Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/VvsA1Kl39BglFknild5eA4Dydww.roa
File: VvsA1Kl39BglFknild5eA4Dydww.roa (raw, json)
Hash identifier: NFyWQReCFe2c01EEjfpo/UVkTf+Rhd9xSOXiVKp36g4=
Subject key identifier: 56:FB:00:D4:A9:77:F4:18:25:16:49:E2:95:DE:5E:03:80:F2:77:0C
Certificate issuer: /CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7
Certificate serial: 019F925A3A7254CF3BA2D1A8FC0B82818692
Authority key identifier: 85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/VvsA1Kl39BglFknild5eA4Dydww.roa
Signing time: Fri 24 Jul 2026 04:20:14 +0000
ROA not before: Fri 24 Jul 2026 04:20:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203677
IP address blocks: 185.127.120.0/24 maxlen: 24
185.127.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:5a:3a:72:54:cf:3b:a2:d1:a8:fc:0b:82:81:86:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85802fc1d0f3e3a4462562d2f06f2b3deff8f4e7
Validity
Not Before: Jul 24 04:20:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56fb00d4a977f418251649e295de5e0380f2770c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8a:34:3e:69:92:45:f7:7f:9a:43:39:f2:70:
a5:b5:46:23:3c:99:90:1d:a9:fb:f0:1d:b6:8c:5a:
c5:69:ba:db:86:97:92:6b:ac:bd:df:59:76:32:21:
77:81:25:08:34:1e:4c:70:40:7b:f2:59:eb:fa:2d:
d9:7e:90:12:b1:a9:21:ed:31:74:73:db:37:0e:c9:
6e:57:c6:5c:e3:20:dd:98:cb:56:62:55:7f:91:05:
26:09:19:20:01:52:db:28:7a:24:e3:0d:4d:65:ec:
35:c3:7f:46:d1:04:d5:ef:d7:4c:c0:75:75:85:5f:
96:99:b8:64:07:98:c2:d1:49:41:6d:25:fa:48:0e:
f0:bb:0e:9f:e9:8b:a5:ff:c5:b3:56:b8:15:4a:6c:
e3:1d:e1:13:44:26:81:a9:eb:5e:5a:ec:59:5d:37:
b5:1a:e2:82:0c:93:ff:c9:95:b7:9d:3a:8e:4f:e2:
82:ce:d3:dc:78:9a:eb:dd:47:0a:3d:1c:6e:83:56:
96:0b:5f:0d:f7:5e:3e:76:1f:51:c7:a5:35:f9:54:
e7:61:19:88:df:87:c8:b5:d3:f6:58:25:da:49:32:
44:3d:5a:dc:af:0f:e5:fb:07:25:c9:7e:ae:05:61:
ab:55:94:60:b2:d7:e6:84:a3:82:b6:79:58:72:ed:
9a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FB:00:D4:A9:77:F4:18:25:16:49:E2:95:DE:5E:03:80:F2:77:0C
X509v3 Authority Key Identifier:
keyid:85:80:2F:C1:D0:F3:E3:A4:46:25:62:D2:F0:6F:2B:3D:EF:F8:F4:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hYAvwdDz46RGJWLS8G8rPe_49Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/VvsA1Kl39BglFknild5eA4Dydww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/af8b29-b1af-4cf6-bf16-b05832bc6962/1/hYAvwdDz46RGJWLS8G8rPe_49Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.120.0/23
Signature Algorithm: sha256WithRSAEncryption
32:7a:07:d3:ca:55:38:82:e5:25:62:61:9f:7d:83:65:e3:11:
fa:1c:60:31:a3:a9:68:ad:86:0a:37:4f:e4:90:65:ab:4a:86:
d7:6c:da:6f:db:78:dc:69:64:a7:83:7b:1c:c4:cb:df:de:eb:
50:fa:ac:24:92:6c:53:fe:fe:16:7e:09:b6:75:00:df:e4:92:
f9:99:19:18:10:e4:a3:20:93:03:68:f1:8f:79:0b:5c:2e:c8:
b1:7a:d7:a1:b0:f2:73:da:0a:25:4d:5b:82:6d:d0:09:ad:84:
74:f5:70:cc:9b:8f:d3:b5:f1:43:07:59:77:87:13:58:b7:84:
4b:c5:7b:65:68:51:33:32:73:5e:bb:d8:8e:35:3f:6c:28:b7:
5c:fa:ed:a4:83:fa:18:c2:8d:0d:05:3d:dd:44:81:bd:eb:35:
a5:79:84:f1:ac:ed:bf:7c:be:3c:f1:da:0d:93:31:06:83:b4:
17:9e:cb:f5:81:84:dd:fd:72:13:6f:fc:28:5c:7b:56:74:59:
48:a8:0d:1b:c8:09:2f:b7:fd:5e:6d:33:bd:45:2f:6d:e4:89:
47:f2:9c:03:83:40:db:9e:04:f5:80:e3:7c:8b:dd:ba:52:97:
2b:dc:e7:01:3d:6e:45:e2:0a:8e:44:40:bc:cb:cd:82:69:0e:
01:c3:6d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:38:16 2026 by rpki-client