Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/vxlPRx7nvvr5MDKxST52WEfk36c.roa
File: vxlPRx7nvvr5MDKxST52WEfk36c.roa (raw, json)
Hash identifier: w6dkpT0p9Xyo7XTdbly7YVHP+5g0+QULi+eWQG8MnjE=
Subject key identifier: BF:19:4F:47:1E:E7:BE:FA:F9:30:32:B1:49:3E:76:58:47:E4:DF:A7
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019FF6D0DEE4DDA7A9AD43303F0F7CD3213C
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/vxlPRx7nvvr5MDKxST52WEfk36c.roa
Signing time: Wed 12 Aug 2026 16:31:51 +0000
ROA not before: Wed 12 Aug 2026 16:31:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199741
IP address blocks: 77.111.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f6:d0:de:e4:dd:a7:a9:ad:43:30:3f:0f:7c:d3:21:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Aug 12 16:31:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf194f471ee7befaf93032b1493e765847e4dfa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1e:94:30:79:36:0d:0c:72:7e:d4:46:34:fd:
f6:e6:81:ab:16:85:50:80:f9:a5:98:1b:0c:13:40:
16:8b:86:18:67:52:d6:cf:24:f1:2c:77:79:a8:b7:
a3:d5:36:ef:20:aa:0a:49:0b:07:1b:70:cd:b5:42:
42:52:aa:14:11:6d:e8:a3:db:4d:d1:4e:58:41:b4:
ad:99:da:ec:3f:27:61:c0:97:31:01:d9:69:1e:ed:
50:a3:bc:40:53:9f:35:c0:7d:88:36:fc:dc:c6:25:
ca:6e:48:3d:6b:94:8a:27:19:3e:25:33:a2:79:62:
70:65:70:05:b5:b4:d4:a0:34:10:11:ed:ec:c4:f7:
e3:cd:7a:dc:f1:be:79:24:a0:2f:94:9f:44:76:2a:
39:a2:99:27:af:b8:6b:7d:8a:a9:2e:3f:37:49:24:
ac:06:4a:8d:aa:b7:46:36:a0:c6:bd:85:bd:f3:17:
97:10:a6:00:c3:94:2b:c3:91:2c:95:d4:80:e9:ba:
6b:a7:fd:8e:34:27:cc:52:f1:91:f9:4d:04:5a:07:
70:1c:e7:cc:42:6c:5a:36:6c:64:12:00:df:67:1d:
e4:bd:1e:52:e6:95:ee:26:b0:e1:e3:a5:17:30:f2:
9a:fe:65:f4:4b:c5:f6:4e:4a:e3:b0:be:fd:57:47:
7e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:19:4F:47:1E:E7:BE:FA:F9:30:32:B1:49:3E:76:58:47:E4:DF:A7
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/vxlPRx7nvvr5MDKxST52WEfk36c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.104.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:ff:33:29:3f:94:47:97:8e:a5:41:06:16:56:29:4c:e0:8e:
5c:6c:d8:48:b2:95:42:02:0c:ba:89:8c:8f:89:a2:6a:84:38:
6f:5e:17:72:80:f5:ab:b4:e6:c5:d6:34:a9:31:48:58:69:6b:
72:f9:78:01:73:d9:5e:d3:2c:78:72:1c:2d:f6:05:55:45:69:
b3:7e:25:a5:74:cf:3c:96:c8:91:98:d5:e5:2c:80:82:c5:75:
e6:94:28:b2:ca:7b:a4:b4:46:d2:53:1c:ac:fc:b3:4a:29:e2:
7d:0b:4b:4c:ae:44:d0:55:2d:06:dd:6c:e0:f6:09:4d:91:0f:
a5:85:24:50:6b:fa:22:1e:5b:58:9d:89:a5:0c:1a:18:cd:78:
b0:3e:5f:c7:a2:23:e1:c1:95:86:a3:da:07:39:ed:4c:d6:59:
81:2a:63:4f:57:97:53:4e:80:ec:f9:ab:d2:ad:54:e1:e4:09:
e4:4f:19:37:eb:bc:16:31:37:2b:1a:4c:70:94:af:83:df:f8:
79:55:f9:6d:c9:6f:2d:63:01:c0:6f:c8:a9:49:6b:b1:71:1f:
98:b1:70:a6:71:c7:6b:ab:04:b2:dc:c5:df:32:c0:45:54:58:
1c:49:17:b9:96:cc:72:9c:1b:cb:ee:e2:de:8b:fd:11:cd:8d:
e5:68:aa:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 10:33:27 2026 by rpki-client