Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/vJGJvViXMVBX0BbZQG8EMQcvzW0.roa
File: vJGJvViXMVBX0BbZQG8EMQcvzW0.roa (raw, json)
Hash identifier: CK8vF9DVV4u6Wl7ZCweYDeRm465qIE+BaL+zat2pNHY=
Subject key identifier: BC:91:89:BD:58:97:31:50:57:D0:16:D9:40:6F:04:31:07:2F:CD:6D
Certificate issuer: /CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
Certificate serial: 019FC58F5F93EFF95CAA895C1D6C92CD50B2
Authority key identifier: 8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/vJGJvViXMVBX0BbZQG8EMQcvzW0.roa
Signing time: Mon 03 Aug 2026 02:58:55 +0000
ROA not before: Mon 03 Aug 2026 02:58:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 185.27.146.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Aug 2026 14:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c5:8f:5f:93:ef:f9:5c:aa:89:5c:1d:6c:92:cd:50:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1
Validity
Not Before: Aug 3 02:58:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc9189bd5897315057d016d9406f0431072fcd6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:62:ae:8d:f6:e8:a0:95:ee:1c:f3:f1:d0:9d:
06:ca:5e:d4:aa:17:17:e9:7f:1c:be:43:9d:6a:df:
91:83:f4:0e:7f:a3:00:34:b4:69:79:bd:9b:1f:df:
ba:51:3d:2b:a2:ee:c7:c6:b2:c9:a6:03:dc:f5:25:
08:a9:64:a4:23:41:52:de:e7:0d:75:6b:f7:c2:a0:
09:02:3c:8b:21:16:57:93:4f:99:83:6d:a4:30:b0:
37:bd:bc:1f:df:26:63:d3:c0:69:55:88:f0:4c:96:
89:3f:c1:d1:ef:f4:58:30:ec:3d:c6:ce:f4:ca:f7:
ea:df:83:2e:83:11:54:a8:ce:45:53:36:bd:b3:85:
a9:73:e0:e0:04:9b:4a:cd:d7:96:59:98:80:b9:ae:
47:db:79:49:2c:96:07:89:2d:37:1c:19:ff:da:c3:
fc:7b:61:2e:a1:7d:5e:ff:50:93:43:8c:76:fc:24:
ca:59:3d:45:cd:1d:b7:47:c7:d2:07:75:f3:e9:95:
e4:e6:14:46:5d:0a:cc:eb:e0:48:1c:d4:32:2d:aa:
7f:7a:91:c2:81:ab:8e:6d:73:11:fd:a0:c4:ac:33:
2f:2b:29:b0:68:51:49:d3:c7:97:6a:86:e6:bd:60:
48:e2:2b:b2:aa:1e:31:f1:ee:bc:1d:0a:db:57:ef:
5a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:91:89:BD:58:97:31:50:57:D0:16:D9:40:6F:04:31:07:2F:CD:6D
X509v3 Authority Key Identifier:
keyid:8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/vJGJvViXMVBX0BbZQG8EMQcvzW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.27.146.0/23
Signature Algorithm: sha256WithRSAEncryption
dd:18:b1:8f:5e:58:3f:fa:4f:70:de:76:28:78:a0:36:2a:1e:
d3:65:57:05:ae:6c:61:aa:cb:fc:b4:39:41:14:9d:69:fa:6d:
19:77:5d:4f:58:8b:82:31:4b:93:69:68:57:d6:2f:7e:04:5f:
88:bc:7d:64:ac:0e:99:40:5a:e0:eb:fc:a9:68:cc:cb:a5:6f:
b8:70:12:3f:52:cb:6c:76:8d:d0:76:59:e0:60:fa:7b:89:f8:
cb:b5:43:58:66:07:89:0b:42:82:1c:cc:c8:a6:fb:11:cf:91:
57:30:cf:c8:65:67:23:90:02:08:4d:91:98:9c:bf:a5:97:da:
1f:b9:2f:a3:df:ff:ee:7e:6a:91:d9:99:5b:1d:bd:1f:52:05:
fd:bb:52:6d:ef:73:a0:07:e4:52:31:76:cc:e2:a8:0a:cb:5a:
5b:c9:b9:9a:d1:18:53:98:49:81:5e:40:f7:31:0f:80:56:b5:
81:5e:e4:46:f7:fe:0c:0c:c6:7c:38:af:22:2c:83:e9:3a:33:
89:51:a8:f1:4e:e3:b9:01:84:69:0a:40:7b:e8:d4:71:bb:3d:
87:6f:33:84:79:c5:83:46:f3:79:48:08:10:23:44:99:18:6e:
9c:19:11:4c:a2:21:f9:5d:76:c1:60:e4:1a:6d:9f:a0:c5:26:
41:86:32:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 18:49:32 2026 by rpki-client