Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/vdw2g8mua6v5MaX9zq9ptin8WZU.roa
File: vdw2g8mua6v5MaX9zq9ptin8WZU.roa (raw, json)
Hash identifier: WC3y5jPtfdBhD+7XepOF2nEWYcqme72qdULKXacsZII=
Subject key identifier: BD:DC:36:83:C9:AE:6B:AB:F9:31:A5:FD:CE:AF:69:B6:29:FC:59:95
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A0CC8ADC6A656E414B9D411A3144564E5F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/vdw2g8mua6v5MaX9zq9ptin8WZU.roa
Signing time: Wed 23 Sep 2026 04:34:07 +0000
ROA not before: Wed 23 Sep 2026 04:34:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207359
IP address blocks: 62.76.224.0/24 maxlen: 24
194.58.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 17:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:8a:dc:6a:65:6e:41:4b:9d:41:1a:31:44:56:4e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 23 04:34:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bddc3683c9ae6babf931a5fdceaf69b629fc5995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1a:b5:02:11:40:96:47:f5:7a:63:b3:b8:84:
fc:fc:e7:a7:bc:3b:50:01:b0:6f:22:ae:8c:3b:02:
1f:34:31:e6:0a:f1:e7:c5:31:c3:6d:a2:9f:32:fa:
60:59:f3:0b:6a:d9:b2:b8:74:a2:a0:cb:b2:da:e3:
f7:f4:3c:9e:da:fc:6a:45:2c:26:ba:b8:b3:23:32:
63:bc:9c:67:bf:7a:db:13:52:f7:b6:bc:58:0d:57:
af:a5:39:ed:ed:b2:50:f0:21:f5:3a:b2:4a:99:c2:
02:00:ff:1d:a8:f7:d5:9a:3d:92:2f:5d:40:cb:b6:
84:a2:48:d3:66:6a:0e:84:56:6e:27:3e:0d:7e:a0:
c3:9e:dc:b9:45:c0:4f:0f:36:ca:e8:8f:89:9d:62:
45:16:07:f7:b3:05:f2:f4:38:72:79:b5:7f:23:4e:
b9:b0:2d:ed:2a:c6:76:dd:fe:41:d4:bf:76:49:b9:
f6:85:3e:24:52:b8:f3:12:2c:b6:ea:9b:be:1c:4d:
71:d2:a0:16:49:d9:9a:4d:0b:3c:2c:fa:55:ef:2b:
89:09:1b:b1:9a:25:d1:d3:16:a9:f3:0d:13:ac:37:
e9:4f:61:ae:2a:dc:5e:22:53:f0:14:94:6c:0e:bd:
5d:81:32:77:43:b2:08:f1:2e:3e:ff:80:ff:92:82:
d5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DC:36:83:C9:AE:6B:AB:F9:31:A5:FD:CE:AF:69:B6:29:FC:59:95
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/vdw2g8mua6v5MaX9zq9ptin8WZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.224.0/24
194.58.43.0/24
Signature Algorithm: sha256WithRSAEncryption
17:f1:c3:eb:ff:b6:97:27:ad:4f:a8:92:1c:9c:4d:1e:b7:b9:
00:eb:21:20:3c:9f:ef:43:8c:b7:3c:ac:88:85:75:99:5c:11:
7f:22:7b:b0:df:6d:21:31:c3:88:e8:b4:a5:34:29:93:49:42:
2f:fc:6b:71:24:43:e1:11:c5:24:3f:53:f1:da:e4:52:02:cf:
6c:07:72:47:bf:91:c7:fb:2f:f6:c4:49:88:d9:2b:0f:cf:27:
5d:b2:ea:d4:c8:6f:16:91:31:25:74:a1:a0:18:bb:2b:0a:d9:
00:47:06:20:0b:c3:84:49:5d:d7:ad:8d:51:40:cc:97:87:95:
19:a3:47:e0:7c:27:2c:6e:3c:5d:c8:7f:c3:ad:9e:2b:70:d4:
89:91:10:12:5a:9d:20:cd:6d:42:99:0e:05:6b:bf:29:99:49:
00:12:3e:71:56:c2:78:7a:5e:28:0d:bb:e0:5e:16:04:65:80:
2e:00:98:60:9e:e7:e6:75:38:76:79:d3:7d:68:3a:ca:30:37:
2b:2a:28:4a:6a:17:2a:e7:c7:7c:d2:a1:9b:7e:fe:f0:66:fa:
04:e1:02:c7:fd:8b:39:0b:56:ce:a8:15:23:cb:2f:e9:dc:92:
ea:4c:4c:77:2c:05:fd:d0:36:ae:48:e4:6d:85:66:8e:06:c3:
5f:6f:4b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:02:25 2026 by rpki-client