Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/VJaaCilXSaMFiDpDj2m9Nu8DP6E.roa
File: VJaaCilXSaMFiDpDj2m9Nu8DP6E.roa (raw, json)
Hash identifier: /Vwcg31kt8NZSUPOXZXkCRASkot9oBzCBAi0+AvtL2w=
Subject key identifier: 54:96:9A:0A:29:57:49:A3:05:88:3A:43:8F:69:BD:36:EF:03:3F:A1
Certificate issuer: /CN=a0a647dac729f47b06369c4c9741cf943953dc59
Certificate serial: 019D1C0D7B5B81FB57CC8C40F08EC9A8FE43
Authority key identifier: A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/VJaaCilXSaMFiDpDj2m9Nu8DP6E.roa
Signing time: Mon 23 Mar 2026 18:55:38 +0000
ROA not before: Mon 23 Mar 2026 18:55:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214640
IP address blocks: 45.67.15.0/24 maxlen: 24
78.109.16.0/23 maxlen: 23
82.197.73.0/24 maxlen: 24
95.141.241.0/24 maxlen: 24
185.113.11.0/24 maxlen: 24
193.53.40.0/24 maxlen: 24
2a13:7c80::/32 maxlen: 32
2a13:7c81::/32 maxlen: 48
2a13:7c82::/36 maxlen: 36
2a13:7c82:1000::/36 maxlen: 36
2a13:7c82:2000::/36 maxlen: 36
2a13:7c83:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1c:0d:7b:5b:81:fb:57:cc:8c:40:f0:8e:c9:a8:fe:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a647dac729f47b06369c4c9741cf943953dc59
Validity
Not Before: Mar 23 18:55:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54969a0a295749a305883a438f69bd36ef033fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c7:fc:a3:54:27:3c:4b:3b:71:99:a0:33:66:
20:4e:aa:a7:9d:b3:ca:d6:94:8b:73:0d:be:b4:28:
54:19:49:fa:82:c4:3a:3f:63:3b:92:b2:32:72:91:
9b:7f:92:3a:89:a6:a9:26:d0:08:53:a4:9f:7a:f7:
b7:27:36:80:3b:46:e1:9b:0d:b9:8e:ac:2a:25:b2:
34:55:75:61:d1:2f:e1:7c:70:00:35:33:52:0b:e6:
2d:26:4a:29:7b:7e:4e:a6:b8:31:2c:63:2b:46:0b:
d1:47:48:ae:37:40:79:5e:d4:f8:e7:bf:52:60:2c:
c8:d3:2d:d7:d7:a1:98:79:7e:22:46:27:01:88:73:
1b:8e:0d:4f:a9:fb:18:3e:e8:6c:9d:3f:9e:2b:3d:
fa:ae:eb:46:1c:0a:e6:c8:4d:69:4b:2a:34:1f:5e:
3a:42:4c:7a:fb:84:14:d3:0f:99:ce:01:d1:3b:16:
9a:83:56:03:80:e1:9d:74:d1:8b:0c:22:ad:f5:fe:
01:a0:0f:b3:28:11:02:c8:b1:54:0b:88:c8:1d:02:
23:60:b3:a6:fc:a9:18:b6:63:f2:2b:f0:f0:eb:61:
62:e8:a1:ac:4b:27:c7:34:28:bd:87:b8:4e:4b:8d:
be:ce:ab:0d:0f:dd:94:27:3d:91:16:af:bc:47:fe:
b8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:96:9A:0A:29:57:49:A3:05:88:3A:43:8F:69:BD:36:EF:03:3F:A1
X509v3 Authority Key Identifier:
keyid:A0:A6:47:DA:C7:29:F4:7B:06:36:9C:4C:97:41:CF:94:39:53:DC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKZH2scp9HsGNpxMl0HPlDlT3Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/VJaaCilXSaMFiDpDj2m9Nu8DP6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ba1f88-707f-41bd-b9bd-fb6983ce9dff/1/oKZH2scp9HsGNpxMl0HPlDlT3Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.15.0/24
78.109.16.0/23
82.197.73.0/24
95.141.241.0/24
185.113.11.0/24
193.53.40.0/24
IPv6:
2a13:7c80::-2a13:7c82:2fff:ffff:ffff:ffff:ffff:ffff
2a13:7c83:1::/48
Signature Algorithm: sha256WithRSAEncryption
8f:d3:5e:21:5e:fb:2e:37:29:d9:d0:fa:be:fa:e7:71:f2:65:
f3:f5:3b:d5:38:bf:44:dc:bf:b8:90:ba:6a:50:ec:f2:ad:36:
76:56:b7:69:1e:b1:ba:60:6d:86:4f:a5:40:7d:f0:80:9d:ee:
09:ce:56:23:d4:22:c3:a8:08:10:49:ca:14:5f:5c:71:b3:a2:
15:33:af:75:0c:e1:a6:02:22:24:43:fe:d4:0f:a8:0d:a0:98:
40:59:28:16:00:1b:83:28:4e:b6:e8:c6:be:e3:2d:95:28:f2:
33:ab:87:92:63:04:59:3b:a2:a7:ab:d5:f1:d8:2e:96:1a:2e:
61:0e:4c:cf:66:b0:22:af:f1:40:5d:ab:d0:94:d2:98:68:0f:
ca:0e:62:92:28:2c:10:86:d2:04:ca:6a:0b:ee:ef:23:15:f4:
fe:6d:65:64:f2:f4:e9:e8:dd:ad:e2:7e:90:82:ea:70:d6:e3:
26:7b:3c:ef:2e:0f:dc:4d:91:2e:ad:a8:ac:51:05:c9:7f:99:
32:7f:a3:7a:c0:f6:72:ae:94:6f:80:1e:20:35:e5:63:97:78:
ab:01:aa:21:43:ad:98:32:78:13:8d:98:27:0a:67:fd:83:c7:
c1:e5:60:97:af:0b:f7:88:de:8e:5a:bc:18:1d:28:82:63:6a:
9c:5a:91:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:02:06 2026 by rpki-client