Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/VTknZ-I_GU8r0qWqKMpUO2ZewjE.roa
File: VTknZ-I_GU8r0qWqKMpUO2ZewjE.roa (raw, json)
Hash identifier: 3hD9W96lP9a4vkoDA7OXWeZO5moSVt18MKLKHlgk0dU=
Subject key identifier: 55:39:27:67:E2:3F:19:4F:2B:D2:A5:AA:28:CA:54:3B:66:5E:C2:31
Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial: 019D19B87D69C2F6DC671103DAFA796184E2
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/VTknZ-I_GU8r0qWqKMpUO2ZewjE.roa
Signing time: Mon 23 Mar 2026 08:03:34 +0000
ROA not before: Mon 23 Mar 2026 08:03:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204457
IP address blocks: 45.156.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:19:b8:7d:69:c2:f6:dc:67:11:03:da:fa:79:61:84:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Validity
Not Before: Mar 23 08:03:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55392767e23f194f2bd2a5aa28ca543b665ec231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:67:72:76:af:8e:9a:f4:5c:e3:86:ae:08:c9:
d7:51:5e:29:9b:f3:2e:55:be:f7:a5:f5:93:01:c5:
70:91:bd:c0:d7:b2:ad:45:1c:59:38:35:be:d9:af:
55:ea:20:6c:ed:7f:e1:ff:da:86:fd:da:51:19:f9:
6a:6f:df:80:4f:ea:f3:ac:95:a6:92:be:8f:10:95:
81:b7:ff:91:4b:53:c6:e5:47:db:c8:89:5d:7a:ae:
a0:44:34:f8:95:3a:c1:e8:3c:fa:80:de:08:a0:59:
72:4d:a1:b5:33:e9:99:0e:c8:d2:c6:33:1f:33:8e:
57:84:74:9c:a8:00:ce:09:79:df:9d:11:d7:da:8d:
8f:4b:84:dc:6b:d8:e7:3b:a4:1e:35:ed:ff:41:9c:
9b:d3:66:2b:11:dd:9c:af:f8:b5:73:bd:8a:6a:9b:
67:52:ca:29:17:f9:58:5e:ab:29:aa:a6:bd:61:0e:
fd:d3:28:e1:6b:26:2f:c7:f9:0f:72:81:24:36:ae:
be:d2:13:d4:a5:73:31:63:d5:19:ce:d0:27:b7:7d:
3a:3c:5e:0d:ee:dd:e2:8b:e1:77:1b:aa:13:12:12:
62:52:88:5e:d9:c2:2a:7c:a9:92:3f:8b:51:d3:de:
3a:2f:8d:ea:56:b0:46:f7:f9:23:1e:84:16:ca:7c:
8f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:39:27:67:E2:3F:19:4F:2B:D2:A5:AA:28:CA:54:3B:66:5E:C2:31
X509v3 Authority Key Identifier:
keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/VTknZ-I_GU8r0qWqKMpUO2ZewjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.29.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:d9:93:ef:fd:92:66:d9:4b:76:ed:cf:b3:22:f7:54:39:d7:
3e:45:4c:77:92:ef:e9:38:12:48:65:2e:e9:73:71:cb:d0:8a:
22:15:0d:41:10:a1:ec:a6:36:83:cd:af:33:0f:77:8c:61:fd:
1e:ff:32:cd:42:87:de:48:84:8f:05:98:28:8c:48:8b:84:51:
da:8d:2d:d3:1d:d5:11:3d:9f:38:0b:c5:12:0d:1d:e9:8b:2a:
9a:91:9f:f6:b8:c1:1e:64:aa:08:f1:9f:91:62:ce:e5:3f:7c:
b9:9a:01:69:87:b4:86:28:ef:78:72:9d:9c:87:0d:f6:2d:be:
3f:9e:cc:55:93:48:8e:4e:6e:60:21:65:8d:38:e9:a2:8f:e4:
83:ba:22:7e:bc:3a:3f:c4:77:e1:c7:54:66:ec:ec:54:3e:2d:
18:71:11:5d:50:a6:40:ba:a4:b8:af:34:b0:4a:3a:a7:42:04:
ab:88:89:db:0f:d6:8d:57:12:17:ac:f6:d5:c5:3a:57:34:e4:
38:68:4c:6b:f0:6a:ff:f2:9b:02:d4:81:ec:f3:c2:61:26:c8:
ee:15:11:5e:ef:a9:67:70:5e:5a:13:c1:d0:0d:3f:86:00:0d:
15:94:ad:13:d0:1f:3a:a7:19:c1:1f:46:ac:5b:ac:39:4f:8c:
f1:be:84:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:24:58 2026 by rpki-client