:b4:e6:2a:
dc:f3:7d:75:e7:1c:93:f3:95:05:48:11:be:66:1d:
cf:f7:89:5d:e3:23:fe:c2:96:51:a4:d8:a2:e6:b0:
f2:59:9b:9b:ac:ac:ac:cd:5d:52:08:67:3e:46:3e:
b2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FC:CF:DD:36:E3:E4:DC:BF:B2:55:76:21:5C:FA:27:18:2C:14:00
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/_vzP3Tbj5Ny_slV2IVz6JxgsFAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.23.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:8b:05:65:a7:85:a4:6e:00:11:09:66:cb:f3:65:87:bf:05:
e0:19:ad:a6:7c:1a:96:39:4c:af:7e:33:68:49:44:54:b5:03:
a9:1e:62:1c:e4:97:d7:5a:b7:47:fa:e4:25:9f:35:e1:4d:23:
c4:18:6e:95:1a:bc:6c:08:b7:97:81:fc:86:43:58:b9:b3:9c:
32:63:18:19:e3:8c:38:f4:4d:e4:9e:b8:ee:bf:61:f5:0d:32:
79:bf:45:66:20:92:44:0c:c1:27:5e:76:a6:f6:ac:46:b8:f9:
33:74:91:2c:91:97:f1:b7:90:0a:43:d6:c5:0f:ff:39:29:66:
8b:ee:47:90:74:07:cc:1c:e8:2a:06:07:1f:d1:52:41:8e:e1:
bc:d2:f7:52:35:dc:0b:72:3d:71:5b:ff:6f:ea:dc:ad:23:78:
b9:8a:11:f6:9c:36:45:ae:cb:1d:d0:40:e8:75:6d:d7:68:33:
0a:0f:f8:8a:fd:d9:33:2e:8f:89:8b:00:51:34:c3:a5:22:46:
80:83:ef:19:4c:c1:0e:82:67:f3:22:43:6b:c2:72:95:4a:5c:
f8:36:5b:e3:d2:79:a0:e7:51:c3:73:6a:d2:05:01:65:b4:27:
3b:9f:ac:03:0b:ec:08:be:a1:23:65:12:8f:9a:9e:c1:bb:b2:
81:9c:b2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 22:57:51 2026 by rpki-client