Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/rVtYG1t1kFSBumH09ztgWtXOLms.roa
File: rVtYG1t1kFSBumH09ztgWtXOLms.roa (raw, json)
Hash identifier: 5TDRGd+UH6e4pBsAYTXlBImnc2rmW4yNy3uMoKm5V5I=
Subject key identifier: AD:5B:58:1B:5B:75:90:54:81:BA:61:F4:F7:3B:60:5A:D5:CE:2E:6B
Certificate issuer: /CN=1550afae2baefb6b88f9751bb3218eb39b94b576
Certificate serial: 019F6F8DAD028DB49B6043B4725BEC229A30
Authority key identifier: 15:50:AF:AE:2B:AE:FB:6B:88:F9:75:1B:B3:21:8E:B3:9B:94:B5:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FVCvriuu-2uI-XUbsyGOs5uUtXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/rVtYG1t1kFSBumH09ztgWtXOLms.roa
Signing time: Fri 17 Jul 2026 10:09:43 +0000
ROA not before: Fri 17 Jul 2026 10:09:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61221
IP address blocks: 5.252.144.0/23 maxlen: 23
5.252.144.0/24 maxlen: 24
5.252.145.0/24 maxlen: 24
5.252.146.0/23 maxlen: 23
5.252.146.0/24 maxlen: 24
5.252.147.0/24 maxlen: 24
185.14.244.0/23 maxlen: 23
185.14.244.0/24 maxlen: 24
185.14.245.0/24 maxlen: 24
185.14.246.0/23 maxlen: 23
185.14.246.0/24 maxlen: 24
185.14.247.0/24 maxlen: 24
2a03:b840:2::/48 maxlen: 48
2a03:b840:3::/48 maxlen: 64
2a03:b840:12::/48 maxlen: 48
2a03:b840:13::/48 maxlen: 48
2a03:b840:100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/FVCvriuu-2uI-XUbsyGOs5uUtXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/FVCvriuu-2uI-XUbsyGOs5uUtXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FVCvriuu-2uI-XUbsyGOs5uUtXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6f:8d:ad:02:8d:b4:9b:60:43:b4:72:5b:ec:22:9a:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1550afae2baefb6b88f9751bb3218eb39b94b576
Validity
Not Before: Jul 17 10:09:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad5b581b5b75905481ba61f4f73b605ad5ce2e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3e:d3:0c:72:41:41:72:1f:54:03:a0:03:82:
3a:d8:16:f8:26:7e:9c:51:3e:39:da:ca:79:7b:f0:
9f:dc:68:04:6b:66:bf:5c:74:0e:6f:b5:b1:65:d7:
4b:72:50:44:56:b4:b5:a5:08:40:7c:5e:0e:ce:59:
e2:4a:ba:23:ca:c8:b5:f0:f7:49:72:2a:d0:ee:8e:
9b:7f:8b:10:43:ad:aa:5a:e3:90:ea:83:c2:fa:43:
81:a3:00:ed:53:9e:6b:df:84:8d:85:4b:45:12:d8:
9e:65:d9:0a:68:c3:8e:63:d4:53:42:94:a1:e4:3e:
d1:50:01:e9:3b:a8:0f:e4:09:05:1d:d5:a9:1c:0f:
ef:1d:c6:c7:ca:88:9f:de:11:31:eb:e3:1f:d0:ef:
e1:19:c4:b6:6a:83:e7:aa:c4:a5:a1:32:52:94:7d:
aa:66:8e:5d:7f:ae:e2:e1:12:4a:d0:c7:74:e1:60:
22:35:bd:a5:68:b5:b7:aa:cd:fd:89:7f:cd:f3:47:
60:ca:3f:1b:8c:19:83:41:d5:aa:0e:ff:a7:e7:74:
bf:9e:a9:8f:80:1f:03:7b:f9:ff:1c:c1:f7:74:38:
b6:64:75:68:c1:57:e8:c5:10:71:b3:ca:7f:18:fa:
dd:5c:2b:45:e2:c2:76:7c:ac:08:fc:f7:83:6e:34:
76:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:5B:58:1B:5B:75:90:54:81:BA:61:F4:F7:3B:60:5A:D5:CE:2E:6B
X509v3 Authority Key Identifier:
keyid:15:50:AF:AE:2B:AE:FB:6B:88:F9:75:1B:B3:21:8E:B3:9B:94:B5:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FVCvriuu-2uI-XUbsyGOs5uUtXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/rVtYG1t1kFSBumH09ztgWtXOLms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6278c6-c201-4740-a5f1-66d671f842b3/1/FVCvriuu-2uI-XUbsyGOs5uUtXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.144.0/22
185.14.244.0/22
IPv6:
2a03:b840:2::/47
2a03:b840:12::/47
2a03:b840:100::/48
Signature Algorithm: sha256WithRSAEncryption
8c:75:20:9e:a8:59:08:dc:7f:d4:46:26:5b:f1:c1:42:e9:66:
b7:e7:d7:89:f1:11:46:be:5f:e4:3a:83:de:d2:70:49:4e:87:
a4:c1:13:e9:f1:c0:fe:5c:9d:69:21:a4:0f:b2:3c:a1:33:63:
75:b8:60:1c:15:db:f9:9d:f2:ff:da:61:25:c3:6e:06:fb:4d:
78:bb:73:73:df:59:20:70:aa:1f:6e:af:2b:60:4a:2d:17:99:
06:1c:7f:17:50:38:b4:49:ab:49:85:29:6a:6d:52:4d:c8:ab:
1c:9c:78:f7:a9:b1:7c:c9:1f:c0:8e:40:31:d5:b4:8b:43:16:
65:06:3b:00:9f:b3:89:5d:73:a9:f1:16:84:57:6e:2b:f8:51:
48:bd:89:89:69:42:b4:b4:db:a4:75:70:df:d1:71:8c:02:69:
ab:fb:2a:98:a0:1b:85:44:19:a2:8a:aa:76:00:c7:ed:c8:3d:
32:46:be:89:35:0e:3c:21:c8:83:0c:a3:76:0b:8a:5c:f3:85:
d4:cb:b2:8e:61:9c:4a:26:f0:24:bf:24:3e:fd:1c:59:2a:9e:
89:3b:ee:fd:21:09:4e:5b:4f:04:d0:60:f9:35:d2:a2:3a:d9:
88:a9:c7:e1:e1:0c:05:02:d9:d6:42:fb:81:c9:03:e6:ae:be:
4f:5d:30:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:10:11 2026 by rpki-client