Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/vySLCvjlSUZloe041n1qUTYoe9Q.roa
File: vySLCvjlSUZloe041n1qUTYoe9Q.roa (raw, json)
Hash identifier: LF7IujuZCKU5hussDFWW7kkGIL0b+dkXPHxzLE8ANs0=
Subject key identifier: BF:24:8B:0A:F8:E5:49:46:65:A1:ED:38:D6:7D:6A:51:36:28:7B:D4
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019EF52976E7A9C209ABF0C61903EE7359E5
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/vySLCvjlSUZloe041n1qUTYoe9Q.roa
Signing time: Tue 23 Jun 2026 15:46:35 +0000
ROA not before: Tue 23 Jun 2026 15:46:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152575
IP address blocks: 191.44.19.0/24 maxlen: 24
201.24.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f5:29:76:e7:a9:c2:09:ab:f0:c6:19:03:ee:73:59:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 23 15:46:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf248b0af8e5494665a1ed38d67d6a5136287bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:53:58:7f:1e:29:24:42:d5:23:e6:03:21:19:
e4:82:57:97:d1:63:42:08:96:9f:48:40:03:31:4e:
27:55:64:1d:fa:b1:04:5b:11:4d:03:3a:39:46:ee:
91:70:09:59:25:f5:48:e4:5a:58:34:3c:22:56:5d:
54:2c:63:d9:d2:83:ed:c4:8b:51:47:ff:9d:da:c6:
99:e6:e4:9a:dd:68:85:db:de:7f:18:f1:69:96:ba:
9d:3b:00:f2:41:75:99:cf:36:f0:29:dc:64:99:a4:
67:6e:6f:ee:9a:c4:ce:4d:04:10:2d:5a:4f:d0:57:
85:d5:30:42:c1:07:41:c3:d4:14:bd:e3:73:fd:fa:
49:62:65:ec:54:58:a9:25:55:10:f3:c6:8f:2f:53:
21:d4:d2:b5:95:ea:bb:90:47:63:13:42:09:7f:2e:
17:7a:45:0b:91:75:26:fa:94:e9:14:74:72:15:d7:
e6:89:a0:b9:2f:f0:15:de:11:d7:f1:5f:37:ee:56:
74:63:73:5b:7f:9c:a8:bc:04:b5:26:c3:f1:9c:ea:
4c:c5:5c:6a:2d:e8:91:98:95:12:be:1e:e3:cb:5f:
cc:fd:73:3c:ae:c1:7a:11:1e:09:e6:54:c2:df:4e:
6f:1b:2f:12:1e:2f:ed:fe:e2:78:8b:84:0b:08:ac:
61:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:24:8B:0A:F8:E5:49:46:65:A1:ED:38:D6:7D:6A:51:36:28:7B:D4
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/vySLCvjlSUZloe041n1qUTYoe9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.19.0/24
201.24.202.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:6f:49:83:9f:b8:c9:1a:f1:75:86:bd:47:2e:80:ba:31:3e:
02:19:a6:f8:88:1e:bc:45:9a:c6:74:a8:8d:2b:47:dd:37:d8:
c6:4f:0e:7e:63:7a:0d:c2:32:eb:46:c9:b4:f1:33:e9:f7:ab:
fa:c2:54:9b:c3:27:b7:d1:62:f6:67:87:cb:32:9e:33:c3:f9:
b9:6e:5f:49:12:de:b3:83:17:76:9e:55:2f:35:c7:94:88:bf:
bb:fc:81:0a:2c:d4:51:3a:04:9a:00:e6:55:f2:bf:79:fd:ba:
68:46:10:7c:9a:7f:aa:06:5f:89:b5:ff:17:30:df:b0:bb:f6:
69:21:c4:5e:be:94:62:cb:48:3c:e5:4d:37:ec:9e:75:55:8c:
9a:ca:d4:0f:d9:29:ac:6c:a5:78:f6:63:e9:de:c6:d8:55:8d:
cb:4c:30:b7:5c:10:7a:27:6f:0e:ce:b6:c6:a0:5d:e2:59:4b:
70:56:7c:ba:db:00:d0:6d:1b:c1:85:ab:0b:cb:6e:ff:c4:98:
c4:00:e3:7f:29:84:56:4d:ae:ea:1e:9d:cb:bf:7b:85:17:0f:
38:28:b7:b3:4f:5a:74:bf:95:76:e3:38:2c:16:14:24:81:45:
bb:a3:ee:71:35:6d:f0:a6:90:06:be:c7:ef:01:5d:5c:6f:5f:
cd:de:03:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:56:09 2026 by rpki-client