Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/vXMnmcU79Xw9a5nGVkO5FC5EudA.roa
File: vXMnmcU79Xw9a5nGVkO5FC5EudA.roa (raw, json)
Hash identifier: Q6MUbBXsF3jkoeJujjiKI4BkvBvoeHr69lWLEuORISM=
Subject key identifier: BD:73:27:99:C5:3B:F5:7C:3D:6B:99:C6:56:43:B9:14:2E:44:B9:D0
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019F84430CC150BB5F6995E3490BA458858E
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/vXMnmcU79Xw9a5nGVkO5FC5EudA.roa
Signing time: Tue 21 Jul 2026 10:40:14 +0000
ROA not before: Tue 21 Jul 2026 10:40:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34346
IP address blocks: 87.232.112.0/24 maxlen: 24
87.232.116.0/24 maxlen: 24
87.232.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:43:0c:c1:50:bb:5f:69:95:e3:49:0b:a4:58:85:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Jul 21 10:40:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd732799c53bf57c3d6b99c65643b9142e44b9d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c3:23:f6:1f:df:77:52:79:3a:fa:cb:99:5f:
1e:c5:89:19:76:5d:74:cd:15:ea:f5:89:96:bd:2a:
92:f3:39:df:3a:12:21:f2:22:73:91:cb:9c:41:3d:
38:4e:19:e8:83:65:dc:c3:a8:64:a0:a9:0d:9c:ad:
34:7f:b1:e7:8d:03:fd:f0:6f:2e:e6:57:54:24:51:
ca:5b:90:7f:b5:ae:6f:83:06:f7:f6:a5:e4:5c:22:
7d:41:3c:64:1a:24:3e:43:49:a3:da:44:a4:52:97:
f8:5d:c3:e7:87:d4:8f:4d:e3:db:dd:0e:96:1a:e4:
be:1e:57:10:e4:66:87:3d:a9:6c:9f:8f:4d:c4:cb:
ea:72:8a:37:ca:e0:f4:9f:f2:e7:12:12:8c:07:34:
76:58:3b:84:01:84:8a:ea:09:cb:16:a5:0a:5d:01:
5d:c3:9d:e7:d6:86:c2:38:69:a8:34:f3:d0:01:f4:
b2:ee:f1:af:83:d3:b1:51:58:0c:25:38:ed:f0:6d:
4a:20:67:fa:e3:f5:61:00:4b:92:de:8d:d0:38:53:
f0:6a:8a:c5:25:4c:6c:1a:a4:bf:ce:b1:5f:10:54:
fe:88:1a:ce:22:be:b8:c7:97:e2:0f:e9:1a:7b:ff:
56:af:9d:54:1e:93:3d:55:7f:21:1e:da:3a:3f:2e:
f6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:73:27:99:C5:3B:F5:7C:3D:6B:99:C6:56:43:B9:14:2E:44:B9:D0
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/vXMnmcU79Xw9a5nGVkO5FC5EudA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.112.0/24
87.232.116.0/24
87.232.124.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:19:59:33:ac:c2:6e:7e:89:ef:d5:ba:98:34:8d:72:18:58:
50:34:0d:3f:ec:bb:ed:2b:6d:b6:49:7f:5e:b3:92:3b:c6:41:
b5:fa:30:98:69:3f:a2:ed:f4:ec:f8:c1:fc:da:47:6b:dc:0b:
8f:ea:92:fd:dd:fc:da:7e:e2:cf:fc:7d:7d:bb:0a:d7:f2:f6:
e7:7f:4a:9a:2f:aa:0f:ea:b9:e2:c2:6d:3f:78:d4:59:57:83:
39:3b:6c:28:ff:d1:79:f7:ef:06:d6:b2:76:f2:15:a2:c9:f2:
e1:54:52:15:b6:a8:e2:e2:e7:db:45:98:e2:c5:0a:6d:58:24:
5e:90:08:b1:92:a0:ee:b8:dd:aa:57:51:6a:a0:86:d2:99:04:
79:b6:7b:4d:36:11:8d:f8:96:56:eb:ff:76:55:cc:c9:39:65:
6a:9d:c9:84:ae:9c:f2:0e:5a:36:3c:30:06:b0:78:c9:75:64:
d2:bf:d7:d5:d8:0c:85:22:48:3b:7d:ca:f0:3e:d2:9b:32:c4:
99:bf:a4:a8:27:9c:a9:d9:57:b9:25:1a:72:1c:f6:45:f7:ff:
b3:22:05:ae:02:d4:37:b8:28:d6:69:44:3b:43:f1:83:dd:64:
b7:62:1b:b5:22:6b:d1:44:9c:67:c9:56:28:db:9b:3d:89:fc:
6d:af:3a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:58:46 2026 by rpki-client