Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/VwIOoEsjTWG7WLDwWRnEu_SP_gI.roa
File: VwIOoEsjTWG7WLDwWRnEu_SP_gI.roa (raw, json)
Hash identifier: TrfT/L1KZq4MYIc5oIkMmrvCH+y3v6MXRIrrL8j/NlQ=
Subject key identifier: 57:02:0E:A0:4B:23:4D:61:BB:58:B0:F0:59:19:C4:BB:F4:8F:FE:02
Certificate issuer: /CN=6d146056f0fbbde618bff011c0f22ba74a5832b7
Certificate serial: 019F21B2083C82A2A12C5FBA98614FB66712
Authority key identifier: 6D:14:60:56:F0:FB:BD:E6:18:BF:F0:11:C0:F2:2B:A7:4A:58:32:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/VwIOoEsjTWG7WLDwWRnEu_SP_gI.roa
Signing time: Thu 02 Jul 2026 07:19:03 +0000
ROA not before: Thu 02 Jul 2026 07:19:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48362
IP address blocks: 185.101.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:21:b2:08:3c:82:a2:a1:2c:5f:ba:98:61:4f:b6:67:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d146056f0fbbde618bff011c0f22ba74a5832b7
Validity
Not Before: Jul 2 07:19:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57020ea04b234d61bb58b0f05919c4bbf48ffe02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:14:ed:4c:c8:bc:23:0b:bf:8d:ef:45:e5:73:
7a:3d:28:e5:e6:80:ce:c2:e8:9d:93:53:2b:79:0e:
fb:a3:b7:cb:17:2c:e3:4b:cd:70:2c:ed:ee:b1:f2:
36:91:a4:01:01:ee:c0:64:f0:58:65:dc:b7:0b:bd:
3d:e2:41:ca:dd:b2:05:07:56:03:56:f4:f2:15:a7:
c7:b5:0e:a8:c0:cf:ea:25:67:5f:65:3b:c7:c6:f2:
e5:63:13:6c:52:8d:ed:f5:bc:94:54:4f:09:e2:a6:
7e:83:66:4b:7e:2d:a2:1a:98:b1:05:d4:6c:75:89:
ab:99:15:4f:c1:48:21:8c:75:41:a8:2f:c8:28:ba:
21:2f:ef:ba:4a:02:dc:ba:74:67:11:b4:fa:86:49:
41:ec:0c:00:90:15:17:2d:73:22:04:df:7e:89:52:
eb:d7:b6:68:98:d2:fd:31:fd:48:bf:7b:aa:cd:4e:
18:3c:d5:d4:d2:68:fb:0f:e3:e0:d3:fd:94:9f:01:
85:65:ae:ae:fc:7e:73:32:4b:24:34:fb:3f:bf:74:
47:44:e3:0a:c7:0a:1f:31:9b:06:4c:f7:5d:3f:0a:
a2:b7:90:06:f4:53:af:47:a1:c4:03:05:26:8c:a1:
2f:87:fc:08:e5:10:cc:50:40:e4:5f:4f:bc:2c:1d:
f2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:02:0E:A0:4B:23:4D:61:BB:58:B0:F0:59:19:C4:BB:F4:8F:FE:02
X509v3 Authority Key Identifier:
keyid:6D:14:60:56:F0:FB:BD:E6:18:BF:F0:11:C0:F2:2B:A7:4A:58:32:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/VwIOoEsjTWG7WLDwWRnEu_SP_gI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.8.0/22
Signature Algorithm: sha256WithRSAEncryption
73:33:e3:ac:2d:56:4e:05:aa:56:a5:4f:77:30:04:cc:96:e8:
bc:5e:7c:5a:94:7b:80:66:84:32:ff:5a:8a:4b:8c:5b:ed:06:
dc:83:32:27:d4:02:20:eb:0c:29:e9:09:98:ed:7c:4b:0d:1f:
39:59:55:dc:97:a5:16:e6:bd:b7:d1:da:28:8e:c4:1d:dd:3f:
cb:26:8b:32:f9:59:75:5e:eb:ff:ab:01:51:ae:fb:44:c1:c0:
e8:85:78:73:d6:76:24:be:d1:33:e3:59:92:6a:dc:fd:d9:de:
e4:58:20:c9:18:b4:d6:a0:8f:1a:ff:44:ef:59:94:65:91:66:
13:a0:2e:c5:32:5e:2e:35:f2:e3:82:42:db:ff:a8:6d:ff:fe:
82:3b:07:90:c0:d7:8d:c0:fb:0c:e8:83:88:28:6b:25:c0:7c:
c3:0a:fe:84:0b:92:75:a5:e5:b2:37:49:80:57:ab:8b:a3:30:
6d:77:3a:11:7c:2b:3c:bb:6a:ed:03:95:1e:38:e7:fa:af:0a:
7e:36:4a:6c:dc:72:2d:c6:38:62:7c:00:27:ac:c2:2c:91:9c:
d8:36:fe:73:42:f0:57:18:0f:8b:fd:ce:d7:4a:2a:ec:68:fe:
dc:9d:17:f0:d4:0a:40:bf:ed:24:af:b7:8c:e4:7e:ec:03:b2:
fd:55:1e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:38 2026 by rpki-client