Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/VPi2ebLJADEknE0vjMS8E-YQvPQ.roa
File: VPi2ebLJADEknE0vjMS8E-YQvPQ.roa (raw, json)
Hash identifier: oO735iZZLpkD9NxJ8YTop9o4debqleHv7iMJ/1qzafM=
Subject key identifier: 54:F8:B6:79:B2:C9:00:31:24:9C:4D:2F:8C:C4:BC:13:E6:10:BC:F4
Certificate issuer: /CN=66306e3acf3eb903cc73973fb62860b663516c93
Certificate serial: 019EE20969996434F84EE466EA2E79491647
Authority key identifier: 66:30:6E:3A:CF:3E:B9:03:CC:73:97:3F:B6:28:60:B6:63:51:6C:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/VPi2ebLJADEknE0vjMS8E-YQvPQ.roa
Signing time: Fri 19 Jun 2026 22:38:48 +0000
ROA not before: Fri 19 Jun 2026 22:38:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34984
IP address blocks: 80.173.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e2:09:69:99:64:34:f8:4e:e4:66:ea:2e:79:49:16:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66306e3acf3eb903cc73973fb62860b663516c93
Validity
Not Before: Jun 19 22:38:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54f8b679b2c90031249c4d2f8cc4bc13e610bcf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ef:23:77:a0:37:3b:2f:4c:94:38:08:3b:35:
2f:51:66:0b:35:05:a7:b0:06:0a:8f:79:9e:62:ac:
d3:99:6f:45:34:02:cb:fe:2b:ed:4e:e5:c6:a7:ed:
03:77:92:e6:96:13:90:ed:57:38:06:0f:bd:de:b2:
51:bd:c0:1d:61:db:67:29:28:f9:0e:3b:81:88:06:
b8:54:0b:a8:de:ff:a8:45:ec:0e:43:d3:85:35:c6:
b1:41:5f:2b:10:01:23:8f:eb:c6:e5:c6:b6:37:fe:
68:69:ba:7a:bc:ce:f9:2e:1d:e4:19:2a:c6:12:7c:
0b:c6:b8:62:32:fe:68:ed:9a:39:26:90:37:4e:6a:
3d:06:cd:5c:17:71:4c:92:e1:67:56:50:e9:8c:09:
15:6f:c9:85:94:66:01:e8:3f:2c:54:e4:59:30:d0:
b6:6c:7c:73:5b:7a:db:7b:73:c3:9a:b7:d5:6c:1d:
23:8e:8f:ad:5b:82:e1:f6:2a:48:5c:c9:b4:25:cd:
e1:55:56:09:ee:ba:20:e4:e9:38:7d:ca:99:3f:27:
70:63:37:db:da:d4:47:fa:ec:e5:d9:77:91:eb:d0:
e9:dc:ad:c2:e9:68:79:ce:5a:38:b3:76:d1:c3:0f:
c1:29:50:95:f3:14:5e:eb:45:6c:67:4f:cc:33:51:
a2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F8:B6:79:B2:C9:00:31:24:9C:4D:2F:8C:C4:BC:13:E6:10:BC:F4
X509v3 Authority Key Identifier:
keyid:66:30:6E:3A:CF:3E:B9:03:CC:73:97:3F:B6:28:60:B6:63:51:6C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZjBuOs8-uQPMc5c_tihgtmNRbJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/VPi2ebLJADEknE0vjMS8E-YQvPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/64dabb-7a01-40d5-a587-ee27cbca747e/1/ZjBuOs8-uQPMc5c_tihgtmNRbJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.173.206.0/24
Signature Algorithm: sha256WithRSAEncryption
16:8a:d9:2d:62:39:0f:b2:e9:5b:fd:52:92:fc:29:d1:0d:3d:
7d:7f:66:44:61:db:20:2f:bb:3d:48:46:81:49:c3:84:e1:dc:
1b:2a:8c:39:25:5f:d4:e7:ac:39:d5:79:0e:19:6b:0f:76:f5:
ea:ff:c7:9b:3a:96:b7:f9:e1:b0:e7:1a:0a:ce:05:56:6f:3d:
1e:ea:49:35:58:d3:dd:cb:0a:72:21:40:94:09:03:21:e2:78:
dd:9e:15:99:05:01:32:d8:03:1e:2c:e4:45:1f:e1:6d:43:f4:
68:74:1c:73:7c:88:41:98:0d:9f:e6:2d:fc:90:87:81:66:5b:
ad:dc:57:d3:62:0d:bb:71:c5:91:03:77:c5:30:86:28:a1:4a:
67:76:0e:cf:49:58:bc:5b:9c:12:5e:d5:57:0d:65:05:47:fc:
61:f2:b2:57:f4:aa:0e:8c:d6:71:99:b5:6a:9a:23:2b:ce:cb:
a7:32:7f:1e:10:ea:0d:5a:48:96:42:02:41:91:7f:88:74:c2:
63:5d:5c:29:a3:85:4a:e4:8a:ea:27:c8:50:c4:3c:71:07:e9:
c4:22:37:bb:c4:21:2b:8b:70:2e:f9:52:d8:ee:98:01:ff:ef:
17:21:65:8b:d6:53:86:8f:9a:a9:3f:8e:15:c2:17:69:9f:af:
0a:17:ee:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 03:03:32 2026 by rpki-client