Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/vA38mKVeUNTTR1gux_xwt_wRbSc.roa
File: vA38mKVeUNTTR1gux_xwt_wRbSc.roa (raw, json)
Hash identifier: JURl/3RKnR0A6HC3ZEKnRoj6lhRtP0audL8ZXJoyiFs=
Subject key identifier: BC:0D:FC:98:A5:5E:50:D4:D3:47:58:2E:C7:FC:70:B7:FC:11:6D:27
Certificate issuer: /CN=08828bc7dd784850b896ed7ded9483db5f01e059
Certificate serial: 019EA0DA6DEEB4A18568366B2B57E75158CF
Authority key identifier: 08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/vA38mKVeUNTTR1gux_xwt_wRbSc.roa
Signing time: Sun 07 Jun 2026 06:52:09 +0000
ROA not before: Sun 07 Jun 2026 06:52:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212171
IP address blocks: 213.177.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Jun 2026 15:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a0:da:6d:ee:b4:a1:85:68:36:6b:2b:57:e7:51:58:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08828bc7dd784850b896ed7ded9483db5f01e059
Validity
Not Before: Jun 7 06:52:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc0dfc98a55e50d4d347582ec7fc70b7fc116d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:71:ea:ce:fc:b9:6c:cc:85:77:8c:02:fd:a1:
5b:3e:7a:15:e1:1d:e1:51:16:b5:05:58:4a:92:fb:
0d:05:e7:0b:99:31:79:13:e3:3a:eb:44:78:10:4a:
4e:ec:40:4b:43:15:2b:fc:a9:f5:5e:ee:de:d3:61:
66:8a:60:3f:d1:eb:ba:4a:86:92:da:6f:5a:d0:f5:
64:c0:46:36:ce:33:68:c9:48:e5:6a:3f:1f:f3:6a:
fa:95:69:7b:d9:6d:20:99:5c:01:cd:8c:56:dc:90:
19:8f:1a:e0:9f:3f:77:19:a1:8b:f7:27:bb:ba:b9:
30:5e:80:a2:88:c9:4a:51:14:f5:e1:10:af:a5:db:
69:1c:dc:19:97:44:e3:71:bb:3a:5d:63:bb:9b:2a:
c6:dc:a7:ae:4f:04:0c:47:0e:7c:42:ea:33:f1:b3:
56:cb:7b:e1:39:4f:e4:65:7c:60:b6:98:e5:1d:4b:
f9:4f:61:bb:65:c5:ff:37:7f:76:84:f9:00:6c:ed:
cd:e6:19:34:e2:9b:ad:9d:0b:58:b5:d9:d8:07:07:
aa:a5:34:aa:cf:76:f7:99:9a:cd:4e:59:ed:d8:fd:
33:40:20:1a:92:ce:6b:ee:34:05:02:6b:ab:48:8f:
48:ac:28:db:d3:13:b3:82:b8:9a:44:3c:bd:0c:b5:
9a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:0D:FC:98:A5:5E:50:D4:D3:47:58:2E:C7:FC:70:B7:FC:11:6D:27
X509v3 Authority Key Identifier:
keyid:08:82:8B:C7:DD:78:48:50:B8:96:ED:7D:ED:94:83:DB:5F:01:E0:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIKLx914SFC4lu197ZSD218B4Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/vA38mKVeUNTTR1gux_xwt_wRbSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/866754-f0ef-4900-8dd0-6c0403c9a440/1/CIKLx914SFC4lu197ZSD218B4Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.177.170.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:94:5d:71:eb:ca:4a:df:42:d6:68:91:6c:25:46:ec:12:fc:
b6:47:d7:74:a7:28:c5:27:f5:6c:e3:2d:5c:61:49:3e:e3:dc:
74:7d:98:41:b6:70:b8:0d:6f:40:f4:bb:41:fe:49:e1:e8:21:
c3:c9:41:a3:2d:2f:fd:26:61:c5:d2:22:75:13:3f:28:e1:ff:
7a:73:6d:88:b3:5f:2e:f6:66:4a:32:be:07:c3:4f:82:86:00:
74:d4:f8:b4:ab:ce:f2:78:5e:65:b5:ab:c0:ea:65:b7:ff:3d:
95:e1:e4:c1:80:02:a4:9f:60:72:22:d8:8e:92:84:8f:20:66:
06:8a:8c:fe:28:a5:43:ac:9d:bd:7d:18:8c:7f:1c:cc:86:1e:
3e:e0:42:14:ee:10:33:c7:4d:bc:09:5f:55:b1:1b:4e:c2:52:
71:2c:59:f6:ff:25:97:ee:69:2f:b5:45:2e:d4:22:91:ad:e6:
4e:f5:b0:09:9e:24:51:cf:19:d4:8e:2a:4a:56:fc:4a:eb:8b:
97:12:7d:c8:0e:9d:50:a1:b1:34:b3:a2:61:a0:a0:4a:11:05:
c7:d4:63:a3:9c:1b:91:99:57:79:98:b2:85:6d:84:32:b3:cb:
92:33:d3:a1:1e:87:ae:24:dc:d6:a2:91:d5:19:c1:94:8b:2a:
ac:6f:d5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 7 22:55:43 2026 by rpki-client