Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/VGo-f7sQ3Fnxw9qAgcMBBzFF_nI.roa
File: VGo-f7sQ3Fnxw9qAgcMBBzFF_nI.roa (raw, json)
Hash identifier: j5ZRgegG9/g570hUW3B2PYcO1N+rcjPwEmBYOXqlNxk=
Subject key identifier: 54:6A:3E:7F:BB:10:DC:59:F1:C3:DA:80:81:C3:01:07:31:45:FE:72
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019DC151A772112E74CA8613F10C88677BEF
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/VGo-f7sQ3Fnxw9qAgcMBBzFF_nI.roa
Signing time: Fri 24 Apr 2026 21:07:27 +0000
ROA not before: Fri 24 Apr 2026 21:07:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198556
IP address blocks: 77.90.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c1:51:a7:72:11:2e:74:ca:86:13:f1:0c:88:67:7b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 24 21:07:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=546a3e7fbb10dc59f1c3da8081c301073145fe72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2b:d9:c1:40:2c:95:55:0d:9c:70:ce:41:30:
f7:7c:af:45:11:9e:69:9f:af:8b:a2:09:89:58:e9:
9d:bb:75:b3:7f:2a:bd:eb:94:b1:be:88:f1:fc:10:
66:8b:8c:e7:a6:51:5c:72:92:a8:cc:c5:44:b3:a9:
ca:55:4c:cd:29:29:a8:f6:98:9d:be:4b:52:38:e3:
c4:42:84:87:9f:dc:f1:24:ca:f8:fa:25:72:1a:15:
f8:4a:23:36:75:6b:f0:06:9f:a9:e7:c9:a3:ba:05:
ed:ac:f2:93:e1:61:ca:9e:b0:b7:50:bc:82:3f:a4:
43:af:4d:72:84:c1:b3:db:6f:0f:cd:15:7e:9c:03:
c9:44:5e:15:44:38:cc:35:7f:57:56:ab:50:30:48:
b4:ce:4c:e1:7c:ae:07:b3:3d:1f:1f:f9:ee:23:89:
3e:66:d5:53:67:5b:d3:e3:3f:9a:23:15:6a:71:a4:
c2:fe:09:3d:22:e8:db:e2:e6:85:7b:9d:9c:3b:9c:
ba:ab:8e:2b:7d:8e:85:74:e9:b6:02:07:3d:df:fb:
50:b2:66:0b:20:5c:d2:de:5a:31:86:37:e4:08:27:
fb:50:45:e0:e7:8b:63:97:d1:60:f7:e1:9a:d2:b4:
32:35:d3:46:82:a4:c4:f1:e2:cc:86:b5:ff:04:eb:
7e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:6A:3E:7F:BB:10:DC:59:F1:C3:DA:80:81:C3:01:07:31:45:FE:72
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/VGo-f7sQ3Fnxw9qAgcMBBzFF_nI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.30.0/24
Signature Algorithm: sha256WithRSAEncryption
93:23:34:b9:a2:78:43:5a:47:9b:23:df:99:0f:ad:c6:ef:98:
1c:bd:c4:20:b5:ba:b2:15:69:ce:12:d3:d9:ea:33:d0:b0:9e:
61:90:9a:31:34:3a:9d:5a:a3:d8:79:89:ef:7d:d6:0c:43:4f:
f2:0b:8e:b3:71:6f:a7:67:7f:ab:0d:04:a3:d6:86:43:88:76:
7d:36:da:cd:fa:c0:8e:a1:6b:14:9e:3f:ba:3e:2e:a7:e7:e9:
65:33:89:a9:c9:86:a7:f2:6f:85:4b:e3:74:96:77:2e:bb:10:
f6:6b:40:2e:88:e9:da:b8:6e:c1:e9:dd:dc:4c:76:37:ee:5c:
90:40:e6:2d:b5:b4:72:00:b8:0e:70:1c:24:de:cd:51:76:13:
75:30:99:20:39:a4:c2:cb:26:3b:2d:5d:48:24:c6:f0:40:f1:
ce:80:b4:8a:8d:5a:d6:f6:9a:4a:a9:c3:10:8f:36:32:35:c8:
48:9d:2d:8f:57:18:90:52:21:ef:af:7d:0c:85:09:69:c8:19:
d5:4a:38:61:a5:10:fb:cc:32:c8:c4:b0:f9:17:64:4d:e1:5b:
d0:bd:f4:ac:22:fc:f3:21:b9:fa:9c:9e:84:49:fb:f9:c1:4a:
3a:2c:d6:a8:f7:c4:84:ea:fa:45:a8:ab:46:77:36:9e:a3:5a:
c7:d5:0c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:37:08 2026 by rpki-client