Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/vngFOmM8F-I34UP1XtfkKo4AgEQ.roa
File: vngFOmM8F-I34UP1XtfkKo4AgEQ.roa (raw, json)
Hash identifier: 1Ru4gPZOefQrxrqA1R4SUrRycdaiRzteoC+xNeY+cK4=
Subject key identifier: BE:78:05:3A:63:3C:17:E2:37:E1:43:F5:5E:D7:E4:2A:8E:00:80:44
Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial: 019F26468602292DB2056EAE76E2B5E06768
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/vngFOmM8F-I34UP1XtfkKo4AgEQ.roa
Signing time: Fri 03 Jul 2026 04:39:43 +0000
ROA not before: Fri 03 Jul 2026 04:39:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40994
IP address blocks: 46.37.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:26:46:86:02:29:2d:b2:05:6e:ae:76:e2:b5:e0:67:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Validity
Not Before: Jul 3 04:39:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be78053a633c17e237e143f55ed7e42a8e008044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a7:2d:9b:27:bd:51:ce:95:da:57:7a:c2:3c:
8b:89:fe:c1:6d:c9:1d:73:c8:bb:33:47:6e:58:a0:
8d:74:68:fc:df:60:e2:ab:3f:be:19:6b:11:d0:61:
dd:b5:de:85:b5:88:a9:e7:e9:7e:bd:18:f5:b4:89:
7b:a0:ac:19:84:8c:8b:9d:45:cd:c8:b7:a7:46:cf:
89:a1:de:a0:b7:e8:91:43:16:85:9c:20:0c:72:42:
8d:8e:8b:ae:3b:46:2f:55:41:43:f3:94:c4:11:47:
d2:c8:98:1a:16:29:7a:cb:b7:b8:2e:db:c7:f5:03:
10:da:96:bf:fd:bd:34:ed:08:79:2c:a0:a8:18:2d:
bf:fc:c4:13:2e:eb:21:ea:bd:95:5e:ea:0c:1d:73:
3a:22:71:da:31:4e:34:fd:e0:20:bd:71:32:0a:70:
dc:96:bd:01:17:da:5f:95:23:39:8d:d5:81:61:d5:
0e:58:9d:30:f5:84:b6:46:bd:29:09:0b:e2:56:15:
77:18:0e:5c:17:f7:b2:f5:7d:84:66:49:bb:fe:b8:
4e:6d:87:38:1e:5f:ca:be:b3:0c:ef:92:0b:98:14:
6f:5c:62:38:76:48:54:83:fd:cd:07:b2:54:c9:e9:
30:15:31:95:fe:a2:98:b1:42:8b:5b:a7:a5:c1:c8:
af:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:78:05:3A:63:3C:17:E2:37:E1:43:F5:5E:D7:E4:2A:8E:00:80:44
X509v3 Authority Key Identifier:
keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/vngFOmM8F-I34UP1XtfkKo4AgEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.37.113.0/24
Signature Algorithm: sha256WithRSAEncryption
33:9b:69:87:1a:9e:b8:d7:b4:63:2e:8f:e4:7d:51:78:fb:3d:
41:0a:71:10:8d:ee:58:ec:43:76:43:a9:9b:d9:b9:8d:8f:0b:
ca:21:1f:18:0e:b1:22:85:f1:8f:9c:85:16:c6:e9:da:b1:48:
09:91:ef:a6:64:01:ad:9a:d9:10:1c:8f:bb:0e:54:e6:ec:1e:
48:5e:e4:6d:32:9c:a6:1a:55:d6:af:6d:90:6a:0f:d7:6e:d6:
c5:dd:70:c4:46:bf:1e:83:21:bb:9b:1e:5b:36:ad:44:1d:9e:
1e:2c:c8:b8:e6:8a:72:7b:3f:04:d0:d8:a7:3d:16:d3:92:f3:
a5:ee:d6:44:46:b4:39:3a:75:2b:fd:68:65:d2:ba:3c:f2:20:
9b:21:9f:86:8d:c2:64:5d:06:55:79:72:32:7c:35:93:a6:99:
0c:6a:e0:a6:bd:da:31:e5:5e:da:1c:01:40:b1:d1:1c:23:44:
a5:30:a2:bc:67:d6:6c:1d:41:0e:88:f4:7d:a7:b7:a4:5e:e0:
c7:14:51:fe:f2:d4:bf:4b:ab:b3:05:54:00:f0:ce:52:ec:ac:
28:a4:85:10:32:51:5d:f3:38:11:2b:46:04:53:b9:f2:33:06:
56:ad:15:4f:27:a2:ff:af:0f:90:f4:5d:3b:94:cd:ce:ba:cb:
5d:96:28:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:11:27 2026 by rpki-client