Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/1-TxDLUybrHgjjEPhn7NOXIB_vns.roa
File: 1-TxDLUybrHgjjEPhn7NOXIB_vns.roa (raw, json)
Hash identifier: A1//aDig/4cti2Zyhol9EwSmWR/VoiMQleu0GjtLiH4=
Subject key identifier: F9:3C:43:2D:4C:9B:AC:78:23:8C:43:E1:9F:B3:4E:5C:80:7F:BE:7B
Certificate issuer: /CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Certificate serial: 019F428CAE081C949B426484DA1CD42A5B5D
Authority key identifier: B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/1-TxDLUybrHgjjEPhn7NOXIB_vns.roa
Signing time: Wed 08 Jul 2026 16:25:43 +0000
ROA not before: Wed 08 Jul 2026 16:25:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4849
IP address blocks: 46.253.2.0/24 maxlen: 24
46.253.3.0/24 maxlen: 24
91.132.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:8c:ae:08:1c:94:9b:42:64:84:da:1c:d4:2a:5b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Validity
Not Before: Jul 8 16:25:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f93c432d4c9bac78238c43e19fb34e5c807fbe7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bf:7c:9a:6b:55:5a:8e:ad:e4:4e:97:36:7c:
81:6e:1f:6b:8e:ed:b0:ef:74:d1:97:21:ea:94:6f:
29:ab:a5:ac:b7:c0:52:11:76:9b:eb:64:88:54:05:
2c:7f:75:2a:fa:9b:9a:5d:fb:04:4a:31:9f:52:e3:
0c:c4:fd:0a:a8:ad:25:fb:f2:90:b2:ba:c4:c0:67:
ae:d6:6c:47:69:91:35:28:62:bd:09:c5:71:85:d9:
d2:70:b8:ce:b0:c9:85:6c:cd:e4:43:1a:8a:3c:49:
66:28:8b:56:9f:69:41:fa:23:d3:99:7a:8e:85:6c:
30:76:89:c9:04:94:79:42:db:ff:d3:5a:69:34:92:
85:d6:14:8b:ae:ec:74:51:39:c2:db:25:76:75:18:
df:13:29:5a:0a:55:9c:8f:09:0f:bb:ca:6b:e1:2d:
30:97:28:64:c9:c5:f5:11:8d:6c:ea:09:27:0b:9c:
9d:9f:7b:a3:af:f2:83:6d:c4:9c:82:d5:85:f4:18:
5f:f7:d1:16:43:27:94:0a:81:3f:b8:35:5a:aa:dd:
25:a3:cb:c3:f0:30:42:66:cc:53:3f:99:e7:21:61:
80:51:1a:b9:5b:73:ba:bf:ce:0c:75:03:a2:9e:89:
29:7f:5e:8c:9e:d5:a2:4e:b0:07:3e:0c:c2:2a:a0:
74:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:3C:43:2D:4C:9B:AC:78:23:8C:43:E1:9F:B3:4E:5C:80:7F:BE:7B
X509v3 Authority Key Identifier:
keyid:B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/1-TxDLUybrHgjjEPhn7NOXIB_vns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.2.0/23
91.132.62.0/24
Signature Algorithm: sha256WithRSAEncryption
41:10:17:e3:a3:3b:4f:e8:cd:c4:2a:b3:6c:9d:48:01:e3:91:
57:82:59:dc:31:5c:9f:99:c4:1d:ce:16:bd:92:a8:03:83:a2:
ca:d1:5a:1c:78:54:e8:f5:8f:3d:13:e1:0c:eb:2e:55:b9:7c:
da:b9:80:0e:17:21:e3:04:6d:fe:cf:0d:16:5f:f9:b4:02:79:
d2:15:28:dc:bc:aa:71:90:93:30:da:7f:62:7f:d6:f5:9f:a9:
dc:68:16:79:6e:67:5b:43:58:d9:e8:55:c3:ea:6b:8c:20:9b:
43:06:53:aa:42:a2:b9:c0:6f:a9:2c:20:c7:b0:fb:9e:93:0c:
be:a9:b6:0b:42:2c:d9:db:58:13:9b:d5:c4:c9:8f:6d:ed:d9:
ee:22:6a:ac:6b:63:e9:94:2f:f6:c8:39:8b:90:30:6e:57:b2:
c8:5b:b2:90:d4:a0:8e:e3:d5:4e:75:38:a6:f6:a8:e6:36:22:
ea:ca:9b:15:3f:37:55:37:4c:54:61:23:35:b2:7f:6d:3e:fb:
e4:e5:e7:1c:1c:eb:63:85:f6:d2:50:bc:04:56:51:a8:87:0f:
87:3e:2e:23:b7:bf:9e:67:80:86:a2:91:e0:ed:b6:54:dc:64:
4c:5e:b0:54:a6:d1:a5:ca:69:94:a2:73:00:a9:ac:b2:ac:e5:
af:d8:72:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:55 2026 by rpki-client