Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/vvIw8F-IOEioMYu93B5YO0Hq9vk.roa
File: vvIw8F-IOEioMYu93B5YO0Hq9vk.roa (raw, json)
Hash identifier: WtTZswHjYBJIgKk4bHAyXKnVfNJT2/jg2Qz9ZX4kuRE=
Subject key identifier: BE:F2:30:F0:5F:88:38:48:A8:31:8B:BD:DC:1E:58:3B:41:EA:F6:F9
Certificate issuer: /CN=2393ff21c6f7310757a9dcd781da8805f23794d8
Certificate serial: 019D2046B809FC0185638492153EEF071B22
Authority key identifier: 23:93:FF:21:C6:F7:31:07:57:A9:DC:D7:81:DA:88:05:F2:37:94:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/vvIw8F-IOEioMYu93B5YO0Hq9vk.roa
Signing time: Tue 24 Mar 2026 14:36:38 +0000
ROA not before: Tue 24 Mar 2026 14:36:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 193.56.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:20:46:b8:09:fc:01:85:63:84:92:15:3e:ef:07:1b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2393ff21c6f7310757a9dcd781da8805f23794d8
Validity
Not Before: Mar 24 14:36:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bef230f05f883848a8318bbddc1e583b41eaf6f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:63:5a:55:2d:91:cb:33:68:c5:e7:e8:b1:d5:
2a:19:e4:9e:05:d7:52:ab:51:81:6b:73:c3:22:9a:
0a:1e:e5:87:91:40:33:96:ca:7e:6a:5f:33:34:23:
98:07:5b:c3:7d:38:33:03:9f:cd:00:3d:3d:2d:d4:
01:a2:a8:45:f8:e7:19:3e:ab:06:2f:81:3d:44:89:
f6:60:d2:37:5f:ab:c7:84:09:8c:50:b4:60:b1:c0:
18:7f:eb:56:e7:f7:a0:8c:b3:d6:bb:30:c3:ed:d2:
17:8b:d8:18:a8:f2:60:d2:36:30:b5:24:0d:1f:df:
96:99:ac:96:77:b5:77:16:94:f3:9a:eb:87:74:7f:
13:d3:0e:d0:c9:84:9e:d8:20:51:93:61:1f:2e:74:
6d:ce:7d:c1:c4:4e:7d:07:06:e3:3f:71:39:c9:7a:
25:95:78:65:2d:40:08:49:d6:f2:a9:fa:47:f2:5a:
9e:9b:80:41:e4:11:10:2c:69:f3:59:ff:5f:02:b4:
d4:78:05:3d:d2:45:9d:a6:91:ab:33:38:bb:bc:28:
f6:60:e4:0e:34:4c:ab:79:a8:05:da:21:fd:e4:bf:
b7:e5:07:00:05:9e:1d:79:bd:31:da:93:0f:75:c2:
9c:da:a3:3e:91:ea:76:15:ec:73:49:4c:5a:9d:57:
ca:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F2:30:F0:5F:88:38:48:A8:31:8B:BD:DC:1E:58:3B:41:EA:F6:F9
X509v3 Authority Key Identifier:
keyid:23:93:FF:21:C6:F7:31:07:57:A9:DC:D7:81:DA:88:05:F2:37:94:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5P_Icb3MQdXqdzXgdqIBfI3lNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/vvIw8F-IOEioMYu93B5YO0Hq9vk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/baeddc-dbf2-447f-b42d-5b30639babf6/1/I5P_Icb3MQdXqdzXgdqIBfI3lNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.160.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:c7:0d:5c:08:d9:f1:0f:70:13:c4:86:b7:1c:f3:af:e0:e2:
06:c1:d8:e0:05:42:41:e2:cc:20:76:c4:92:ef:75:55:42:4c:
45:c9:b6:0a:80:5f:01:36:38:4e:47:3b:29:f5:75:96:80:58:
8b:54:63:27:1b:f2:f5:65:ed:d3:48:03:c2:4e:d1:b6:a6:d9:
ed:5f:e1:32:72:46:cf:9f:2c:74:2c:6a:b0:ed:96:fc:63:e3:
a4:77:7e:ec:ab:00:0e:dc:e7:48:b5:34:18:41:51:d5:fd:3a:
7c:7d:79:7a:3f:2a:16:95:cd:cf:53:f0:f4:f6:9d:89:03:f8:
e0:57:b0:d6:bc:78:fb:e0:85:28:41:3c:f2:b1:e4:f3:59:34:
58:8b:3d:59:b8:a4:dd:39:89:3d:9d:56:24:60:e6:db:59:aa:
5f:aa:01:30:01:63:ab:01:68:25:e6:bd:e0:e8:1f:9c:f3:88:
a3:30:e7:1d:69:f3:81:f8:7d:32:4e:25:32:46:fa:81:3e:dc:
d6:5f:b9:f3:55:ee:72:87:59:2b:fc:f0:e6:99:8f:6f:23:1e:
5a:02:87:c8:bd:25:46:f5:ad:28:f6:67:11:74:a5:81:d1:1d:
0c:b7:7c:60:23:45:fe:16:10:eb:ca:2d:ae:e4:f9:22:0b:75:
6e:e4:cc:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:48:35 2026 by rpki-client