Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/VF_ocWtmaOYt5rPCCAuRRmn4CF4.roa
File: VF_ocWtmaOYt5rPCCAuRRmn4CF4.roa (raw, json)
Hash identifier: 5UMRp2lQ5orsOE6QVDLa4LJm8Ra54QjSg0zQAcoJQB8=
Subject key identifier: 54:5F:E8:71:6B:66:68:E6:2D:E6:B3:C2:08:0B:91:46:69:F8:08:5E
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 01A0ED879002437CF3B935FBDEFB2FB05B95
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/VF_ocWtmaOYt5rPCCAuRRmn4CF4.roa
Signing time: Tue 29 Sep 2026 14:17:59 +0000
ROA not before: Tue 29 Sep 2026 14:17:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402390
IP address blocks: 193.3.16.0/24 maxlen: 24
193.31.112.0/24 maxlen: 24
193.31.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:87:90:02:43:7c:f3:b9:35:fb:de:fb:2f:b0:5b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Sep 29 14:17:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=545fe8716b6668e62de6b3c2080b914669f8085e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:61:c7:a4:0d:28:30:67:b5:23:5e:3f:90:d0:
11:6d:8b:91:32:a3:f8:de:7e:7c:47:b7:d8:95:38:
93:dd:20:cd:c3:e9:08:f0:f6:4d:12:55:30:05:82:
8c:9b:07:39:97:ee:b0:05:0b:9d:4e:01:30:63:65:
d2:47:d8:c0:b7:69:4c:28:a9:d9:f9:62:35:a1:08:
9c:0d:fd:1d:81:10:fc:f2:b9:36:50:20:d7:cb:88:
e3:5f:17:27:cc:d6:43:2f:db:27:7f:9e:6a:c4:b7:
76:ef:b4:72:57:e0:1c:6a:57:23:30:29:ac:38:47:
ef:57:58:e4:2b:2b:45:bf:97:8f:2f:db:e7:8e:f2:
e2:c5:f9:ad:fe:a5:eb:78:1d:62:71:f0:8b:5e:50:
fd:68:96:ef:e1:07:81:a3:66:1b:0d:0c:95:8c:55:
2c:ec:c5:6e:05:88:0e:96:3e:9f:e7:c5:08:be:8b:
60:df:e8:54:3a:9a:c1:e1:b7:21:01:ef:6c:04:65:
ed:2b:99:fb:23:a4:35:a9:5b:fe:9f:c9:62:f2:19:
70:d5:5f:1e:51:7b:66:42:47:06:7e:ce:d2:02:9b:
f3:de:e2:6c:6c:d9:0e:e0:16:ce:e2:cd:bd:c6:89:
d4:17:e2:a5:bd:0c:af:0e:f6:23:34:3c:1f:0e:eb:
a4:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5F:E8:71:6B:66:68:E6:2D:E6:B3:C2:08:0B:91:46:69:F8:08:5E
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/VF_ocWtmaOYt5rPCCAuRRmn4CF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.16.0/24
193.31.112.0/24
193.31.115.0/24
Signature Algorithm: sha256WithRSAEncryption
53:3e:33:28:43:1e:53:7e:df:6c:94:09:fb:3f:c4:3f:c4:16:
9d:c8:ae:3a:4a:a2:2b:84:a4:4d:83:99:12:27:3e:b0:d4:4e:
15:85:6e:b9:e6:1e:e2:84:d8:00:fa:d1:d9:ba:a2:76:15:f7:
6c:b6:53:0e:77:4a:9a:8c:4b:bf:51:22:90:81:47:8c:ee:f9:
ed:28:fb:85:ba:c0:2d:d5:e8:cf:75:17:63:2e:f6:2f:51:f8:
9c:cc:a8:95:9f:1a:84:ce:34:b7:99:14:17:d4:ff:d5:5c:6d:
71:cc:6a:ea:65:cd:cc:7c:87:5a:00:40:3c:62:fc:1b:3b:cd:
02:87:80:eb:9a:04:20:46:bc:69:a1:c7:73:ce:ca:c6:d0:12:
c2:bf:8b:45:d3:a9:f9:83:be:e2:3e:d6:f0:9a:b2:40:44:c8:
0a:7d:bd:6a:be:c9:a8:63:3e:7c:1b:2a:e6:69:54:84:b2:34:
98:07:c8:26:d8:eb:99:28:47:35:c2:04:27:af:f5:07:b9:ff:
71:97:3b:11:0d:ab:1e:2c:cb:6b:cf:ee:ab:c7:d5:8c:dd:ce:
76:27:e1:82:b2:19:a5:8c:86:10:c6:ff:43:c5:53:90:b3:d3:
c1:f7:dd:ab:c1:76:93:7c:b0:e1:23:13:95:9e:de:07:dc:38:
43:bd:30:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:02:06 2026 by rpki-client