Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/vBrQrstTdz8KPWHrbAtIIlp7oRs.roa
File: vBrQrstTdz8KPWHrbAtIIlp7oRs.roa (raw, json)
Hash identifier: /PbdoUBe87+zj3KdwFA/s9njRqMz7H7rkc1WIS7NqJA=
Subject key identifier: BC:1A:D0:AE:CB:53:77:3F:0A:3D:61:EB:6C:0B:48:22:5A:7B:A1:1B
Certificate issuer: /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial: 019DB0C8415AC87C712327216A08D7FC2616
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/vBrQrstTdz8KPWHrbAtIIlp7oRs.roa
Signing time: Tue 21 Apr 2026 16:03:26 +0000
ROA not before: Tue 21 Apr 2026 16:03:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33842
IP address blocks: 132.243.214.0/24 maxlen: 24
132.243.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:c8:41:5a:c8:7c:71:23:27:21:6a:08:d7:fc:26:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Validity
Not Before: Apr 21 16:03:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc1ad0aecb53773f0a3d61eb6c0b48225a7ba11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:38:ae:ac:42:19:16:46:86:8c:67:8c:73:38:
dd:48:da:90:bc:d7:c5:0c:ea:18:2b:6c:7c:0f:ed:
4b:b7:81:77:15:ff:d5:82:eb:01:f2:3d:1f:af:47:
a6:57:37:d5:0d:d0:30:3c:34:77:d6:31:a8:7d:fe:
c7:20:53:2f:30:1d:16:c6:90:73:92:d9:a5:1d:56:
c2:eb:22:b8:99:ec:0a:b2:7b:a9:82:0c:ba:7d:0d:
84:28:71:af:01:a8:59:3d:11:70:90:b1:99:fd:b0:
bb:4b:47:e1:da:75:be:d7:27:43:9f:cf:a0:bf:56:
0c:60:19:62:44:e7:c5:a5:37:e3:dd:a0:8f:f9:0a:
13:b8:c9:f5:05:3c:b6:4c:f5:3e:c2:6a:99:3e:08:
82:5e:10:b4:dd:99:1d:91:65:13:3e:11:14:13:c7:
4e:e7:a4:00:03:13:b6:9b:2a:f9:c8:84:7f:4d:e4:
b9:fe:05:cd:9a:28:38:5c:8c:e2:cd:86:55:ad:2d:
d7:a8:cc:ef:a0:83:3e:f6:e2:eb:ce:6e:90:f0:ee:
ac:03:da:06:7b:d1:44:c7:0d:0b:b9:76:88:01:0f:
42:0b:bf:b9:90:01:28:06:21:e0:fa:a8:58:fb:7b:
9c:d5:8a:f9:9f:3c:31:82:44:97:4e:fb:8a:dc:95:
e7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:1A:D0:AE:CB:53:77:3F:0A:3D:61:EB:6C:0B:48:22:5A:7B:A1:1B
X509v3 Authority Key Identifier:
keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/vBrQrstTdz8KPWHrbAtIIlp7oRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.243.214.0/24
132.243.230.0/24
Signature Algorithm: sha256WithRSAEncryption
34:df:64:69:f9:2f:80:08:da:c0:a3:de:a8:d9:bc:4f:34:c8:
36:0e:a8:30:0e:7d:fb:b3:50:27:4a:73:2f:32:16:f3:90:e2:
dc:93:10:83:e1:29:7d:08:da:00:1e:c9:40:d3:6a:c7:e4:1c:
ab:0a:6d:07:52:80:03:f4:fc:cd:7d:ed:10:3c:c3:eb:6b:a8:
1e:83:48:3f:42:25:1f:e0:98:58:8b:50:1e:f3:49:93:94:95:
c6:5b:26:ba:f4:07:e3:37:d2:4a:a2:e6:e0:ee:15:ca:3b:82:
e7:4b:39:02:1c:46:fb:c8:76:28:98:51:ab:61:aa:bc:93:01:
cf:2c:f4:ac:e6:12:04:b4:06:0d:17:17:6e:68:22:96:ab:53:
83:fd:c7:06:93:d9:2e:02:4e:8c:99:e0:f0:dc:56:aa:0a:96:
b6:5b:3f:f3:7e:7a:3a:3d:24:ce:6e:70:a1:92:d1:b8:e9:12:
9b:05:93:b1:d2:09:d8:11:10:02:07:99:ae:b1:e9:4a:d8:33:
0a:09:48:ff:21:8a:0c:17:18:7d:41:17:bf:5e:5c:65:d4:ad:
e4:a3:a2:94:7a:07:9a:07:dd:dd:70:3e:8b:6e:ac:6d:53:af:
38:36:80:9d:48:7d:4e:78:7f:fb:59:ea:3d:34:7e:91:52:e3:
6c:ac:60:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:51:10 2026 by rpki-client