Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/Vfway6gjY1iitVvEJ-62WkbAaKw.roa
File: Vfway6gjY1iitVvEJ-62WkbAaKw.roa (raw, json)
Hash identifier: YoG4aLjZBDITy41hP4+1/Uzunf0PlBJx5oksv+dbA6w=
Subject key identifier: 55:FC:1A:CB:A8:23:63:58:A2:B5:5B:C4:27:EE:B6:5A:46:C0:68:AC
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019F269463AAA184D5D806A62AA3654683A2
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/Vfway6gjY1iitVvEJ-62WkbAaKw.roa
Signing time: Fri 03 Jul 2026 06:04:46 +0000
ROA not before: Fri 03 Jul 2026 06:04:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402343
IP address blocks: 213.189.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:26:94:63:aa:a1:84:d5:d8:06:a6:2a:a3:65:46:83:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jul 3 06:04:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55fc1acba8236358a2b55bc427eeb65a46c068ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f4:5b:89:cf:e9:d6:b0:c7:6f:76:a5:0b:0c:
e7:20:4e:d7:73:89:14:8d:18:4f:c7:27:73:35:4b:
b7:93:6d:38:df:36:c6:57:9a:49:2f:f1:1f:e6:9f:
4a:db:3d:4f:f1:06:b4:f6:4d:9c:77:d8:85:df:21:
f8:a9:11:03:f2:8b:be:75:08:87:51:37:de:bd:ea:
5a:ce:73:97:34:7a:68:05:97:3a:26:1f:67:88:3d:
e7:3b:f9:c0:cd:ba:b1:ee:85:e8:db:10:f2:13:5e:
91:5e:8e:b5:f5:7a:3d:ab:43:82:09:27:50:2d:39:
d1:d0:93:4c:eb:71:89:09:24:63:7e:50:b6:4d:e0:
e0:5e:54:ca:e9:b5:a8:d2:15:85:48:73:fe:17:00:
1d:0a:5a:7b:52:8e:68:3d:22:78:63:87:22:ae:7a:
6f:e3:37:91:4f:f6:a8:c4:db:40:83:ea:c6:1e:23:
7b:42:4f:56:e2:b8:1f:62:2c:b3:6a:86:43:9e:f7:
4a:df:ca:1e:be:20:e7:04:da:3a:37:5e:15:45:9d:
78:ac:ad:bc:ad:8d:03:04:d4:5b:21:09:b4:27:85:
69:f0:73:20:ee:e8:d3:e4:4e:4b:bd:3f:23:b2:c2:
03:07:a9:3d:c2:b4:65:4c:ee:85:50:ab:ec:fd:70:
ba:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FC:1A:CB:A8:23:63:58:A2:B5:5B:C4:27:EE:B6:5A:46:C0:68:AC
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/Vfway6gjY1iitVvEJ-62WkbAaKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.189.22.0/24
Signature Algorithm: sha256WithRSAEncryption
49:60:c7:4e:3f:4e:fb:42:a2:69:cc:28:9f:39:0e:c3:16:a3:
9d:01:f2:cc:b6:03:29:76:6f:1d:d2:6b:d0:b2:dc:d6:d0:db:
5e:30:cb:8e:f9:dd:30:6a:e5:49:20:0c:f4:7b:f4:f5:bc:4c:
c9:df:cb:81:9b:3e:74:a8:ce:1d:ed:84:26:21:10:43:03:6e:
fd:6c:32:d1:aa:ba:b6:58:c1:0c:0c:52:2c:74:a4:45:f3:33:
e7:88:88:4a:fc:b0:0e:1a:ea:5a:1e:40:fe:f9:66:7c:a7:e5:
b8:2f:73:48:08:36:2c:9d:98:44:95:c4:18:0f:92:39:98:94:
68:74:c0:80:da:7d:c5:90:98:8e:1d:68:e0:f6:8e:0f:5b:61:
32:a4:96:c7:38:2f:8c:52:3e:da:1c:5f:7b:a0:5e:be:70:6f:
49:81:19:2e:aa:7c:30:1f:2d:07:3e:82:fb:1e:f6:a8:03:ca:
f8:e8:5a:4f:94:85:48:38:c7:9a:5f:82:5f:b3:97:d8:46:4a:
26:dd:8e:ec:fc:2b:1c:f8:3a:23:3f:74:dc:3f:b2:5f:e5:94:
a4:49:f9:c4:3a:c6:6e:3a:30:9d:55:ed:57:63:13:e6:3f:76:
59:1b:2f:2e:d2:5a:07:a9:44:b0:d7:36:3a:f5:c2:51:ee:a0:
ee:29:62:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:26:17 2026 by rpki-client