Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/vHpNG066C7qb6w3seYRGvSbcLTM.roa
File: vHpNG066C7qb6w3seYRGvSbcLTM.roa (raw, json)
Hash identifier: oOMKXuPYcJhhb1ks0FKSqMbqfUNTbYofrvqb7j5sseA=
Subject key identifier: BC:7A:4D:1B:4E:BA:0B:BA:9B:EB:0D:EC:79:84:46:BD:26:DC:2D:33
Certificate issuer: /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial: 019F46B570DF70426084B5F80CA371E5E267
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/vHpNG066C7qb6w3seYRGvSbcLTM.roa
Signing time: Thu 09 Jul 2026 11:48:43 +0000
ROA not before: Thu 09 Jul 2026 11:48:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197173
IP address blocks: 95.155.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 04:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:b5:70:df:70:42:60:84:b5:f8:0c:a3:71:e5:e2:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Validity
Not Before: Jul 9 11:48:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc7a4d1b4eba0bba9beb0dec798446bd26dc2d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b3:c5:8c:63:0f:a8:b8:a5:db:9f:6a:ef:0c:
30:42:ae:78:50:3d:0a:1d:a7:e9:cb:96:6a:90:05:
89:84:81:f6:2a:49:0d:c4:3f:df:f4:96:4c:11:a5:
3c:60:69:8b:d6:e7:6d:1b:da:b9:0e:8c:23:b8:cb:
89:60:c2:7a:a7:a7:f7:fd:c3:fc:e2:68:8b:e7:20:
4b:d2:5f:20:49:7b:b4:c0:cd:2d:90:04:e0:37:7a:
bb:42:98:43:bb:29:1b:2a:37:4d:ce:c2:e9:3f:36:
1c:d7:c6:61:61:68:bd:39:34:e7:31:04:63:e0:c8:
4e:75:63:ba:fd:da:a5:30:86:ed:a2:28:7a:06:55:
48:7d:74:77:1e:f8:3f:f9:f6:d7:03:3e:3d:ec:84:
64:df:f1:87:b5:ef:1e:8a:2f:19:ba:e5:a6:2b:28:
62:f0:99:65:5c:ab:dd:64:1a:f4:3d:23:1f:c4:34:
3d:bc:51:a7:c6:a3:b2:8b:e5:41:52:20:17:41:75:
dc:5c:bb:3d:f8:a7:35:98:e5:f7:32:97:d7:55:88:
c4:0b:91:5f:55:d0:4b:6c:27:f6:8c:3c:e7:b3:01:
dd:00:d6:ca:90:fe:88:74:4f:b9:e4:5d:5d:bf:28:
af:74:97:a4:5e:f4:d9:c2:dd:5d:21:87:c5:f8:a0:
76:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:7A:4D:1B:4E:BA:0B:BA:9B:EB:0D:EC:79:84:46:BD:26:DC:2D:33
X509v3 Authority Key Identifier:
keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/vHpNG066C7qb6w3seYRGvSbcLTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.155.132.0/24
Signature Algorithm: sha256WithRSAEncryption
42:98:29:b1:47:89:1c:ab:d6:de:9c:6c:6d:c1:bb:80:36:88:
35:f0:cc:05:84:f8:7c:c4:cb:8b:8d:ab:fd:ba:7a:dd:1f:10:
52:fb:78:1c:a1:07:05:9c:53:61:be:31:f9:a0:b0:e4:89:c0:
32:20:b3:ee:19:77:40:6b:e3:42:60:ad:36:c8:ff:6d:42:d8:
2a:6b:c8:4d:66:2d:fb:5b:52:1a:ae:df:b4:4e:3a:df:4e:d5:
a8:d9:ca:96:dc:cd:2d:c7:74:b4:db:2d:d8:d0:b9:b1:7b:56:
bd:52:75:a8:f8:49:58:2b:b9:27:83:9c:42:2a:ed:6d:26:f6:
9f:c0:bb:68:d6:14:35:5b:86:9a:20:53:19:6d:dc:db:b2:5f:
a5:44:38:d6:28:5a:ee:57:3e:11:ca:8b:fc:34:c6:c9:60:dc:
e9:45:ad:e7:92:44:92:c6:0a:04:99:00:a1:57:3e:92:a9:76:
5d:95:ed:eb:11:52:eb:f0:31:9e:21:f1:0a:27:61:c7:5b:7d:
b1:ec:d4:23:53:cd:c1:d0:26:89:1a:9b:03:04:9f:f0:d1:b6:
73:96:c6:f9:ca:64:fc:9b:e4:49:ad:64:68:10:1b:98:4e:f9:
dd:8a:67:16:4d:3c:af:b9:5e:42:83:c8:2c:ac:d3:71:21:a9:
1f:61:69:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 14:30:10 2026 by rpki-client