Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/v-hy-AA0bMP0YRPYj1qavNzCvXY.roa
File: v-hy-AA0bMP0YRPYj1qavNzCvXY.roa (raw, json)
Hash identifier: 7R193xmOU591Bwip4tiZ71RqXjAryXJbfj2mjnypeSE=
Subject key identifier: BF:E8:72:F8:00:34:6C:C3:F4:61:13:D8:8F:5A:9A:BC:DC:C2:BD:76
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 01A0D310965F4EBFA1E76B4ABB9E26CD1671
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/v-hy-AA0bMP0YRPYj1qavNzCvXY.roa
Signing time: Thu 24 Sep 2026 10:57:54 +0000
ROA not before: Thu 24 Sep 2026 10:57:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209207
IP address blocks: 185.231.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 22:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:10:96:5f:4e:bf:a1:e7:6b:4a:bb:9e:26:cd:16:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Sep 24 10:57:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bfe872f800346cc3f46113d88f5a9abcdcc2bd76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:81:84:14:66:d7:6e:7e:c7:c5:34:7e:16:8b:
37:f2:1a:d4:d2:b9:67:cd:70:33:d3:58:2f:75:45:
b2:d9:3c:67:be:d5:26:d8:02:5c:08:d1:16:72:7e:
cb:a1:99:d3:89:4d:19:76:d7:40:fd:45:44:a8:49:
2c:39:ca:67:23:03:b8:56:45:0e:c0:50:d5:46:bd:
98:92:6d:5b:37:ab:fa:9a:1e:43:d7:f4:e8:d7:d3:
90:d7:4c:31:0b:81:ba:27:cb:66:df:d8:ed:36:9c:
e9:45:9e:a9:05:c1:4a:2d:58:93:a0:b9:80:62:90:
b9:f9:d5:ab:61:16:85:0a:0e:fc:f9:8e:db:3f:40:
47:9c:59:57:56:da:5f:d8:14:c6:54:72:5c:37:75:
31:0a:bd:14:cf:43:a4:1b:ef:15:95:f0:10:f7:05:
d9:ad:3b:dc:f5:28:f5:38:18:8f:82:94:dd:9e:09:
ca:93:8c:b6:a9:b1:41:5e:64:a9:6d:15:09:74:e2:
cb:08:0a:38:93:a4:56:47:aa:f2:ef:e1:4a:61:6d:
44:95:9c:92:2a:5e:cb:55:24:f8:b1:22:49:34:5b:
cc:2c:f1:ba:22:00:0d:8c:e3:17:2a:b3:9d:3c:f2:
78:e7:e5:d9:51:53:c8:92:7c:f2:19:fc:58:71:ae:
bf:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E8:72:F8:00:34:6C:C3:F4:61:13:D8:8F:5A:9A:BC:DC:C2:BD:76
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/v-hy-AA0bMP0YRPYj1qavNzCvXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.231.204.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:45:9f:ff:da:21:a7:44:92:78:4b:70:ba:8a:0e:74:5d:32:
3e:27:4e:97:8e:0f:bc:31:04:c0:e7:15:87:d4:44:c4:64:d4:
ef:17:a4:6f:8d:a0:49:76:7b:13:b4:62:a7:83:87:0c:e3:15:
78:1e:da:d9:e3:18:d4:29:fe:55:eb:be:b7:99:a0:21:f3:69:
24:6b:db:31:29:32:f5:8a:55:65:68:b0:b7:a9:95:ef:d6:c4:
0f:b1:83:42:fc:ae:15:5f:08:59:98:66:92:c4:1d:b8:ef:44:
49:8b:4c:7f:86:5a:5e:31:d8:8b:13:a1:b1:88:ad:8d:68:59:
6d:d4:40:98:f9:be:e8:42:7d:c1:1b:84:51:af:8b:25:23:f7:
ad:c1:ae:e2:dc:44:cb:92:4d:d4:fc:02:dd:22:05:d3:56:56:
bb:37:09:62:bf:02:d2:e2:38:d4:4e:94:b1:96:2a:e0:42:f5:
72:3f:5d:b1:c9:79:3d:e5:29:fe:a0:b6:ee:7f:de:25:61:74:
c2:f0:d7:c6:33:97:4c:76:a6:e2:c9:c7:42:dc:64:ad:d3:2b:
fa:df:8a:aa:d9:df:e8:41:15:68:63:4d:f1:ac:cd:72:37:fa:
03:fd:5c:2a:20:d6:3f:d0:8c:7f:9c:f5:dc:df:b1:da:64:89:
51:90:40:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:25:06 2026 by rpki-client