Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/VQFfUHJmqtguiLFi_HjQJFAVesA.roa
File: VQFfUHJmqtguiLFi_HjQJFAVesA.roa (raw, json)
Hash identifier: EDL9YB1yCUjm8A5ZWpWGxyV2v4JCtaqq3eo8x6vRPco=
Subject key identifier: 55:01:5F:50:72:66:AA:D8:2E:88:B1:62:FC:78:D0:24:50:15:7A:C0
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 01A044E11E1581DBEAA1A52261CEEC13C2A2
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/VQFfUHJmqtguiLFi_HjQJFAVesA.roa
Signing time: Thu 27 Aug 2026 20:19:59 +0000
ROA not before: Thu 27 Aug 2026 20:19:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218964
IP address blocks: 132.243.205.0/24 maxlen: 24
132.243.232.0/24 maxlen: 24
132.243.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:44:e1:1e:15:81:db:ea:a1:a5:22:61:ce:ec:13:c2:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Aug 27 20:19:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55015f507266aad82e88b162fc78d02450157ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a7:96:76:ee:e3:8c:c0:09:56:00:ec:ea:d4:
61:91:65:98:d7:66:55:17:96:e7:ee:06:64:11:56:
6a:1f:ec:12:21:21:03:ec:21:53:53:d7:26:c9:63:
35:d4:b6:13:59:55:f1:ed:9f:62:2e:d2:88:4a:22:
02:fb:f7:4b:73:1f:95:3f:96:a0:dd:87:a4:37:70:
27:0a:7a:ff:96:f5:87:c4:9d:c3:02:78:95:9b:a8:
f4:b3:8e:48:5f:84:23:0f:27:20:ac:55:3b:49:a2:
4d:ab:41:e5:cc:c6:9f:bd:59:4c:76:83:9e:fa:7e:
ce:65:85:21:31:85:71:23:01:fc:c0:a0:84:02:9e:
1b:bd:a5:94:66:02:be:34:c5:c6:1d:e5:99:b3:98:
11:10:a6:8a:94:6f:28:d0:7e:7f:c9:42:96:77:e7:
83:07:c6:49:3f:b9:91:d4:89:61:0c:10:ce:58:d9:
3a:72:97:b2:f3:7f:95:88:04:33:ba:4d:2e:17:0b:
b6:a4:19:18:46:dc:52:e8:33:8c:38:70:c7:77:db:
8b:69:98:57:f2:1e:7a:1e:f3:8a:59:60:12:21:9a:
43:c0:d8:09:f5:80:8e:ed:4e:2f:75:07:6e:af:b6:
7d:22:fb:43:50:4d:c0:7b:78:f3:0a:a3:43:ea:a0:
e7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:01:5F:50:72:66:AA:D8:2E:88:B1:62:FC:78:D0:24:50:15:7A:C0
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/VQFfUHJmqtguiLFi_HjQJFAVesA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.243.205.0/24
132.243.232.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:bb:9e:97:83:0d:47:08:d2:06:b0:36:00:a5:79:98:77:c0:
72:81:4b:c9:22:64:08:fb:88:f5:73:01:37:e7:58:91:d6:3a:
59:54:c1:fa:c6:86:c7:c6:00:14:3f:44:45:01:3c:73:80:d7:
2d:90:48:bc:4f:bc:4b:63:8b:73:cc:4f:fe:a3:67:c1:2e:82:
76:fa:8d:e6:67:86:04:da:8e:7d:f2:30:01:a8:a8:bd:a5:1e:
ff:df:b3:27:e7:ff:dc:b5:61:c1:0e:a9:d0:4c:9a:c3:68:fe:
05:a7:0b:66:eb:df:15:2f:ad:88:1e:a2:55:d1:e3:14:90:12:
c2:08:61:9d:75:33:12:6b:d8:6e:29:56:fe:82:f0:1d:01:87:
63:ef:8f:e1:4b:71:3d:ec:6f:cb:0e:0e:0c:f0:b4:1d:90:c2:
17:3d:0b:86:16:e0:6e:1d:3f:c9:fe:4e:f8:32:c9:b3:8d:b4:
81:83:23:b7:6f:f8:9b:4e:28:fb:0d:07:5d:0f:75:b2:6c:11:
83:af:9d:d4:ac:b5:a9:28:f5:9e:76:90:84:91:d9:9b:49:3b:
fd:bb:b5:62:05:24:85:6f:13:72:10:76:8d:d9:e9:d1:9c:75:
32:d3:3e:0a:1f:bc:bc:46:85:69:d8:ff:86:97:d1:0e:e6:47:
14:5f:7e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:09:56 2026 by rpki-client